updated method apply 30day eval key to SPARK SMB GAIA appliance

Garrett_DirSec — Tue, 23 Apr 2024 17:48:25 GMT

Hello -- posting this because current sk116465 out of date (or wrong).

reference sk116465:

The key point of information in sk116465 specifies that license keys should be issued to localhost (because Quark purchased licenses are issued to MAC address). Furthermore, the SK specifies that EVAL keys should be issued to localhost as well.

This is WRONG as of R81.10.10 release. I have not tested other versions. I hope the below helps others. -GA

Procedure to test:

issue 30day eval key to UC account ##. do NOT enter IP address.
enter UC account and License 30day eval key.
select "LOCAL" and enter loopback address for both (127.0.0.1).
view license details and look for the command-line example for installation of GATEWAY portion of 30day key.

cpfw1>

cpfw1> cplic put 127.0.0.1 23May2024 at2S9jd3J-JjfFkbm46-QR9CfztzC-GiFLb8Xox CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-F47558932F41

This license cannot be installed on the local machine:

The license IP Address does not match any of the local machine's IP Addresses.

If this license has an IP Address of the Security Management, use SmartUpdate to install it.

cpfw1>

However, if you following same procedure to provision local license and instead use IP address on SPARK appliance, this works.

Note:

the warning msgs about "marketing name"
the existing commercial license on 1500 appliance issued to 127.0.0.1 (using automatic "home phone" activation).

cpfw1> cplic put 10.0.0.254 23May2024 af9tSH7bW-hivfec2AQ-2g2LgtPBX-7J5pNMGFj CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-37003EAF3318

failed to get new marketing name from license

failed to init the marketing name using the license string

Host Expiration Features

10.0.0.254 24May2024 CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-37003EAF3318

127.0.0.1 17Dec2024 CPAP-AP1550 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-50 CPSB-IA CPSB-ADNC CPSB-ASPM CPSB-APCL-S1 CPSB-IPS-S1 CPSB-URLF CPSB-AV CPSB-ABOT-S CPAP-CLOUD-MGMT CK-00-1C-7F-AD-AB-60

**** I wanted to validate the commerical "home phone" activation license issued to localhost address could be removed. ****

Run 'cplic print -x' to get the license signature

cpfw1> cplic print -x

Host Expiration Signature Features

10.0.0.254 24May2024 af9tSH7bWhivfec2AQ2g2LgtPBX7J5pNMGFj CPSG-C-8-U CPSB-FW CPSB-VPN CPSB-IPSA CPSB-DLP CPSB-SSLVPN-U CPSB-IA CPSB-ADNC CPSG-VSX-25S CPSB-SWB CPSB-IPS CPSB-AV CPSB-URLF CPSB-ASPM CPSB-APCL CPSB-ABOT CPSB-CTNT CK-37003EAF3318

127.0.0.1 17Dec2024 aLsW7s9RzEvjuihRQxDZ9P3LzCk2CgUQe2Pf CPAP-AP1550 CPSB-FW CPSG-C-4-U CPSB-VPN CPSB-SSLVPN-50 CPSB-IA CPSB-ADNC CPSB-ASPM CPSB-APCL-S1 CPSB-IPS-S1 CPSB-URLF CPSB-AV CPSB-ABOT-S CPAP-CLOUD-MGMT CK-00-1C-7F-AD-AB-60

*** remove the localhost issued license via signature ***

cpfw1> cplic del

Delete license from local machine:

cplic del [-F <output file>] <signature>

Run 'cplic print -x' to get the license signature

cpfw1> cplic del aLsW7s9RzEvjuihRQxDZ9P3LzCk2CgUQe2Pf

Host Expiration Features

cpfw1>

** The only attached license remaining is locally issued gateway portion of 30day eval key ***

cpfw1> cplic print

Host Expiration Features

Contract Coverage:

# ID Expiration SKU

===+===========+============+====================

1 | NYVTX8D | 22Jun2024 | CPSB-TE-EVAL

+-----------+------------+--------------------