First Time Installation (No Previous LLS Detected)

Procedure

  1. Go to the directory where the installer package is located.

    For Windows

    Name: install.bat

    Location: <unzipped-installer-files>\hcl-lls-5.3.0-windows\install.bat

    For Linux

    Name: install.sh

    Location: <unzipped-installer-files>/hcl-lls-5.3.0-linux/install.sh

  2. From the command line, run the install.bat/sh file:

    • On Windows, run the install.bat file as an administrator.
    • On Linux, enter the following commands with root privileges:
      chmod +x install.sh
      ./install.sh

  3. Provide configuration information when prompted by the installer.

    On Windows, specify the installation path for LLS when you are prompted.

    • On Linux, LLS always installs into /opt/hcl-lls. You are not prompted for an installation directory.
    • On Windows, avoid installing in system or user-specific directories such as C:\Program Files or C:\Windows. Install in a non-system directory, for example C:\HCL_LLS5.3.
    • A licenses folder is created automatically in the installation path to store license files. You can add license files at any time after installation.

  4. Enter the TLS Certificate:

    Provide the full path to the certificate file generated by the certificate utility or obtained from a third-party CA.

    Example: C:\HCL_LLS5.3\certificates\server.crt

    Note:

    • The valid format is PEM (.crt).

    • The certificate chain must follow this order: Server certificate → Intermediate certificate → Root certificate

    • Keep track of TLS certificate expiry dates and renew before expiry. LLS does not send expiry notifications.

  5. Enter the TLS Key:

    • Provide the path to the private key file. Example: C:\HCL_LLS5.3\certificates\server.key

    • If the key is encrypted, you can enter the passphrase when prompted.

  6. Enter the Port Number:

    Specify the port on which LLS runs. The recommended port is 443. You can also use any port between 1024 and 65535.

    A fingerprint is generated automatically from the port entered during installation, and is displayed in the console with the prefix v3.lls. The following example shows a completed fingerprint generation:

    Enter the port number (port:443 preferred): 8080

Generating fingerprint...
Fingerprint: v3.lls.xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Fingerprint generated successfully.
    Note:

    • The fingerprint is automatically generated based on the port entered during installation.

    • Fingerprint details are displayed in the console and also saved to installer.txt.

    • Copy the full fingerprint, including the v3.lls. prefix, for license activation.

    Important:

    • The MAC address used for fingerprint generation is automatically selected from the available network interfaces at the time of installation.

    • If a temporary or unstable network adapter (such as Wi-Fi that may be disabled, disconnected, or removed later) is used, it can lead to fingerprint mismatch errors during license activation or future validations.

    • To avoid issues, ensure that a stable and permanent network interface (typically a wired Ethernet adapter) is active during fingerprint creation.

  7. On Linux, provide the user account that the service runs under when you are prompted:

    Please provide the username for the user account that the systemd service should run under
(Please ensure that User has the necessary execute permissions for the installation directory):
    Note:
    • The account must already exist on the machine. If the name provided is not a valid user account, the prompt is repeated.
    • The account must have execute permission for the installation directory.
    • Ownership of the installation directory and the licenses folder is assigned to this account.

    This step does not apply to Windows.

  8. A confirmation message is displayed:

    [SC] CreateService SUCCESS
[SC] ChangeServiceConfig2 SUCCESS
The HCL Local License Server 5.3.0 service is starting.
The HCL Local License Server 5.3.0 service was started successfully.

  9. TLS certificate expiry details are displayed in the console and also saved to hcl_lls_features.log:

    2025/11/06 10:47:11 TLS certificate [Self-Signed, PEM] is valid. Expiry date: 2026-11-06 10:47:11 +0000 UTC

  10. Press any key to close the install.bat/sh file.

    LLS is now installed on your system.

    TLS expiry information is also logged in <lls_install_directory>/logs/hcl_lls_features.log.

  11. Generate your license file. See Post-installation: Generating the license file. Place the generated license file in <lls_install_directory>/licenses.

    Note:

    License file management is independent of the LLS installation. You can add or remove license files at any time. Any update in the licenses folder is logged automatically in <lls_install_directory>/logs/hcl_lls_features.log.

What to do next

  • Verify the server installation. See Verifying HCL Local License Server Installation.

  • Retrieve the following details:

    • The Pool ID, from <lls_install_directory>/logs/hcl_lls_pools.log or from the API endpoint https://<FQDNhostname>:<LLSport>/v1/licensepools.
    • The LLS URL, from <lls_install_directory>/logs/hcl_lls_features.log, which you need to configure product licenses.

For an upgrade from an earlier version rather than a first-time installation, see Version Upgrade Behavior and Backup and Restore.