Licensed Users

>What is a Licensed User?

>The Licensed Users Page

>Grid Columns

>Licensed User Attributes Tab

>Permissions Tab

>Registered Machines Tab

>Search Parameters for Licensed Users

>Adding a Licensed User

What is a Licensed User?

A licensed user refers to the end user that is licensed to use the protected application. Each licensed user is associated with a single identity, which is represented by an identity string.

The Licensed Users Page

The Licensed Users page lists all of your customers with Sentinel keys. On this page, you can:

> View and edit licensed user details and permissions

>Copy the identity string and identity link to share as needed

>Manage auto-registered machines for a licensed user

>Disable or delete licensed users when needed

NOTE   If a licensed user was created by the vendor administrator, then you can view the licensed user's details and permissions, but you cannot edit them.

To open the Licensed Users page:

In the navigation pane, click Licensed Users.

Image showing Licensed Users page

Grid Columns

The following columns are displayed for each licensed user:

Attribute Description
Status The status of the licensed user.

Enabled

The licensed user can use the license to access protected applications.

Disabled

The user cannot use the license to access protected applications.

Name The name of the licensed user.
Customer

The name of the customer to which this user belongs.

Email The unique email address of the licensed user.
Description A description that may contain information about the licensed user.
Identity Code

A unique 7-character string. The identity code is part of the full identity string that specifies the client identity for the licensed user. The licensed user is the end user in the customer organization who is allowed to use the protected application. You provide the identity string to the licensed user. The licensed user installs this identity string on their machine.

NOTE   If the licensed user clicks the URL link from the email that notifies them that they can access the protected application, then Sentinel Run-time Environment version 8.51 or later must be included with the protected application.

When the licensed user runs a protected application, the local license manager uses the identity string to consume a license from the relevant protection key your cloud license server machine. If the licensed user has the appropriate permissions, the licensed user can use the identity string to detach a license from the cloud license server machine and then run the protected application offline.

For details, see Permissions Tab.

Creation Date

The date and time that the licensed user was defined.

Actions

The actions that you can perform for this user.

Edit Opens a page that enables you to edit the attributes and permissions of the selected licensed user. Make sure to click Save to save your changes.
Copy Identity String

Copies the identity string to the Clipboard. This is useful if Sentinel Run-time Environment is not included with the protected application, and the licensed user needs to update the API .ini file with this identity string to use the protected application.

Example of identity string: FFSTQYU:oBWAAQCBEFPxvWKzIBicixs/v0rerEA@licenseserver.example.com

Example .ini file path on Windows: %LocalAppData%\SafeNet Sentinel\Sentinel LDK\hasp_<vendorId>.ini

For details on adding the identity string to the .ini file, see Sentinel LDK Software Protection and Licensing Guide.

Copy Identity Link

Copies the identity string and the link to the protected application to the Clipboard. This is the same link that is included in the email that is sent to licensed users notifying them that they have access to a protected application.

This is useful if you want to send this link directly to the licensed user by yourself, not using, for example, if the SMTP server is not configured. For configuration details, see Configuration.

Example of identity link: https://cloudportal.example.com/_int_/install.html?identity=FFSTQYU:oBWAAQCBEFPxvWKzIBicixs/v0rerEA@licenseserver.example.com

Disable Opens a confirmation box that enables you to change the enabled status of a licensed user to Disabled.
Enable Opens a confirmation box that enables you to change the disabled status of the licensed user to Enabled.
Delete

Opens a confirmation box that enables you to permanently remove the licensed user from the cloud license server.

Licensed User Attributes Tab

When you expand the record for a licensed user, you can view that user's details. Only attributes with defined values are displayed for a licensed user.

Attribute Description
Status The status of the licensed user.

Enabled

The licensed user can use the license to access protected applications.

Disabled

The user cannot use the license to access protected applications.

Name The name of the licensed user.
Customer

The name of the customer to which this user belongs.

Email The unique email address of the licensed user.
Phone

The telephone number of the licensed user.

Description A description that may contain information about the licensed user.
Identity Code

A unique 7-character string. The identity code is part of the full identity string that specifies the client identity for the licensed user. The licensed user is the end user in the customer organization who is allowed to use the protected application. You provide the identity string to the licensed user. The licensed user installs this identity string on their machine.

NOTE   If the licensed user clicks the URL link from the email that notifies them that they can access the protected application, then Sentinel Run-time Environment version 8.51 or later must be included with the protected application.

