Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Rob_Napholz
Participant
Jump to solution

Delete trial license

How can the first temp/30 day trial license be deleted ?

cplic print  -x
trial            14Jul2019   axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

cplic del axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 Failed to delete license

I had a ticket open with support, with no luck.

I prefer not to have a box in production with a trial license and don't want to wait the 30 days

The FW does have the actual/correct  license,

Thanks Rob

1 Solution

Accepted Solutions
Eddie_Kalbert
Employee
Employee

To disable evaluation license try:

  • cplic eval_disable

OR

  • $CPDIR/bin/cpprod_util CPPROD_SetPnPDisable 1

View solution in original post

30 Replies
Nick_Doropoulos
Advisor

Hi Rob,

Try the following if you can:

[Expert@HostName:0]# cplic del

- Try deleting the license from cpconfig.

- Try deleting the license from SmartUpdate.

 

I hope this helps.

0 Kudos
PhoneBoy
Admin
Admin

You should be able to remove the licenses from $CPDIR/conf/cp.license.
This will remove the licenses from cplic print output.
However, the licenses may still be in the kernel.

0 Kudos
Rob_Napholz
Participant

The trial license is not in the cp.license file

0 Kudos
G_W_Albrecht
Legend
Legend


First, on CLI. issue

# cplic print -x

This will show IP, End Date, Signature (!!!), contained Blades and CK:

172.27.39.191 17Jun2019 atGp4xiFLZkThMhB3iqxojFwxBbC3tyCFEPi CPAP-SG480X CPSB-FW CPSM-C-2 CPSB-NPM CPSB-LOGS ... CK-xyxyxyxy

Using this information, the license can be deleted:

# cplic del atGp4xiFLZkThMhB3iqxojFwxBbC3tyCFEPi 

In the next

# cllic print

the license should be removed...

CCSE CCTE CCSM SMB Specialist
PhoneBoy
Admin
Admin
If it's the PnP license, that license should get removed the minute any other license is installed.
If it's a 30+ day eval license, it should show up in cp.license.
0 Kudos
Christopher_To
Collaborator

Are these PNP trail licenses included on all CheckPoint appliances and openserver/VM?

0 Kudos
PhoneBoy
Admin
Admin
Yes, on a fresh install of a VM or Appliance, the 15-day PNP license is there.
0 Kudos
Eddie_Kalbert
Employee
Employee

To disable evaluation license try:

  • cplic eval_disable

OR

  • $CPDIR/bin/cpprod_util CPPROD_SetPnPDisable 1
Douglas_Rich
Contributor

Both commands didn't help

cplic eval_disable
You have disabled Check Point evaluation period
For activation you need to restart ALL Check Point modules
(performing cpstop & cpstart)

cpstop

cpstart


Host Expiration Signature Features
trial 28Aug2019 axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx PNP_BLADE_IPS:V1:trial CPSB-IPS

cplic del axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Failed to delete license

 

 

Maarten_Sjouw
Champion
Champion
Did you apply the license centrally or via the command line?
Even today I have been removing local licenses from a gateway through SmartUpdate. It will nag but still it was deleted.
I also noticed that normally you could see and delete licenses in the WebUI, but in R80.20 I could not find it any more, there was only a activate option.
Regards, Maarten
0 Kudos
G_W_Albrecht
Legend
Legend

Trial License is the automatic one that is created  after installation - a PnP Lic that is not managed centrally but only locally on one unit. But as long as everything is working as expected, i would not put much work into this as this is short-lived only 😉

CCSE CCTE CCSM SMB Specialist
0 Kudos
Douglas_Rich
Contributor

Yeah we have health monitoring that is just going to report a false positive till it's gone. Not a big deal but annoying for sure.

0 Kudos
Tal_Paz-Fridman
Employee
Employee
Hi
This is just a Trial Period License given per certain Software Blades, in this case IPS, so that customers can experience them beyond the 15 days of the regular Trial Period License:

PNP_BLADE_IPS:V1:trial CPSB-IPS

As many have pointed out it will expire in less than 3 weeks so no real need to worry.

HTH
Tal
0 Kudos
Douglas_Rich
Contributor

Yep, I don't think anyone was confused on what this is.  It's still a burden even if its temporary, breaking business process and wasting man hours, even if it's a small trivial amount of time, it's still a waste that we have to deal with.  Would be much better if we could just delete it and move on with life today rather than wait and go back and forth answering questions that are only temporary.   Fix it and save your customers and the TAC thousands of accumulated hours or don't and save yourself just one hour. Tough Choice I know.

Sagar_Manandhar
Advisor

Deleted $CPDIR/conf/cp.pnp file and the issue was solved.

