Activating Licenses
This section describes how you can activate the CipherTrust Manager and Connectors licenses. Activating a license involves generating a license and adding it to the CipherTrust Manager.
This section covers the following information:
Caution
As the License Portal limits the number of license strings you can generate, take care to provide the correct lock code for the desired license type before generating the license string. The Key Manager Lock Code produces a Virtual CipherTrust Manager license. The Connector Lock Code produces connector licenses and the KMIP license.
Activating a CipherTrust Manager License
You need a valid and active license on each CipherTrust Manager appliance. You can find the details of your EIDs and available licenses after you have logged on to the License Portal.
You need one Virtual CipherTrust Manager license per Virtual CipherTrust Manager instance. The license will not replicate across a cluster.
Generate a CipherTrust Manager License
Log on to the License Portal. Refer to Logging on to the Portal for details. The Products tab is displayed.
Under Products, expand the CipherTrust Manager license.
Note
Alternatively, use the Search option located at the top right corner to locate a specific product. You can locate details of your ordered products by either searching the partial or complete product name (product version is NOT required).
Under Actions, click Activate for the desired entitlement. The Order Activation page is displayed.
Select the product and enter 1 in the Quantity To Activate.
Obtain the Key Manager Lock Code:
Log on to the CipherTrust Manager GUI.
Open the Admin Settings application.
In the left pane, click Licensing.
Click the Lock codes tab.
Click to expand Key Manager Lock Code.
Copy the Key Manager Lock Code. This lock code is needed to activate a CipherTrust Manager license.
Caution
Do not copy the Connector Lock Code.
Return to the License Portal.
Paste the copied lock code in the Extended Custom field under Product Locking.
Select the desired Time Zone.
Click Activation. This initiates the entitlement activation process.
Note
The license string generated for one CipherTrust Manager cannot be used on any other CipherTrust Manager.
A message stating that activation is completed successfully is displayed on the Order Activation page.
The generated license file is available for download. Now, you should add the license to the CipherTrust Manager, as described below.
Add the License to the CipherTrust Manager
Click Download License File. The
license.zip
file is downloaded to your local machine.Extract the ZIP file. The default license file is
lservrc
.Open the
lservrc
file in a text editor.Review the license string. For example, a sample string is given below. Actual string for your license will be different.
16 Virtual_KeySecure Ni LONG NORMAL STANDALONE AGGR 1_KEYS INFINITE_KEYS 11 SEP 2020 4 0 11 SEP 2023 3 59 NiL SLM_CODE CL_ND_LCK NiL *1MKGRPVF5ATYYQ30400 NiL NiL NiL 5_MINS NiL 0 BW0lQ8jO9Y1Qj:7Ad9acfol7VHKOLethx27eRl58TZVUMuWObisxl,2LhpWLfptGVbsDyuPcZJJnccohVRArKQ3C##AID=bc91784c-eec3-4742-8002-f03859d6f52b
Copy the entire license string.
On the CipherTrust Manager GUI:
Open the Admin Settings application.
In the left pane, click Licensing.
Click the Features tab, if needed.
Click Add license. The Add License dialog box is displayed.
Paste the copied license string to the License String box.
Click Add.
Now your CipherTrust Manager has an Active license. The CipherTrust Manager license is displayed in the features list. The Expiration date indicates how long the license is valid.
To view more details about the license, click the overflow () icon.
Repeat these steps for every Virtual CipherTrust Manager instance. CipherTrust Manager licenses are not replicated across a cluster.
Activate a CipherTrust Manager license using KSCTL
Retrieve the 'Key Manager Lock Code'.
ksctl licensing lockdata
Log on to the License Portal. Refer to Logging on to the Portal for details. The Products tab is displayed.
Under Products, expand the CipherTrust Manager license.
Note
Alternatively, use the Search option located at the top right corner to locate a specific product. You can locate details of your ordered products by either searching the partial or complete product name (product version is NOT required).
Under Actions, click Activate for the desired entitlement. The Order Activation page is displayed.
Select the product and enter 1 in the Quantity To Activate.
Paste the copied Key Manager lock code in the Extended Custom field under Product Locking.