When the licensed user runs a protected application, the local license manager uses the identity string to consume a license from the relevant protection key your cloud license server machine. If the licensed user has the appropriate permissions, the licensed user can use the identity string to detach a license from the cloud license server machine and then run the protected application offline.

For details, see Permissions Tab.

Send Notification

Specifies if an email should be sent to licensed users when a protected application is available for their use.

Possible values: Yes or No

Created By The name of the administrator that added the licensed user.
Creation Date

The date and time that the licensed user was defined.

Permissions Tab

When you expand the record for a licensed user and click Permissions, you can view the permissions for the licensed user.

Field Description
Maximum Number of Auto-Registered Machines per Licensed User

An auto-registered machine is the client machine on which a licensed user has run the protected application at least once.

Possible values:

>1-10 (default is 5) The maximum number of remote machines that are allowed to use this identity string to access the license server machine. Each machine will be automatically registered the first time it accesses the license server machine. When the maximum number of machines are registered, no additional machines can use this identity string.

>Unlimited. An unlimited number of remote machines are allowed to use the identity string to access the license server machine. The machines will not be registered.

Expiration Date

Date on which the client identity expires for the licensed user.

Possible values:

>An expiration date

>Never expires

Allow Online Connection to Licenses

Enables a remote machine with an identity string to consume a license from the license server machine.

Possible values: Yes or No

Allow License Detaching

(Relevant for both automatic and on-demand detaching)

Enables a client machine to detach a license (a network seat) for a protected application from the license server machine whenever a license is required. You set the length of time for detached licenses from the Sentinel Admin Control Center > Configuration > Detachable Licenses tab.

>Automatic detaching. Detached licenses are deducted from the pool of available networks seats on the CL key. The client machine retains the license up to the number of hours specified even if the connection to the license server is interrupted. This enables the protected application to continue to operate without connection to the license server machine. When the detached license expires, it automatically returns to the pool of network seats on the CL key and is disabled on the machine.

>On-demand detaching. You can manually detach a license from a CL key and attach it to your machine for a specified number of days. This is useful if you want to work with a protected application and expect to be disconnected from your company’s network for an extended period. You can detach a license using one of the following:

Online. You can connect from your machine to the machine where the SL key is located and detach a license. The license is immediately attached to your machine.

Offline On the machine where the SL key is located, an administrator can generate an H2R file that contains a detached license. The administrator transfers the file to the recipient. The recipient applies the H2R file on their machine.

Possible values: Yes or No

Allow Concurrency for Detached Licenses

(Relevant only for on-demand detaching and visible only if Allow License Detaching is set to Yes)

Enables a machine with the identity string to detach one or more network seats with concurrency from the license server machine. These seats can then be accessed concurrently on the machine that receives the detached license.

A detached license with concurrency can be used to:

>Set up second-level license servers. These can be used to provide greater control over the distribution of network seats within an organization and to minimize the overhead of license administration. For more information, see the Sentinel LDK Software Protection and Licensing Guide.

>Control the number of local hardware resources used by an application. For example, a protected application can be limited to use 4 out 8 CPUs. This requires a detached license with 4 seats, where access to each CPU is granted after the application logs in to the license. In this example, the fifth login will be denied, ensuring that only 4 CPUs are in use.

Possible values: Yes or No

Allow Access to All Associated Products

When set to Yes, enables a machine with the identity string to access licenses for all products.

When set to No, enables you to select the products for which the identity string can access licenses.

Possible values: Yes or No

Registered Machines Tab

Machines are registered automatically when a licensed user opens a protected application. Administrators can view the list of registered machines for each licensed user. If the administrator registered the machine for the licensed user, then the administrator can also disable or enable access from the protected application to the machine.

Attribute Description
Status

The status of the registered machine.

Enabled The licensed user can use the machine the access the protected application
Disabled The licensed user cannot use the machine the access the protected application. This can occur only if the Sentinel LDK Cloud Portal administrator disables the machine.
Computer Name The name of the device as defined in the system settings.
IP Address

The IP address of the client machine.

Host User Name The name of the user that logs in to the machine to use the protected application.
Registration Date The date that the machine was registered. This might be the date that the licensed user installed the identity string to use the protected application.
Actions The actions that you can perform for this registered machine.
Disable

Opens a confirmation box that enables you to change the status of an enabled machine to Disabled.

Enable

Opens a confirmation box that enables you to change the status of a disabled machine to Enabled.

Delete

Opens a confirmation box that enables you to permanently remove the machine from the cloud license server.

