Delete trial license

[Rob_Napholz]

How can the first temp/30 day trial license be deleted ?

cplic print  -x
trial            14Jul2019   axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

cplic del axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 Failed to delete license

I had a ticket open with support, with no luck.

I prefer not to have a box in production with a trial license and don't want to wait the 30 days

The FW does have the actual/correct  license,

Thanks Rob

[Nick_Doropoulos]

Hi Rob,

Try the following if you can:

- [Expert@HostName:0]# cplic del

- Try deleting the license from cpconfig.

- Try deleting the license from SmartUpdate.

I hope this helps.

[PhoneBoy]

You should be able to remove the licenses from $CPDIR/conf/cp.license.
This will remove the licenses from cplic print output.
However, the licenses may still be in the kernel.

[Rob_Napholz]

The trial license is not in the cp.license file

[G_W_Albrecht]

First, on CLI. issue

# cplic print -x

This will show IP, End Date, Signature (!!!), contained Blades and CK:

172.27.39.191 17Jun2019 atGp4xiFLZkThMhB3iqxojFwxBbC3tyCFEPi CPAP-SG480X CPSB-FW CPSM-C-2 CPSB-NPM CPSB-LOGS ... CK-xyxyxyxy

Using this information, the license can be deleted:

# cplic del atGp4xiFLZkThMhB3iqxojFwxBbC3tyCFEPi 

In the next

# cllic print

the license should be removed...

[PhoneBoy]

If it's the PnP license, that license should get removed the minute any other license is installed.
If it's a 30+ day eval license, it should show up in cp.license.

[Christopher_To]

Are these PNP trail licenses included on all CheckPoint appliances and openserver/VM?

[PhoneBoy]

Yes, on a fresh install of a VM or Appliance, the 15-day PNP license is there.

[Eddie_Kalbert · Accepted solution]

To disable evaluation license try:

• cplic eval_disable

OR

• $CPDIR/bin/cpprod_util CPPROD_SetPnPDisable 1

[Douglas_Rich]

Both commands didn't help

cplic eval_disable
You have disabled Check Point evaluation period
For activation you need to restart ALL Check Point modules
(performing cpstop & cpstart)

cpstop

cpstart

Host Expiration Signature Features
trial 28Aug2019 axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx PNP_BLADE_IPS:V1:trial CPSB-IPS

cplic del axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Failed to delete license

[Maarten_Sjouw]

Did you apply the license centrally or via the command line?
Even today I have been removing local licenses from a gateway through SmartUpdate. It will nag but still it was deleted.
I also noticed that normally you could see and delete licenses in the WebUI, but in R80.20 I could not find it any more, there was only a activate option.

[G_W_Albrecht]

Trial License is the automatic one that is created  after installation - a PnP Lic that is not managed centrally but only locally on one unit. But as long as everything is working as expected, i would not put much work into this as this is short-lived only 😉

[Douglas_Rich]

Yeah we have health monitoring that is just going to report a false positive till it's gone. Not a big deal but annoying for sure.

[Tal_Paz-Fridman]

Hi
This is just a Trial Period License given per certain Software Blades, in this case IPS, so that customers can experience them beyond the 15 days of the regular Trial Period License:

PNP_BLADE_IPS:V1:trial CPSB-IPS

As many have pointed out it will expire in less than 3 weeks so no real need to worry.

HTH
Tal

[Douglas_Rich]

Yep, I don't think anyone was confused on what this is.  It's still a burden even if its temporary, breaking business process and wasting man hours, even if it's a small trivial amount of time, it's still a waste that we have to deal with.  Would be much better if we could just delete it and move on with life today rather than wait and go back and forth answering questions that are only temporary.   Fix it and save your customers and the TAC thousands of accumulated hours or don't and save yourself just one hour. Tough Choice I know.

[Sagar_Manandhar]

Deleted $CPDIR/conf/cp.pnp file and the issue was solved.

[Pedro_Romero]

Hello, I have the same issue and tried out:
Deleting  $CPDIR/conf/cp.pnp file, but it did not work. Has anyone out there able to solve this ¿? 

