License Management

This section describes the supported licensing methods, and license deactivation.

Ensure that you have a valid PrivX license code for taking PrivX into use. For license-subscription-related enquiries, please contact SSH Communications Security at [email protected]. For license issues, please contact SSH Licensing team [email protected].

Online License

Online licensing is the recommended way to license PrivX. This method is easy to set up, and after setup the license is automatically updated according to your subscription.

For online licensing to work, your PrivX servers must be able to connect to the licensing server, for the following operations:

• Initial license activation: PrivX contacts license servers to fetch your license.
• License refresh: PrivX contacts license servers to automatically fetch your new license.
• License deactivation: PrivX contacts license servers to deactivate your license.

Internet connectivity is required for accessing the license servers:

• Version 16 and later fresh installs: https://privx.license.privx.io
• Older deployments: 184.106.60.185:443

The license-server addresses are also described in the section called “Mandatory Components”.

📘

Note

Note that if PrivX servers do not have access to the license servers when their license expires, the license will enter the grace period mode and expire after the grace period ends.

To activate a PrivX license with the online method:

1. Access the PrivX GUI and navigate to the Settings→License.
2. Under the License code section, enter your license code, and click Update License.

In online licensing mode, PrivX checks for license updates every 6 or 12 hours and automatically applies any new changes found for your subscription. To trigger an immediate license refresh, click menu to the Last refreshed section, then click Refresh.

Deactivating Online License

PrivX licenses can be activated only a limited number of times. To free up activations you must first deactivate a license. This is important when moving PrivX installation from a host to another. Deactivating online license requires access to the license servers from PrivX deployments.

To deactivate a PrivX license, go to the Settings→License. Next to Status, click menu, then click Deactivate.

How to convert from old license server to new one

PrivX supports two license servers at the moment. Fresh PrivX version 16 and later installations are using the new license server, older versions prior to PrivX 16.0 are using the old license server. Installations upgraded from previous version to version 16 will keep on using the old license server by default.

New license server code is in UUID format: f9ef3d6f-xxxx-xxxx-xxxx-....
Old license server code is numbers only without hyphens: 4961xxxxxxxxxxxxxx

PrivX installation can be converted from old license server to the new one with these steps:

1. Get new license code from SSH Licensing team [email protected]
2. Deactivate the current license from PrivX server. PrivX installation is now unlicensed.
3. Restart license-manager service
   # systemctl restart license-manager
4. Insert the new license code to PrivX

Offline License

Offline licensing is an optional licensing method for PrivX deployments which are not able to access the licensing servers. The offline license is file-based and requires more manual actions. Offline licenses can be requested from the SSH Licensing team [email protected].

Install/refresh file-based offline license:

1. Copy the file to PrivX server, under the file-license path. The path is configured on /opt/privx/etc/license-config.toml, default /opt/privx/license/privx.lic.
2. Restart license-manager service

To deactivate the file-based offline license, remove the license file from the path and restart license-manager service.

In case of offline High-Availability deployment, all of the PrivX instances requires the license file to be in place.

The offline license file is not part of the backups and won't be restored in case a backup is restored.