CCKM Licensing Model
CCKM is offered through the Trialware and Time-limited Rental licensing models. This section describes these models and how to activate them.
Trialware
Provides the fully-functional CCKM solution for 90 days with pre-installed trial license. After the trial period expires, CCKM configurations on the CipherTrust Manager become read-only.
Time-limited Rental
Provides the fully-functional CCKM solution for a prepaid charge for a specific period of time, for a specific number of cloud units.
This license comes with a grace period of 90 days. After the license period expires, the grace period starts. During the grace period, CCKM continues working normally. However, after the grace period is over, CCKM configurations on the CipherTrust Manager become read-only.
The CipherTrust Manager GUI starts showing a notification about the remaining license time. The license renewal can be ordered before the license expires.
Note
The number of cloud license enforced entities such as AWS accounts, Azure subscriptions, Salesforce Organizations, and Google Workspace endpoints that can be added to the CipherTrust Manager is limited by the number of licenses purchased. Refer to License Enforcement for CCKM for the list of clouds and related entities where the CCKM cloud licenses are enforced.
For example, if a 1-year license is purchased for 10 cloud units, then only a total of 10 different types of cloud license enforced entities can be added to the CipherTrust Manager.
In addition, Google Cloud External Key Manager (EKM) endpoints require Google Cloud Projects, and one Google Cloud Project registered on CipherTrust Manager consumes one CCKM cloud unit.
You can adjust the number of different cloud units until the total reaches the purchased license limit. As an example, you can add five AWS accounts, three Azure subscriptions, and two Google Workspace endpoints or 10 AWS accounts.
Note
The CipherTrust Manager acts as a Luna HSM client for root of trust (RoT) and CCKM Embedded (with Luna HSM as a key source). Separate client licenses for Luna HSMs are not required on the CipherTrust Manager. However, you need to apply usual partition licenses on the Luna HSM side.
Activating CCKM Licenses
Activating a CCKM license requires a license string for the CipherTrust Manager to which the AWS accounts, Azure subscriptions, and Google Workspace endpoints will be added. This string is generated when a license is activated. You can find the details about your EID and available licenses on the License Portal.
Refer to Activating a Connector License for details.
After the CCKM license is activated, its state becomes Active on the Features tab of the Licensing page of the CipherTrust Manager GUI. The license is displayed with the feature name CCKM.
