- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- Re: License about to expire but Expiration Date in...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
License about to expire but Expiration Date in the past
Hello we have some devices with an Status of License "About to expire" but the expiration date is already in the past.
What can we do? The license itself should not be outdated.
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
Following workaround worked for me on 1570 appliance:
1. Backup /pfrm2.0/config1/fw1/database/entitlement_status_collector_db.C
2. Check if status_str is Evaluation, if so follow deleting the file
3. Delete /pfrm2.0/config1/fw1/database/entitlement_status_collector_db.C
4. reboot appliance
5. verify if the file entitlement_status_collector_db.C was created again and if license warning disappeared
Jan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You should check on the gateway itself to see ifg there is still an evaluation license with cplic print -x
When it is there (probably) use "cplic del <key> " to delete it, the key is found in the output of the previous command on the line of the eval license..
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Maarten made a good point, for sure. Also, can you confirm time/clock on your firewalls is correct? What does cplic print show?
Andy
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have a similar situation on VSX Gateway. Support suggested me procedures from sk163500 and sk176211.
See if this works for you. It didn't work with me on the VSX, and I still have the case open.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Just update...
I managed to solve my problem with steps which I get from support.
The issue seems to be an old license stuck in the database. I have to perform the below steps after taking a snapshot/backup of the management:
Do these steps on the Security Management server:
- Delete $CPDIR/database/EntMgr_DB.xml >> mv $CPDIR/database/EntMgr_DB.xml $CPDIR/database/EntMgr_DB.xml.org
- Run: # psql_client monitoring postgres -c "DELETE FROM entitlement WHERE 1=1;"
- cpstop;cpstart
The SQL command is to remove the stuck evaluation license from the MGMT database.
Hope this will help you solve the problem...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The situation often appears on the 1570R devices
1. The device comes with a trail license installed
2. The device is installed and added to the Managemnt Server
3. The final license on the 1570R is installed correctly
4. But the Management Server shows following(see picture):
5. a restart of the 1570R doesent help
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You need to delete $CPDIR/conf/cp.pnp file and issue will be solved. Once you run cplic print it will complain about it, but those warnings are irrelevant.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ok, can i delete this file without any risk?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes, as long as you make sure you have VALID license.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I tried it, but it didnt work.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You may need to do few things for it to go away fully. "get licences" from smart update, install database and install policy. I never had that fail for me.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
also tried this...no change..hm strange
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What time zone you in? Im in est, lets do quick remote if you have time?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
thanks for the offer , but its not possible right now.
i reinstalled the firewall to the management server but no change,
I suppose, the problem is on management server side.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It could be, but can you send a screenshot of the smart update what you see there? Please blur out any sensitive/private info.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Sorry brother, even after 15 years experience with CP, licensing will NEVER be my "domain" LOL. Even if I was to live 200 years, I would probably never master it, haha.
Anyway, maybe check and delete that cp.pnp file on mgmt server if it exists, if that fails, I would confirm with Account services. All I can tell is whenever I have any license issue, I just generate LOCAL eval and it works 100% of the time, so I stick with that : - )
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Although, thanks for your help 😉
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Some related workarounds are outlined here:
https://community.checkpoint.com/t5/General-Topics/Delete-trail-license/td-p/56751#M11432
Suspect we need to see the actual cplic output to offer useful suggestions however.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Raven,
i also tried your solution. But this also had no effect.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, is the issue (or similar ones) still happening?
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello, no the problem is still present.
I also tried the solution from Chris_Atkinson.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Are you able to provide the "cplic print" output requested (redacted where needed)?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
the right license is installed and no trial license is present anymore(see screenshot)
I think the problem is on the management serve side.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'll take it up with relevant R&D owners to see how we can assist.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Please share the output of the following command:
cpstat os -f licensing
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
its attached, thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did you double check to make sure that cp.pnp file does not exist on the mgmt server?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
yes
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi
I will contact you directly with instructions on how to debug the issue.
Thanks
Tal Paz-Fridman
