Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Roadrunner88
Contributor
Jump to solution

License about to expire but Expiration Date in the past

Hello we have some devices with an Status of License "About to expire" but the expiration date is already in the past.

 

What can we do? The license itself should not be outdated.

 

 

 

0 Kudos
1 Solution

Accepted Solutions
Jan_Jagos
Explorer

Hello,

Following workaround worked for me on 1570 appliance:

1. Backup /pfrm2.0/config1/fw1/database/entitlement_status_collector_db.C

2. Check if status_str is Evaluation, if so follow deleting the file

3. Delete /pfrm2.0/config1/fw1/database/entitlement_status_collector_db.C

4. reboot appliance

5. verify if the file entitlement_status_collector_db.C was created again and if license warning disappeared

Jan

 

View solution in original post

33 Replies
Maarten_Sjouw
Champion
Champion

You should check on the gateway itself to see ifg there is still an evaluation license with cplic print -x
When it is there (probably)  use "cplic del <key> " to delete it, the key is found in the output of the previous command on the line of the eval license..

Regards, Maarten
the_rock
Legend
Legend

Maarten made a good point, for sure. Also, can you confirm time/clock on your firewalls is correct? What does cplic print show?

Andy

0 Kudos
Raven
Participant
Participant

I have a similar situation on VSX Gateway. Support suggested me procedures from sk163500 and sk176211.

See if this works for you. It didn't work with me on the VSX, and I still have the case open.

0 Kudos
Raven
Participant
Participant

Just update...

I managed to solve my problem with steps which I get from support.

The issue seems to be an old license stuck in the database. I have to perform the below steps after taking a snapshot/backup of the management:

Do these steps on the Security Management server:

  1. Delete $CPDIR/database/EntMgr_DB.xml >> mv $CPDIR/database/EntMgr_DB.xml $CPDIR/database/EntMgr_DB.xml.org
  2. Run: # psql_client monitoring postgres -c "DELETE FROM entitlement WHERE 1=1;"
  3. cpstop;cpstart

The SQL command is to remove the stuck evaluation license from the MGMT database.

Hope this will help you solve the problem...

Roadrunner88
Contributor

The situation often appears on the 1570R devices

1. The device comes with a trail license installed

2. The device is installed and added to the Managemnt Server

3. The final license on the 1570R is installed correctly

4. But the Management Server shows following(see picture):

5. a restart of the 1570R doesent help

 

the_rock
Legend
Legend

You need to delete $CPDIR/conf/cp.pnp file and issue will be solved. Once you run cplic print it will complain about it, but those warnings are irrelevant.

0 Kudos
Roadrunner88
Contributor

ok, can i delete this file without any risk?

0 Kudos
the_rock
Legend
Legend

Yes, as long as you make sure you have VALID license.

Roadrunner88
Contributor

I tried it, but it didnt work. 


0 Kudos
the_rock
Legend
Legend

You may need to do few things for it to go away fully. "get licences" from smart update, install database and install policy. I never had that fail for me.

0 Kudos
Roadrunner88
Contributor

also tried this...no change..hm strange

0 Kudos
the_rock
Legend
Legend

What time zone you in? Im in est, lets do quick remote if you have time?

0 Kudos
Roadrunner88
Contributor

thanks for the offer , but its not possible right now.

i reinstalled the firewall to the management server but no change, 

I suppose, the problem is on management server side.


0 Kudos
the_rock
Legend
Legend

It could be, but can you send a screenshot of the smart update what you see there? Please blur out any sensitive/private info.

0 Kudos
Roadrunner88
Contributor

 

  

0 Kudos
the_rock
Legend
Legend

Sorry brother, even after 15 years experience with CP, licensing will NEVER be my "domain" LOL. Even if I was to live 200 years, I would probably never master it, haha. 

Anyway, maybe check and delete that cp.pnp file on mgmt server if it exists, if that fails, I would confirm with Account services. All I can tell is whenever I have any license issue, I just generate LOCAL eval and it works 100% of the time, so I stick with that : - )

Roadrunner88
Contributor

Although, thanks for your help 😉

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Some related workarounds are outlined here:

https://community.checkpoint.com/t5/General-Topics/Delete-trail-license/td-p/56751#M11432

Suspect we need to see the actual cplic output to offer useful suggestions however.

CCSM R77/R80/ELITE
0 Kudos
Roadrunner88
Contributor

Hi Raven,

 

i also tried your solution. But this also had no effect.

0 Kudos
Tal_Paz-Fridman
Employee
Employee

Hi, is the issue (or similar ones) still happening?

Thanks

0 Kudos
Roadrunner88
Contributor

Hello, no the problem is still present.

I also tried the solution from Chris_Atkinson.

 

 

 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Are you able to provide the "cplic print" output requested (redacted where needed)?

CCSM R77/R80/ELITE
0 Kudos
Roadrunner88
Contributor
 

Hello,

the right license is installed and no trial license is present anymore(see screenshot)
I think the problem is on the management serve side.

0 Kudos
Tal_Paz-Fridman
Employee
Employee

I'll take it up with relevant R&D owners to see how we can assist.

Tal_Paz-Fridman
Employee
Employee

Please share the output of the following command:

cpstat os -f licensing

0 Kudos
Roadrunner88
Contributor

its attached, thanks

0 Kudos
the_rock
Legend
Legend

Did you double check to make sure that cp.pnp file does not exist on the mgmt server?

0 Kudos
Roadrunner88
Contributor

yes 

0 Kudos
Tal_Paz-Fridman
Employee
Employee

Hi 

I will contact you directly with instructions on how to debug the issue.

Thanks

Tal Paz-Fridman

tfridman@checkpoint.com

 

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events