search cancel

Remove old licenses from Enforce


Article ID: 171496


Updated On:


Data Loss Prevention Enforce Data Loss Prevention


Symantec Data Loss Prevention (DLP) Enforce
Versions 15.x

Your Enforce Console reflects an incorrect license count after adding new license .slf file.  The .slf file itself reflects the correct license count, however rather than replacing the old license file it was added to it.


This process requires that DLP Enforce Services be disabled.  This will cause incidents and updates to be held by different detection servers until communication with enforce can be resumed. During this time no incidents will be logged in the Database.

  1. Steps to remove old licenses from the enforce console
  2. Log into the enforce server.  
  3. Stop DLP Services
  4. Find and backup the contents of the /SymantecDLP/Protect/License folder.  Backup these files outside of DLP.
  5. Find and backup the contents of the /SymantecDLP/Protect/config folder.  Also backup these files outside of DLP.
  6. Empty the license folder, do not delete the license folder.
  7. Restart Services
  8. It will take a minute or two before you can log back into the Enforce console.  Once you log in, re add the licenses from the GUI.
  9. System >> Settings >> General >> Configure
  10. Browse to your licenses and add them one by one.  You will need to save after browsing to each license and repeat.
  11. Enforce will update, you should now have Only the licenses you added on step 8.

Be aware, this may revert default settings on some Enforce configuration files.  
For the correct order to stop and stop the DLP Enforce services, see our KB article Id: 159970. DLP Enforce services in the correct order

Should you have any questions or concerns, contact Symantec Technical Support.