topic Re: License about to expire but Expiration Date in the past in Firewall and Security Management

License about to expire but Expiration Date in the past

Roadrunner88 — Wed, 22 Sep 2021 11:06:57 GMT

Hello we have some devices with an Status of License "About to expire" but the expiration date is already in the past.

What can we do? The license itself should not be outdated.

Re: License about to expire but Expiration Date in the past

Maarten_Sjouw — Wed, 22 Sep 2021 21:10:53 GMT

You should check on the gateway itself to see ifg there is still an evaluation license with cplic print -x
When it is there (probably) use "cplic del <key> " to delete it, the key is found in the output of the previous command on the line of the eval license..

Re: License about to expire but Expiration Date in the past

the_rock — Thu, 23 Sep 2021 00:48:44 GMT

Maarten made a good point, for sure. Also, can you confirm time/clock on your firewalls is correct? What does cplic print show?

Andy

Re: License about to expire but Expiration Date in the past

Raven — Wed, 25 Feb 2026 14:13:49 GMT

I have a similar situation on VSX Gateway. Support suggested me procedures from (Check Point Tech Writers removed the link to an obsolete SK article).

See if this works for you. It didn't work with me on the VSX, and I still have the case open.

Re: License about to expire but Expiration Date in the past

Raven — Mon, 13 Dec 2021 14:44:58 GMT

Just update...

I managed to solve my problem with steps which I get from support.

The issue seems to be an old license stuck in the database. I have to perform the below steps after taking a snapshot/backup of the management:

Do these steps on the Security Management server:

Delete $CPDIR/database/EntMgr_DB.xml >> mv $CPDIR/database/EntMgr_DB.xml $CPDIR/database/EntMgr_DB.xml.org
Run: # psql_client monitoring postgres -c "DELETE FROM entitlement WHERE 1=1;"
cpstop;cpstart

The SQL command is to remove the stuck evaluation license from the MGMT database.

Hope this will help you solve the problem...

Re: License about to expire but Expiration Date in the past

Roadrunner88 — Thu, 08 Dec 2022 09:58:19 GMT

The situation often appears on the 1570R devices

1. The device comes with a trail license installed

2. The device is installed and added to the Managemnt Server

3. The final license on the 1570R is installed correctly

4. But the Management Server shows following(see picture):

5. a restart of the 1570R doesent help

Re: License about to expire but Expiration Date in the past

the_rock — Thu, 08 Dec 2022 11:37:23 GMT

You need to delete $CPDIR/conf/cp.pnp file and issue will be solved. Once you run cplic print it will complain about it, but those warnings are irrelevant.

Re: License about to expire but Expiration Date in the past

Roadrunner88 — Thu, 08 Dec 2022 12:09:12 GMT

ok, can i delete this file without any risk?

Re: License about to expire but Expiration Date in the past

the_rock — Thu, 08 Dec 2022 12:16:11 GMT

Yes, as long as you make sure you have VALID license.

Re: License about to expire but Expiration Date in the past

Roadrunner88 — Thu, 08 Dec 2022 12:34:24 GMT

I tried it, but it didnt work.

Re: License about to expire but Expiration Date in the past

the_rock — Thu, 08 Dec 2022 12:35:54 GMT

You may need to do few things for it to go away fully. "get licences" from smart update, install database and install policy. I never had that fail for me.

Re: License about to expire but Expiration Date in the past

Roadrunner88 — Thu, 08 Dec 2022 12:40:41 GMT

also tried this...no change..hm strange

Re: License about to expire but Expiration Date in the past

the_rock — Thu, 08 Dec 2022 12:53:51 GMT

What time zone you in? Im in est, lets do quick remote if you have time?

Re: License about to expire but Expiration Date in the past

Roadrunner88 — Thu, 08 Dec 2022 13:21:35 GMT

thanks for the offer , but its not possible right now.

i reinstalled the firewall to the management server but no change,

I suppose, the problem is on management server side.

Re: License about to expire but Expiration Date in the past

the_rock — Thu, 08 Dec 2022 13:41:39 GMT

It could be, but can you send a screenshot of the smart update what you see there? Please blur out any sensitive/private info.

Re: License about to expire but Expiration Date in the past

Roadrunner88 — Fri, 09 Dec 2022 05:08:40 GMT

Re: License about to expire but Expiration Date in the past

the_rock — Thu, 08 Dec 2022 14:49:42 GMT

Sorry brother, even after 15 years experience with CP, licensing will NEVER be my "domain" LOL. Even if I was to live 200 years, I would probably never master it, haha.

Anyway, maybe check and delete that cp.pnp file on mgmt server if it exists, if that fails, I would confirm with Account services. All I can tell is whenever I have any license issue, I just generate LOCAL eval and it works 100% of the time, so I stick with that : - )

Re: License about to expire but Expiration Date in the past

Roadrunner88 — Fri, 09 Dec 2022 05:07:53 GMT

Although, thanks for your help 😉

Re: License about to expire but Expiration Date in the past

Roadrunner88 — Fri, 09 Dec 2022 05:48:15 GMT

Hi Raven,

i also tried your solution. But this also had no effect.

Re: License about to expire but Expiration Date in the past

Chris_Atkinson — Sat, 10 Dec 2022 00:59:59 GMT

Some related workarounds are outlined here:

https://community.checkpoint.com/t5/General-Topics/Delete-trail-license/td-p/56751#M11432

Suspect we need to see the actual cplic output to offer useful suggestions however.