Select the desired Time Zone.
Click Activation. This initiates the entitlement activation process.
Note
The license string generated for one CipherTrust Manager cannot be used on any other CipherTrust Manager.
Copy the License String. The license string is needed to install the license on CipherTrust Manager.
Note
The license string generated for one CipherTrust Manager cannot be used on any other CipherTrust Manager.
Activate your product by entering the License String.
ksctl licensing licenses add -l "<license string>"
Repeat these steps for every Virtual CipherTrust Manager instance. CipherTrust Manager licenses are not replicated across a cluster.
Activating a Connector License
To register and use a Connector on your CipherTrust Manager, you need to have a valid and active license for that Connector on your appliance. You can find the details regarding your EID and your available Connector licenses on the License Portal.
Note
Unlike the Key Manager Lock Code, the Connector Lock Code is cluster-wide. This means that a license applied using the Connector Lock Code replicates across the cluster.
Instructions provided in this section applies to all the supported Connectors. Exceptions are: for CCKM, the usage unit is Cloud Units; for DDC, the unit is Data Allowance; and for CTE and similar Connectors, the unit is Clients.
Generate a Connector License
Log on to the License Portal.
Under Products, expand the Connector license that you would like to activate.
Note
Alternatively, use the Search option located at the top right corner to locate a specific product. You can locate details of your ordered products by either searching the partial or complete product name (product version is NOT required).
Under Actions, click Activate for the desired entitlement. The Order Activation page is displayed.
(Flex connectors only) Select the desired Variant.
Select the product and enter the Quantity To Activate.
Obtain the Connector Lock Code:
Log on to the CipherTrust Manager GUI.
Open the Admin Settings application.
In the left pane, click Licensing.
Click the Lock codes tab.
Click to expand Connector Lock Code.
Copy the Connector Lock Code. Every CipherTrust Manager appliance has a unique Connector Lock Code. This lock code is needed to activate a Connector license for the CipherTrust Manager.
Note
In a CipherTrust Manager cluster, the Connector Lock Code is applicable to all nodes of the cluster to enforce connector licenses across the cluster nodes. When a Connector license is activated for one CipherTrust Manager appliance, the license is replicated on all the nodes of the cluster.
Return to the License Portal.
Paste the copied lock code in the Extended Custom field.
Click Activation. This initiates the entitlement activation process.
A message stating that activation is completed successfully is displayed on the Order Activation page.
The generated license file is available for download. Now, you should add the license to the CipherTrust Manager, as described below.
Add the License to the CipherTrust Manager
To add the license to the CipherTrust Manager:
Click Download License File. The
license.zip
file is downloaded to your local machine.Extract the ZIP file. The default license file is
lservrc
.Open the
lservrc
file in a text editor.Review the license string. For example, a sample string is given below. Actual string for your license will be different.
16 ProtectApp 1 LONG NORMAL STANDALONE AGGR 15_KEYS INFINITE_KEYS 21 SEP 2020 4 0 NEVER NiL SLM_CODE CL_ND_LCK NiL *1XHNSF77G7HNWRD0400 NiL NiL NiL 5_MINS NiL 0 xa8art1Fe2UypKVmcutYV44c2Jj3jRAB:RRNwbdZfa3HHkJ2vXmNQ54MLqPrBlj6LnBOf,mXzD6GU7z,0HzsyqLr##AID=67e179ea-f756-4657-8e18-f940652e2e32
Copy the entire license string.
On the CipherTrust Manager GUI.
Open the Admin Settings application.
In the left pane, click Licensing.
Click the Features tab, if needed.
Click Add license. The Add License dialog box is displayed.
Paste the copied license string to the License String box.
Click Add.
Now your Connector has an Active license. The Connector license is displayed in the features list. The Expiration date indicates how long the license is valid.
To view more details about the license, click the overflow () icon.
To view the usage of a feature licenses, expand the feature. For example, expanding CTE-TransparentEncryption shows:
Similarly, expanding CCKM shows:
Note
Unlike Connector licenses such as CTE-TransparenEncryption, ProtectFile, and ProtectV, usage is not displayed for the CipherTrust Manager, KMIP, and LUKS licenses.