Search Parameters for Licensed Users

You can use the search bar to filter the list and show only those licensed users that meet the relevant search parameter. The following search parameters are available:

>Creation Date From

>Creation Date To

>Email

>Identity Code

>Name

>Phone

>Ref ID

Adding a Licensed User

You can add as many licensed users as allowed. The maximum number of licensed users is defined in Customer Permissions

To add a licensed user:

1.In the navigation pane, click Licensed UsersAdd Licensed User.

2.In the Define Attributes area, fill in the relevant information.

Attribute Description
Name (Required) The name of the licensed user.
Customer

(Required) The name of the customer to which this user belongs.

Email The unique email address of the licensed user.
Phone

The telephone number of the licensed user.

Description A description that may contain information about the licensed user.
Send Notification

Specifies if an email should be sent to licensed users when a protected application is available for their use.

Possible values: Yes or No

3.In the Permissions area, apply the relevant settings.

Field Description
Maximum Number of Auto-Registered Machines

An auto-registered machine is the client machine on which a licensed user has run the protected application at least once.

Possible values:

>1-10 (default is 5) The maximum number of remote machines that are allowed to use this identity string to access the license server machine. Each machine will be automatically registered the first time it accesses the license server machine. When the maximum number of machines are registered, no additional machines can use this identity string.

>Unlimited. An unlimited number of remote machines are allowed to use the identity string to access the license server machine. The machines will not be registered.

Expiration Date

Date on which the client identity expires for the licensed user.

Possible values:

>An expiration date

>Never expires

To set an expiration date:

a.Clear the Never Expires check box.

b.Do one of the following:

Set the date.

Click the calendar icon to display a calendar. Use the calendar to select the expiration date.

In the Days field, specify the number of days the client identity should remain active.

Regardless of which field (calendar or days) you use to specify the duration of the client identity, the other field is automatically updated so that the two fields remain synchronized.

If you set an expiration date, the selected date cannot exceed the expiration date of the CL key.

When using a second-level license server with a detached license, the expiration date for the detached license cannot exceed the expiration date of the CL key or of the client identity on the second-level license server.

Allow Online Connection to Licenses

Enables a remote machine with an identity string to consume a license from the license server machine.

Possible values: Yes or No

Allow License Detaching

(Relevant for both automatic and on-demand detaching)

Enables a client machine to detach a license (a network seat) for a protected application from the license server machine whenever a license is required. You set the length of time for detached licenses from the Sentinel Admin Control Center > Configuration > Detachable Licenses tab.

>Automatic detaching. Detached licenses are deducted from the pool of available networks seats on the CL key. The client machine retains the license up to the number of hours specified even if the connection to the license server is interrupted. This enables the protected application to continue to operate without connection to the license server machine. When the detached license expires, it automatically returns to the pool of network seats on the CL key and is disabled on the machine.

>On-demand detaching. You can manually detach a license from a CL key and attach it to your machine for a specified number of days. This is useful if you want to work with a protected application and expect to be disconnected from your company’s network for an extended period. You can detach a license using one of the following:

Online. You can connect from your machine to the machine where the SL key is located and detach a license. The license is immediately attached to your machine.

Offline On the machine where the SL key is located, an administrator can generate an H2R file that contains a detached license. The administrator transfers the file to the recipient. The recipient applies the H2R file on their machine.

Possible values: Yes or No

Allow Concurrency for Detached Licenses

(Relevant only for on-demand detaching and visible only if Allow License Detaching is set to Yes)

Enables a machine with the identity string to detach one or more network seats with concurrency from the license server machine. These seats can then be accessed concurrently on the machine that receives the detached license.

A detached license with concurrency can be used to:

>Set up second-level license servers. These can be used to provide greater control over the distribution of network seats within an organization and to minimize the overhead of license administration. For more information, see the Sentinel LDK Software Protection and Licensing Guide.

>Control the number of local hardware resources used by an application. For example, a protected application can be limited to use 4 out 8 CPUs. This requires a detached license with 4 seats, where access to each CPU is granted after the application logs in to the license. In this example, the fifth login will be denied, ensuring that only 4 CPUs are in use.

Possible values: Yes or No

Allow Access to All Associated Products/Keys

When set to Yes, enables a machine with the identity string to access licenses for all products.

When set to No, enables you to select the products or Sentinel keys for which the identity string can access licenses.

Possible values: Yes or No

To associate products or Sentinel keys with the licensed user:

In the Available Products or Available Keys grid, do one of the following:

>Click the Add button in the Actions column to move a specific product or Sentinel key to the Associated Items grid.

>Select one or more check boxes and click the Add button below the grid to move the products or Sentinel keys to the Associated Items grid.

adding available products or keys

4.Click Save.