Entering your License information for Symantec Endpoint Encryption version 12 and above

Products

Endpoint Encryption Desktop Email Encryption Drive Encryption Encryption Management Server File Share Encryption Gateway Email Encryption PGP Command Line PGP Key Management Server PGP Key Mgmt Client Access and CLI API PGP SDK

Issue/Introduction

Starting with Symantec Endpoint Encryption version 12, a new license model has been created to assist with tracking and License Utilization.

This article will show you how to get your SEE Management Server version 12 licensed.

For information on how to download Symantec Encryption products and other related topics, see the following articles:

193931 - Downloading Symantec Encryption products from the Broadcom download Portal
206503 - Finding your license number for Symantec Encryption products

175951 - Entering your License information for PGP Encryption Server (Symantec Encryption Management Server)
276507 - Entering your License information for Symantec Endpoint Encryption version 12 and above
180234 - Entering your license information for PGP Command Line
180213 - Entering your License information for PGP Encryption Desktop (Symantec Encryption Desktop)

Resolution

Symantec Endpoint Encryption Management Server 12.5 and above now utilize license management. Before upgrading to SEE 12.5 or above, from 12.0 or older, be sure you have your license .SLF file and that the license will cover all your endpoints.

Scenario 1: License Expiration
A license .SLF file is uploaded to the SEE Management Server to enable features as discussed above.
If you have not entered a license number, there is a 30-Day period where the software will continue to function, but it is important to enter the license file as soon as possible.

If a license number is not entered within 30 days, Symantec Endpoint Encryption clients will start to decrypt systems and the web console will allow only entering a new license SLF file (all administrative features are disabled until a license .SLF file is uploaded).

If a license number has never been licensed, and the 30-day period ends, the following message may appear, with the only option to upload a license:

If the above message is shown, the only action available is to upload the license. No further functionality will be available until a license number has been entered.

The Best Practice is to enter the license number as soon as you install. It is not recommended to wait until the above screen takes place.

The license number days start from the time of renewal, not necessarily the day you upload the license number. This will be reflected in the UI as discussed above.

For more information, check out the online help file for Managing Licenses.

Scenario 2: Over utilization

Each license .SLF file will enable the functionality for the specified duration. It will also provide license management for a specified quantity of endpoints.
If your license .SLF file enables 10,000 seats, and you have 10,001 seats, the web portal will provide a notice that you have exceeded.
It is recommended to remediate this as soon as possible. There is a 30-day grace period if the license has been overutilized. If the 30-day grace period expires, then these over utilized endpoints will start decrypting.

Each machine that checked in successfully while within the 10,000 seats will not decrypt. In this scenario, only the single machine that was over the utilization is tracked and will decrypt.
It is recommended to ensure you have enough seats enabled in your license .SLF to accommodate your deployment.

Note: Even Inactive Computers are considered licensed, so if you have any systems that haven't checked in within 3 years, it is recommended to review these inactive machines to see if they can be reconciled. Inactive Computers still store recovery data, which is why it is still counted as utilized.

Scenario 3: Uploaded a license .SLF file, but did not enable functionality
When uploading the license .SLF file, in some rare cases, it may be needed to do this on the SEE Management Server itself.
If you try to upload the license .SLF file on a remote system, the license authorization may fail.
Reach out to Symantec Encryption Support for further guidance if this may be the case.
EPG-36736

Note: If you have an expired license happen, and then later exceed the utilization, the 30-day grace period does not start over.

For further guidance on licensing the SEE Management Server, reach out to Symantec Encryption Support.