How Delinea Licenses are Managed

Delinea licenses give you access to the following key features:

Secure authentication and identity management
Role-based access rights
Delegation of authority
Auditing of activity

These features can be used together or independently, depending on the type of licenses you purchase and the specific requirements of your organization.

Delinea License Management Tools

Delinea provides a set of tools that let you manage Delinea licenses and generate reports about the different types of Delinea licenses you have purchased.

The tool for adding and removing licenses, monitoring license usage, and configuring license usage notification is the Delinea Licensing Service. The licensing service works together with Server Suite components to monitor and report usage and activity for all types of Delinea licenses. For more information about using the licensing service, see Managing Licenses with the Licensing Service.

The tool for generating license reports is the Delinea Licensing Report wizard. The wizard generates a report summary and detailed system information about the computers where you have Delinea software deployed. Report information is formatted as comma-separated values (CSV) in a text file. The report is intended primarily for use by Delinea Support. If requested, you can send it to Delinea Support for analysis. You can also use the report for your own analysis. For more information about the Licensing Report wizard, see Creating Licensing Reports with the Licensing Report Wizard.

How Licensing Works

Delinea licensing is based on the number of servers and workstations you authorize for authentication and privilege elevation, and for audit and monitoring service. License validation and management are handled through the licensing service, the Access Manager console, and the Audit Manager console.

Delinea license management tools check for license keys when any of the following events occur:

A manual or automatic refresh operation is performed through the licensing service.
You start the Access Manager console.
An agent-managed computer joins a zone.
You start the Audit Manager console, the Audit Analyzer console, or the auditing session player; or when you rotate to a new auditing database using either PowerShell or the SDK.

Checking licenses for authentication and privilege elevation verifies that there are enough license keys installed for all UNIX and Windows computers with valid accounts in Active Directory.

Checking licenses for audit and monitoring service verifies that there are enough license keys installed for each computer that is connected to an audit and monitoring service collector.

If the number of licensed computers exceeds the total number of licenses you have purchased, a message is displayed with license usage details, and—if applicable—instructions to add license keys.

After you have installed enough license keys to cover all the configured UNIX, Linux, Mac OS X, or Windows computers, the applicable Delinea console will open at startup and allow you to perform all of the normal administrative tasks.

Understanding License Types

Licenses for authentication and privilege elevation (also referred to as access control and privilege management) are purchased and installed separately from licenses for auditing. You can use the licensing service to install and manage all types of licenses.

Licenses for access control and privilege management are issued based on how a computer is used. For example, a computer can be licensed as a UNIX or Windows workstation or as a standard UNIX or Windows server, or as an application server. The following types of licenses are available:

Workstation Licenses (UNIX or Windows) permit a specific number of UNIX or Windows workstations to be available to Active Directory users. Workstation licenses are intended for computers that are used interactively by one or two concurrent users but that do not host applications accessed by multiple users. There are separate UNIX workstation and Windows workstation licenses.
Server Licenses (UNIX or Windows) permit a specific number of servers to be available to Active Directory users accessing server-based applications. Server licenses are for computers that are accessed by multiple concurrent users and typically host a specific type of application. There are separate UNIX server and Windows server licenses.

Licenses for audit and monitoring service are issued for each computer that will be connected to an audit and monitoring service collector. Auditing licenses are issued separately for UNIX and Windows computers.

Understanding License Keys

Depending on whether you have purchased software licenses, your license keys might provide limited evaluation usage of the software for a specific number of days, or permanent access to features for a specific number of computers. If you initially install using an evaluation license key, you must eventually replace that evaluation key with one or more permanent license keys to continue using the software.

Your capacity for enabling access for standard UNIX services or applications is defined by the total of all of the licenses you purchase and install. For example, if you install three valid license keys that each enable 100 workstations for UNIX access, you have a total of 300 workstation login licenses available.

Each license you purchase has a 24-character registration key that specifies:

The type of license granted by the key.
The total number of computers that may be enabled under this key’s license. If this is an evaluation key, the number of computers is unlimited, but the license count is displayed as zero (0) to indicate no computers are licensed under the evaluation key.
The time limit for the key. If the license is a permanent license key, the time limit is not applicable. If the license is an evaluation key, the time is set to a duration that is defined in the license key.

Because each license key specifies a set number of computers, it is common to receive multiple license keys. You can provide these license keys when you install Delinea software on a Windows computer or after installation using the licensing service. For information about using the licensing service to add licenses, see Managing Licenses with the Licensing Service.

How License Usage is Counted

How license usage is counted depends on these factors:

Whether the license is for authentication and privilege elevation (that is, access control and privilege management), or for audit and monitoring service.
Whether the licensed computer uses the Windows or UNIX operation system.
Whether the license is a permanent license or an evaluation license.

Using Delinea Licenses in FIPS Environments

Each recently issued Delinea license supports both FIPS compliant and non-FIPS compliant environments. The Licensing Service control panel DC/DZ Deployment tab and DA Deployment tab show the FIPS status of the selected licensing service host computer.

If you install the licensing service on multiple host computers in the forest (for example, for availability and redundancy reasons), it is highly recommended that all hosts have the same FIPS compliance setting. That is, licensing service hosts should all be FIPS compliant, or should all be non-FIPS compliant.