Pedro_Romero
Participant

Hello, I have the same issue and tried out:
Deleting  $CPDIR/conf/cp.pnp file, but it did not work. Has anyone out there able to solve this ¿? 

0 Kudos
duonglh2
Explorer

Tks you!

#rm $CPDIR/conf/cp.pnp and reboot appliance.

The problem was fixed!

0 Kudos
Christopher_To
Collaborator

was the reboot necessary after deleting the .pnp file?

0 Kudos
ptuttle_2
Contributor

This also just worked for us on R81.20.  Our Compliance blade initially had an eval lic and a purchased license but for some reason it was only seeing the eval lic and this was expiring soon.  When the expiration warnings came up last week, It stopped the Compliance blade from working.  Once I did the file removal and rebooted this fixed it.  None of the other suggestions above worked for us either.

0 Kudos
Juraj_Sakala
Participant

After deleting the file:

GetLicFromFile: Failed to open file: /opt/CPshrd-R80.30/conf/cp.pnp
pnp_blades_iterate: Failed to find a match to PNP_BLADE_APPI-V1 in PnP file: /opt/CPshrd-R80.30/conf/cp.pnp

0 Kudos
_Val_
Admin
Admin

See above, quoting:

 

To disable evaluation license try:

  • cplic eval_disable

OR

  • $CPDIR/bin/cpprod_util CPPROD_SetPnPDisable 1
0 Kudos
Juraj_Sakala
Participant

cplic eval_disable did not work at all. There is still the license

trial 13Aug2020 PNP_BLADE_IPS:V1:trial CPSB-IPS

Indded, it is very strange, becasue the machine is runnig for two years without this issue.

0 Kudos
Follmann
Explorer

This procedure worked for me. Thanks.

The smartconsole will take a time to be updated if you do not reboot the gateway. But you can check that trial license was removed by tipping cplic print -x.

0 Kudos
Steve-Vandegaer
Explorer

I have the same issue, none of the below steps solved my issue

0 Kudos
Thomas_Eichelbu
Advisor

Hello,

yes i have seen this issue also several times.
all described solution did not work on the current issue iam facing.

neither
cplic eval_disable$
or
$CPDIR/bin/cpprod_util CPPROD_SetPnPDisable 1
nor deleting /opt/CPshrd-R80.30/conf/cp.pnp.
even not detaching and attaching the real licence ...

[Expert@XXXXXX(standby)]# cplic print -x
Host Expiration Signature Features
trial 6Dec2020 axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx PNP_BLADE_IPS:V1:trial CPSB-IPS
[Expert@XXXXXX(standby)]# cplic del axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Failed to delete license

so i will wait for 7.Dec then i will check it again...
best regards

0 Kudos
Martin_Raska
Advisor
Advisor

I have seen it before and I couldn't agree more, CP and his "ART of licences", get that fixed and don't tell customers excuses to let it expire because it causing problems in production, monitoring etc. and not everybody has the luxury to try to delete some files from GW and do a reboot in a high production environment. I don't want to mean but I cannot comment on more topic "CP and licences" because my head will explode.

Tobias_Moritz
Advisor

4 years later and the problem is still the same, even with the recent codebase (R81.20 and recent jumbo).

We have a permanent Quantum Gateway license with CPSB-IPS-S1 (or CPSB-IPS-S1-HA) in it and this resulted in the problem discussed here: After installing this license, the IPS part of the inital trial license stayed in place: PNP_BLADE_IPS:V1:trial CPSB-IPS

This did not happen on gateways, where the permanent licence contains CPSB-IPS (or CPSB-IPS-HA), so this looks like a simple string compare, which was not extended when the -S1 IPS license type was introduced so many years ago.

Of course, none of the workarounds mentioned above did help in this scenario. We also tried many more, as we do have some expirence with this "art of licensing". It also doesn't made a difference, how the license was installed (CLI, SmartConsole, SmartUpdate).

However, this was only a "cosmetical issue", which solved itself when the trial license reached its end date. It just disappeared after that. But until that, we had to live with the yellow warning icon on our gateways in SmartConsole. Not so nice.

I do not understand, why these little things that annoy a lot of customer for years does not get fixed. It's just a string comparison.

0 Kudos
Tal_Paz-Fridman
Employee
Employee

I have moved your comment to the relevant owner in R&D to see how we can fix and improve this behavior. 

Martin_Raska
Advisor
Advisor

Thank you, I think this can be removed from the code: PNP_BLADE_IPS:V1:trial CPSB-IPS

 

as this is causing more issues than its benefits. When there is some problem with the license or expiration or the customer wants to evaluate some blades, everybody can generate an EVAL license.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events