[duonglh2]

Tks you!

#rm $CPDIR/conf/cp.pnp and reboot appliance.

The problem was fixed!

[Christopher_To]

was the reboot necessary after deleting the .pnp file?

[ptuttle_2]

This also just worked for us on R81.20.  Our Compliance blade initially had an eval lic and a purchased license but for some reason it was only seeing the eval lic and this was expiring soon.  When the expiration warnings came up last week, It stopped the Compliance blade from working.  Once I did the file removal and rebooted this fixed it.  None of the other suggestions above worked for us either.

[Juraj_Sakala]

After deleting the file:

GetLicFromFile: Failed to open file: /opt/CPshrd-R80.30/conf/cp.pnp
pnp_blades_iterate: Failed to find a match to PNP_BLADE_APPI-V1 in PnP file: /opt/CPshrd-R80.30/conf/cp.pnp

[_Val_]

See above, quoting:

To disable evaluation license try:

• cplic eval_disable

OR

• $CPDIR/bin/cpprod_util CPPROD_SetPnPDisable 1

[Juraj_Sakala]

cplic eval_disable did not work at all. There is still the license

trial 13Aug2020 PNP_BLADE_IPS:V1:trial CPSB-IPS

Indded, it is very strange, becasue the machine is runnig for two years without this issue.

[Follmann]

This procedure worked for me. Thanks.

The smartconsole will take a time to be updated if you do not reboot the gateway. But you can check that trial license was removed by tipping cplic print -x.

[Steve-Vandegaer]

I have the same issue, none of the below steps solved my issue

[Thomas_Eichelbu]

Hello,

yes i have seen this issue also several times.
all described solution did not work on the current issue iam facing.

neither
cplic eval_disable$
or
$CPDIR/bin/cpprod_util CPPROD_SetPnPDisable 1
nor deleting /opt/CPshrd-R80.30/conf/cp.pnp.
even not detaching and attaching the real licence ...

[Expert@XXXXXX(standby)]# cplic print -x
Host Expiration Signature Features
trial 6Dec2020 axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx PNP_BLADE_IPS:V1:trial CPSB-IPS
[Expert@XXXXXX(standby)]# cplic del axxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Failed to delete license

so i will wait for 7.Dec then i will check it again...
best regards

[Martin_Raska]

I have seen it before and I couldn't agree more, CP and his "ART of licences", get that fixed and don't tell customers excuses to let it expire because it causing problems in production, monitoring etc. and not everybody has the luxury to try to delete some files from GW and do a reboot in a high production environment. I don't want to mean but I cannot comment on more topic "CP and licences" because my head will explode.

[Tobias_Moritz]

4 years later and the problem is still the same, even with the recent codebase (R81.20 and recent jumbo).

We have a permanent Quantum Gateway license with CPSB-IPS-S1 (or CPSB-IPS-S1-HA) in it and this resulted in the problem discussed here: After installing this license, the IPS part of the inital trial license stayed in place: PNP_BLADE_IPS:V1:trial CPSB-IPS

This did not happen on gateways, where the permanent licence contains CPSB-IPS (or CPSB-IPS-HA), so this looks like a simple string compare, which was not extended when the -S1 IPS license type was introduced so many years ago.

Of course, none of the workarounds mentioned above did help in this scenario. We also tried many more, as we do have some expirence with this "art of licensing". It also doesn't made a difference, how the license was installed (CLI, SmartConsole, SmartUpdate).

However, this was only a "cosmetical issue", which solved itself when the trial license reached its end date. It just disappeared after that. But until that, we had to live with the yellow warning icon on our gateways in SmartConsole. Not so nice.

I do not understand, why these little things that annoy a lot of customer for years does not get fixed. It's just a string comparison.

[Tal_Paz-Fridman]

I have moved your comment to the relevant owner in R&D to see how we can fix and improve this behavior. 

[Martin_Raska]

Thank you, I think this can be removed from the code: PNP_BLADE_IPS:V1:trial CPSB-IPS

as this is causing more issues than its benefits. When there is some problem with the license or expiration or the customer wants to evaluate some blades, everybody can generate an EVAL license.