Data, Security, and Troubleshooting

Dawid Kaczmarek Updated by Dawid Kaczmarek

This article provides full transparency on what data CSL transmits, how authentication tokens are secured, and how to resolve common licensing and registration issues.

Data Sent to Cepheo

Registration Data

Sent once, on first system startup:

Data Point Source
Tenant ID Azure AD tenant identifier from D365FO platform APIs
Environment ID D365FO environment identifier from platform APIs

Telemetry Data

Sent daily by the telemetry batch job:

Data Point Description
Tenant ID Azure AD tenant identifier
Environment ID D365FO environment identifier
Environment name Friendly name of the D365FO environment
D365FO platform version Application platform version
D365FO application version Application release version
Per module: license model Module identifier
Per module: installed version Currently installed module version
Per module: used license count Number of licenses in use

Important: CSL does not transmit any business data, customer records, financial transactions, or personally identifiable information. Only environment identifiers and usage metrics are sent.

Security

Token Encryption

Customer and refresh tokens are encrypted at rest using the D365FO platform's built-in encryption framework. Token values are never displayed in plain text in the user interface.

Token Handling Rules

  • Never copy or transfer token values between environments. Each environment has its own registration and tokens.
  • Never share token values via email, chat, or support tickets.
  • Re-registration requires manual token entry in the current version. Treat this as a security-sensitive administrator operation and restrict access to authorized personnel only.

Access Requirements

The License Management form is accessible to users with read access to the CSLParameters menu item. No custom security roles are defined in CSL — access is managed through standard D365FO security role assignment. System Administrator access is required for token operations and configuration changes.

Cross-Company Scope

License data is shared across all legal entities in the D365FO installation. Switching companies does not change the data shown in the License Management form.

Troubleshooting

License View Is Empty

Symptom Cause Resolution
No rows or blank license columns Normal after installation — license data is populated on first refresh Verify registration is Registered, then click Refresh licenses.

Module Missing from License View

Cause Resolution
Package not deployed successfully Verify deployment in LCS.
AOS not restarted after deployment Restart the AOS — CSL creates module rows on startup.
Module lacks a license provider class Contact Cepheo support.

Expired License

Symptom Resolution
⚠️ icon, expiration date in the past, dashboard warning Contact Cepheo to renew. After renewal, click Refresh licenses to update.

Used Count Exceeds License Quantity

Symptom Resolution
⚠️ icon, Used licenses > License Qty, dashboard warning Contact Cepheo to increase the license quantity, or reduce active users.

Registration Status: Not Registered

Cause Resolution
Firewall blocking outbound HTTPS to the API endpoint Allow outbound TCP 443 to Cepheo Licensing API.
Proxy not configured for AOS service account Configure proxy or add the endpoint to the bypass list.
Endpoint URL incorrect Correct the URL on the Configuration tab, restart the AOS.
Environment not provisioned by Cepheo Contact Cepheo with your tenant ID and environment ID.

Registration Status: Failure

Symptom Resolution
Status = Failure, Status Message shows an error Read the Status Message and audit log. Fix the underlying issue (network, endpoint). Then perform manual token entry and use Refresh token to validate.

Token Expired

Symptom Resolution
Status = Token expired, license data not updating Click Refresh token on the Token Information FastTab. If both batch tasks show Not scheduled, restart the AOS to recreate them.

Batch Jobs Missing

Symptom Resolution
Configuration tab shows Not scheduled for one or both batch tasks Restart the AOS. CSL recreates both batch jobs automatically on startup.

Refresh Licenses Button Fails

Symptom Resolution
Error message after clicking Refresh licenses Check registration status first — fix registration or token expiry before retrying. Check the audit log for error details. Verify network connectivity.

When to Contact Cepheo

  • Registration repeatedly fails with HTTP 401/403 even after verifying network access.
  • Your tenant ID or environment ID is not recognized by the licensing service.
  • You have changed your Azure AD tenant and need re-provisioning.
  • A module does not appear in the License View after deployment and AOS restart.

How did we do?

License Management

Contact