License server response: Validation failed

Problem

Users are experiencing intermittent errors when attempting to retrieve licenses from the License Vault, accompanied by the error message indicating that the license server response did not pass the data integrity check.

Cause

This issue is commonly due to network configurations where proxy servers, SSL inspection, or firewalls intercept or modify the HTTPS responses from JetBrains services. Additionally, incorrect firewall rules and domain blocks for essential JetBrains services could contribute to this issue.

Resolution

Verify Network Configuration

1. Ensure that traffic to the following domains is not intercepted, rewritten, or blocked by your proxy server, firewall, or SSL inspection device:

   • plugins.jetbrains.com
   • account.jetbrains.com
   • License Server URL (configured within your organization)

   Refer to the JetBrains network access requirements for the complete list of required domains.

2. If modifying traffic handling is not feasible, whitelist the necessary JetBrains domains.

Configure Firewall Rules

For proper operation of locally installed JetBrains IDEs and License Vault, whitelist the following executables:

IntelliJ IDEA (replace <Version> with the appropriate version):

• System install:
  • C:\Program Files\JetBrains\IntelliJ IDEA <Version>\bin\idea64.exe
  • C:\Program Files\JetBrains\IntelliJ IDEA <Version>\jbr\bin\java.exe
  • C:\Program Files\JetBrains\IntelliJ IDEA <Version>\jbr\bin\jcef_helper.exe
• Toolbox/user install:
  • C:\Users\<user>\AppData\Local\JetBrains\IntelliJ IDEA <Version>\bin\idea64.exe
  • C:\Users\<user>\AppData\Local\JetBrains\IntelliJ IDEA <Version>\jbr\bin\java.exe
  • C:\Users\<user>\AppData\Local\JetBrains\IntelliJ IDEA <Version>\jbr\bin\jcef_helper.exe

JetBrains Rider:

• Follow the same rules as IntelliJ IDEA, replacing IntelliJ IDEA with Rider.

JetBrains Gateway/Remote Development:

• gateway64.exe – e.g. C:\Program Files\JetBrains\JetBrains Gateway <Version>\bin\gateway64.exe
• jetbrains_client64.exe – e.g. C:\Users\<user>\AppData\Local\JetBrains\JetBrainsClientDist...\bin\jetbrains_client64.exe

Workarounds for JetBrains Marketplace Restriction

If you wish to prevent users from directly accessing JetBrains Marketplace while maintaining License Vault functionality:

1. Whitelist plugins.jetbrains.com as it is critical for License Vault operations, but utilize IDE Provisioner to manage plugin availability and disable Marketplace access in the IDEs.
2. Refer to Disable JetBrains Marketplace access.

Additional Guidance for Centralized Management

To streamline IDE and plugin deployment, consider:

1. Enabling IDE Provisioner for your organization.
2. Configuring Toolbox App to manage updates and distribute IDE versions and settings centrally.

These tools ensure consistent configurations and help enforce policies across your development team.