No POODLEs Allowed!

[jessica.t]

Just kidding! But have you downloaded your Autodesk License Hotfix yet? Find out more to see if this affects you!

What is Poodle?

Poodle SSLv3 vulnerability is registered in the Common Vulnerabilities and Exposures systems as CVE-2014-366. For more information please visit the CVE dictionary.

Remediation Plans

We are aware of the Poodle SSL v3 vulnerability and we are performing emergency maintenance on our servers to mitigate these issues. When servers are updated, there may be service interruptions for Windows,Linux and Mac users that can be remediated with downloading a security hotfix.

Customer Impacts

When SSLv3 is disabled to address the POODLE vulnerability a customer who hasn't applied the Licensing hotfix will have the following impacts.

Impacts after disabling SSLv3

Online License Transfer and online activation will not work on Linux based products

• Error Behavior: Online License Transfer and online activation does not work.
• Who: All versions of all Linux products

Trial promotions will not work for Mac products

• Error Behavior: Customers will not see any ongoing promotions on trial dialog; rather just the trial counter with option to activate.
• Who: All Mac customers running a trial

Desktop Subscription: First Time Login Fail for Windows & Mac products

• Error Behavior: User will receive error message when attempting to login to server for the first time.
• Who: All desktop subs customers who have not yet logged into server for the first time

These failures occur because the server side components have been patched to address the POODLE SSL v3 vulnerability (CVE-2014-3566). The licensing code was depending on SSLv3 and the internet communication fails. The patch updates the licensing client to enable communication using more secure protocols.

Resolution

Installing the appropriate patch referenced below will resolve these issues

Affected Products	Download
All FY14 products (except Smoke 2014 and Maya 2014)	Linux
	Mac
	Windows x64
	Windows x32
(Mac OS only) AutoCAD 2014, Smoke 2014, Maya 2014	Mac
All FY15 products	Linux
	Mac
	Windows x64
	Windows x32

Installation Instructions

1. Make sure that all your Autodesk applications are closed.
2. Download the appropriate hotfix to your computer.
3. Install the hotfix
   • Windows: Execute the patch executable by double clicking on the patch. Wait for the installation to complete
   • Linux: Run the command ./installerR9.sh or ./installerR7.sh
   • Mac OS: Install the package by running the appropriate pkg (installerR9.pkg, installerR8.pkg or installerR7.pkg)
4. Note the hotfix may need to be reinstalled after subsequent installation of other Autodesk product(s).

Note:

The following error messages might occur during licensing hotfix installation:
File Access Denied: Unable to update file_name

This error would occur when the file that is being updated is in use, when the product is running while the licensing hotfix is being applied. The licensing hotfix should be applied after all Autodesk products are closed. There are some licensing components that linger for a minute after the application is closed, and it is best to wait for a few minutes before the licensing hotfix is re-applied.

No files found to licensing hotfix. Folder dst_dir was not found.

This error will occur if the wrong licensing hotfix is being applied or if the licensing hotfix is being applied on a computer that does not have the Autodesk product installed. Please verify that the correct licensing hotfix version is being applied and that the computer has the product installed.

Unsupported platform. 64 bit installer is not supported on 32 bit OS. Please download 32 bit installer

The correct licensing hotfix as per the architecture should be used.

If you need any additional help, please visit us on Twitter @Autodeskhelp or if you have any other product specific questions please post a new message in one our Autodesk Community forums.