KNOWLEDGE BASE

Data Attributes for LBLM Network Security Concerns


Published: 08 Feb 2021
Last Modified Date: 09 Feb 2021

Issue

What data is sent from Tableau Desktop and Tableau Prep Builder to Tableau Server/Tableau Online and then from Tableau Server/Online to the Login-based License Management (LBLM) service hosted on AWS? 

Environment

  • Tableau Server
  • Tableau Online
  • Tableau Desktop
  • Tableau Prep Builder
  • 2020.1 and later.

Resolution

When configured for LBLM activation, Tableau Desktop or Tableau Prep Builder send data to Tableau Server or Tableau Online.  Tableau Server on-premise and Tableau Online work as a proxy to the external Tableau license service hosted on AWS to approve the client software activation or refresh the current activation.  The following tables list the data transferred between the Tableau systems. 

Tableau Desktop/Prep to Tableau Server/Tableau Online for Authorization
FieldExample ValueDescription
DeviceFingerprint 

v1:0FE7BC76635582447F59480B3E41BD16DD592641;

4D4D3AAC7BE310367BF28878AB32629732BD4617;

Client machine device fingerprint; Flexera hashing algorithm. 
RequestedDurationMilliseconds 60000 Token duration requested.
Product Tableau DesktopProduct information. 
SubProducts Professional/Personal Product information.
VersionPieces 20201,20 Version data.
BuildDate 1585082360750 Build number; unsigned int 64 format. 
Authenticity Token8uiwIQ1MwzLBrE9g2lHCqHkmpDJ7wot8 Security to ensure client is valid. 
Language enCurrently not used.
 
Tableau Server to the License Service
FieldExample ValueDescription
ClientDeviceFingerprint 

v1:0FE7BC76635582447F59480B3E41BD16DD592641; 

4D4D3AAC7BE310367BF28878AB32629732BD4617; 

Client machine device fingerprint; Flexera hashing algorithm. 
RequestedDurationMilliseconds 60000 Token duration requested.
ClientProduct Tableau DesktopProduct information.
ClientSubProducts ProfessionalProduct information.
ClientVersionPieces 20201,20Product version of client. 
ClientBuildDate1585082360750Client build: unsigned int 64 format.
UserId 3Unique user mapped value.
SeatId n/aFuture use field.
SeatType CreatorRole.
AuthorityType fulfillmentId Server product key validation.
Authority FID_738efff7_eeec_4ddd_95a8_cdcff2f05134Server fulfillment.

Tableau Online to the License Service
 
FieldExample ValueDescription
ClientDeviceFingerprint 

v1:0FE7BC76635582447F59480B3E41BD16DD592641; 

4D4D3AAC7BE310367BF28878AB32629732BD4617; 

Client machine device fingerprint; Flexera hashing algorithm.
RequestedDurationMilliseconds 60000 Token duration requested. 
ClientProduct Tableau Desktop Product information. 
ClientSubProductsProfessionalProduct information. 
ClientVersionPieces 20201,20 Product version of client. 
ClientBuildDate 1585082360750 Client build; Unsigned int 64 format.
UserId 3Unique user mapped value.
SeatId n/aFuture use field.
SeatType CreatorRole.
Metadata 50No used.

Tableau Desktop/Prep to Tableau Server/Online for Internal LBLM Reporting 
 
FieldExample ValueDescription
AtrChainIdcf4bdf58-6af2-11ea-9a74-065fe442cdf8 License  identifier
ATRExpirationDate 20-Mar-2020 22:37:30 Token expiration date. 
VirtualMachineStatus FalseClient vm status. 
HostNameUsername.company.lan Machine's Hostname
FirstNameJohnUser activation data.
LastNameSmith 
Emailjohn.smith@company.com 
LastRegistrationDate 01/15/2020 01:08:59.706 AM User's registration timestamp.
LoggedInUser jsmithUser ID on the client machine.
Company/CustomRegistration Foo Inc.  
MachineOSMicrosoft Windows 10 Enterprise  
DomainName company.lan 
HardwareSerialNumber JVTWS52 Unique Bios Serial
ProductVersion 2020.1.0  
ProductType Tableau Desktop  
DeviceFingerPrint

v1:0FE7BC76635582447F59480B3E41BD16DD592641; 

4D4D3AAC7BE310367BF28878AB32629732BD4617; 

Client machine device fingerprint; Flexera hashing algorithm.
Desktop report version 1Not used.
AuthenticityToken 8uiwIQ1MwzLBrE9g2lHCqHkmpDJ7wot8Security to ensure client is valid. 
Did this article resolve the issue?