66418: Acronis DeviceLock DLP: How to activate license files

use Google Translate

Applies to: 

Last update: 28-06-2021

Description

This article contains information on how to license your copy of Acronis DeviceLock DLP and its components with license files.

Important

  • There is a separate license type for each functional product component, including DeviceLock Core, NetworkLock, ContentLock, UAM, Search Server, and Discovery. A separate license type is also used for Enterprise Server DB Access.
  • For license provisioning, a special “license file”. Each license file is used for provisioning one or more licenses of only one particular license type. 
  • For license activation, a license file must be registered in DeviceLock Management Console, which enforces endpoint licenses for DeviceLock Core, NetworkLock, ContentLock, and UAM.
  • One or more license files of different types can be activated in a single Management Console.
  • One or more license files of the same type can be activated in a single Management Console. In this case, the total quantity of functional components of this license type managed from this Management Console is equal to the sum of quantities of licenses provisioned by these license files.
  • There are also two other specific conditions of license enforcement:
    • As all management components of the solution are included in DeviceLock Core, its license must be used in any Endpoint DLP deployment.
    • For any Management Console, the total number of licenses of each add-on type must be equal to the total number of DeviceLock Core licenses — this rule applies to NetworkLock, ContentLock, and UAM.

Acronis DeviceLock DLPlicense file types are distinguished per component: DeviceLock Core (devicelock.lic), Search Server (dlss.lic), ContentLock (dlcl.lic), NetworkLock (dlnl.lic) and User Activity Monitor (dluam.lic).

The Search Server, ContentLock and NetworkLock licenses (dlss.lic, dlcl.lic, dlnl.lic, respectively) are the add-ons to the mandatory DeviceLock Core (devicelock.lic) license. That means, these components cannot be used individually without DeviceLock Core license.

In case the DeviceLock Core license is expired, corrupted or absent, all other DeviceLock DLP components (incl. ContentLock, NetworkLock, UAM) work in trial mode.

The number of any optional component licenses must be greater or equal to that of DeviceLock Base, otherwise the appropriate functional component will be considered unlicensed.

Example

Brief: you had 1,000 DeviceLock Core licenses, 1,000 ContentLock and 1,000 NetworkLock licenses.Later on, an additional DeviceLock Core license for 100 computers was installed on the central DeviceLock Management Computer(s) (those with DeviceLock consoles installed). The number of licenses used is then:

DeviceLock Core License=1,100

ContentLock=1,000

NetworkLock= 1,000.

Pattern: ContentLock and NetworkLock components go into trial mode becoming unavailable for further configuration.

Resolution: additional 100 licenses are to be installed for ContentLock and NetworkLock Components, or DeviceLock Licenses are to be split (see below).

If it is not possible to obtain additional licenses for ContentLock and NetworkLock then:

  • Uninstall exceeding DeviceLock Core licenses from central DeviceLock Management Computer(s)
  • Assign a separate DeviceLock Management Computer to be used with additional DeviceLock Core licenses to control a group of allocated computers.

DeviceLock Core

DeviceLock Core License file (devicelock.lic) is to be activated on the computers with DeviceLock consoles, or DeviceLock Enterprise Server installed. I.e., on those used to configure permissions for computers controlled by DeviceLock Agent, or to collect data from them.

To install and activate the license file, place it into DeviceLock installation directory ('C:\Program Files\DeviceLock' by default), then run any of DeviceLock consoles to activate the license file*.

DeviceLock Search Server

To index and search documents from DeviceLock Enterprise Server logs (Shadow Log, Deleted Shadow Data Log, Audit Log, Server Log and Monitoring Log) you need to license your instance of DeviceLock Search Server.

To install DeviceLock Search Server License file (dlss.lic) use DeviceLock Management Console:

  • Run DeviceLock Management Console
  • Connect to the instance of DeviceLock Content Security Server
  • Expand Server Options node -> go to Search Server Options
  • Select Search Server License(s)-> Properties -> Load License(s)-> OK.

ContentLock/NetworkLock/UAM

The ContentLock/NetworkLock/UAM license files (dlcl.lic, dlnl.lic, dluam.lic, respectively) are to be activated on the computers with DeviceLock consoles installed. I.e., on those used to configure permissions for computers controlled by DeviceLock Service.

To activate ContentLock/NetworkLock/UAM license file, place it into DeviceLock installation directory (C:\Program Files\DeviceLock by default), and run any of DeviceLock consoles*.

DeviceLock Enterprise Server

DeviceLock Enterprise Server is an optional component that requires no additional license to function. Previously obtained DeviceLock Base license (devicelock.lic) gets used instead, and, if purchased, additional licenses for NetworkLock (dlnl.lic) and ContentLock (dlcl.lic) components as well.

I.e., you may install as many instances of DeviceLock Enterprise Server as needed using the same license(s) to distribute data load between them.

To install the license file for DeviceLock Enterprise Server use DeviceLock Management Console:

  • Run DeviceLock Management Console
  • Connect to an instance of DeviceLock Enterprise Server
  • Go to the Server Options section-> select DeviceLock license(s)-> Properties -> Load License(s)-> OK.

IMPORTANT:

Starting from DeviceLock 8.1.63827 version, DeviceLock Enterprise Server performs database encryption, thus a new new license 'DeviceLock Enterprise Server Database Access license' (dlesdb.lic) type was added. This is an optional license type required to allow third party applications to access the DeviceLock database. The license activation process is similar to installing other DeviceLock licenses.

This license is not required when using the DeviceLock Management Console to view and manage audit and shadowing data collected by the DeviceLock Enterprise Server. For more detailed information on DeviceLock database encryption please refer to the following KB article: https://kb.acronis.com/content/66121

Acronis DeviceLock Discovery Server

Starting from DeviceLock 8.0, the new optional server component DeviceLock Discovery, part of the DeviceLock Content Security Server module, is available.

DeviceLock Discovery is licensed separately from DeviceLock DLP. That means, this component can be used individually without DeviceLock Base license.

To install Discovery Server license file (dlds.lic) use DeviceLock Management Console:

  • Run DeviceLock Management Console
  • Connect to an instance of DeviceLock Content Security Server
  • Expand the Server Options node
  • Go to the Discovery Server Options section
  • Select Discovery Server license(s)-> Properties -> Load License(s)-> OK.

Notes

*All DeviceLock License files originally have the .lic extension. When activated, the file changes its extension to .li_, indicating the successful activation. You can check the activation information in Help-> About ….
**In case you have two or more DeviceLock license files, please rename them, so they do not have the same name, and thus can be placed into the same directory. For example, devicelock.lic, devicelock1.lic, dlcl.lic, dlcl2.lic, etc.

 

See also: 

Acronis DeviceLock DLP Licensing, Ordering Guide

Tags: