Getting Started with Sentinel LDK—Generating a Software-Based License

Sentinel EMS combines with Sentinel LDK to provide a powerful, centralized, role-based solution for handling all of your software protection, licensing, and entitlement needs.

Sentinel EMS has a straightforward design that walks you through the process of defining the various features and products that match the features and products in your back office system (ERP, CRM, billing system, or sales system).

Sentinel EMS Workflow

Typically, the product owner defines the features and products in the catalog, the order taker defines the entitlement, and the vendor generates the license.

The Basics

The following are the foundation of Sentinel LDK enforcement.

Features

Features are the basic building blocks of products and licenses. Each feature can represent anything from a functional component to an entire application. Learn MoreClosed  This means that you can create separate features for specific functionality, such as "Print" or "Add to Cart", or you can create a feature for each module or for an entire application.

After you define at least one feature in the Sentinel EMS catalog, you can add that feature to a product. This enables you to sell a product with one or more licensed features.

Feature ID (Sentinel LDK) and Feature Identifier (Sentinel EMS). This unique number identifies the feature in your Sentinel LDK application and in Sentinel EMS. During runtime, your application utilizes the Sentinel Licensing API (login function) to consume a license with the specific feature ID. Sentinel LDK Runtime determines whether the user has a valid license to use the corresponding feature. Always ensure that the feature identifier in Sentinel EMS is identical to the feature ID in the Sentinel LDK application you are using to protect your application (Sentinel LDK Envelope or Sentinel Licensing API).

Products

A product represents a saleable item in your organization—such as a software application—usually with a SKU or similar unit. You can package products with individual features and memory files. Learn MoreClosed  Both features and memory files are optional.

License models and terms. Sentinel LDK enforcement provides configurable, out-of-the-box license models.

You assign a license model and license terms to a feature when you add the feature to a product.

Setting license terms per feature occurrence lets you vary the license terms as needed. This flexibility gives you full control over feature usage whether you include one feature per product, the same feature in multiple products, or multiple copies of a feature in a single product.
When ready, you add products to entitlements so that the vendor can generate licenses for distribution to customers.

Entitlements

A customer order for one or more products. Similar to orders in your back office system (ERP, CRM, billing system, or sales system), an entitlement specifies the products that a customer is entitled to use. Learn MoreClosed  It also includes user details, the products ordered, the features and memory files bundled in the products, licensing terms, the number of copies of your product that are available to that customer (quantity), and the entitlement ID (EID). Each entitlement can also be mapped to an actual order or other reference ID in your system using the External ID or Ref ID fields in Sentinel EMS.

When an entitlement is ready to be processed, you mark it as complete. That enables the next step, which is generating a license via Activation or Burning a Key.

ClosedKey Concepts

Let's review the following concepts and terminology that you need to know to work with Sentinel LDK enforcement in Sentinel EMS.

Activation | Burning a Key | Catalog | C2V and V2CP Files | Customers and Users | Devices | Enforcement | License Model | Locking Type | Memory | Namespace (Batch Code) | Unlocked from Device (Product)

Concept Description

Activation

(License Generation)

The process of generating a license package (V2CP file) for one or more products. The license can be locked to a specific device, or it can be unlocked, as described in Unlocked from Device (Product).

Batch Code See Namespace (Batch Code).
Burning a Key

Activates an entitlement by installing the license file directly on a Sentinel HL key (dongle).

Catalog

A container for all of your Sentinel EMS assets, including products, features, memory files, license models, and namespaces.

C2V and V2CP Files

C2V (Customer-to-Vendor). A file containing data about deployed Sentinel protection keys or data about the customer's device, such as its fingerprint. The customer sends the C2V file to the vendor through an automated process or by other means, such as email. The vendor or an automated backend process then uses the C2V file to generate a license for the customer when activating an entitlement.

V2CP (Vendor-to-Customer Package file). A package file from the software vendor that contains one or more license update files (V2C files) for the customer's Sentinel protection key.

Customers and Users

A customer can be an organization that owns an entitlement or a current or potential buyer of an entitlement. Typically, you generate entitlements for a customer who has placed an order. A customer can have one or more users.

Devices

In Sentinel EMS for Sentinel LDK, a device is any hardware on which customers can install your licensed application, including, but not limited to, computers, tablets, phones, and watches.

Enforcement

Licensing technology, such as Sentinel LDK, that controls and secures your software by controlling usage terms and conditions for specific functionalities, and by applying security measures to prevent bypassing these terms and conditions.

License Model

The license terms for a feature. You set the license model when adding a feature to a product, or when modifying a feature in an entitlement. License models:

Define in Entitlement. Enables the order taker to define the license type when each individual order is processed. (Available only when creating a Product.)

Execution Count. The maximum number of times the feature may be used.
(Not relevant for products that are not locked to a device. See Unlocked from Device (Product).)

Expiration Date. The date on which the license for the feature will expire.

Perpetual. Default license model. The license can be used an unlimited number of times and for an unlimited period of time.

Time from First Use. (Also known as Time Period.) The number of days until the license expires. The number of days is counted from the date on which the licensed feature is first used.

Time from License Generation. The number of days until the license expires. The number of days is counted from the date on which the license is generated.
(Not relevant for products that are not locked to a device. See Unlocked from Device (Product).)

Locking Type

The level of protection for a product according to the type of Sentinel protection key supplied with the product. You set the locking type when defining a product. Locking types can be hardware-based (Sentinel HL keys) or software-based (Sentinel SL keys).

Locking Type options:

HL. Use for burning licenses on physical, Sentinel HL keys (dongles).

SL User mode. Use for activating licenses on Sentinel SL UserMode keys (software).

Does not require the installation of Sentinel Run-time Environment (RTE).

Provides limited of security for products that are not locked to a device compared to SL Admin mode.

Provides the highest level of compatibility with future operating system updates.

SL Admin mode. Use for activating licenses on Sentinel SL AdminMode keys (software).

Requires the installation of Sentinel Run-time Environment (RTE).

Supports all license terms, including concurrency and detachable licenses.

Provides a similar level of security for both locked and unlocked products.

Provides a high level of compatibility with future operating system updates.

HL or SL Admin mode. Use for either Sentinel HL keys or Sentinel SL AdminMode keys.

HL or SL AdminMode or SL UserMode. (Default) Use this locking type if the decision on which type of Sentinel protection key is to be shipped with the product is made when each order is processed, or if you plan to use Cloud Licensing.

Memory

Memory files let you store sensitive data in the Sentinel protection key. For example, you might want to store usage counters or your own customized license code.

You create memory files from the Memory tab. You associate memory files when creating a product.

Namespace (Batch Code)

Namespace is known as batch code in Sentinel LDK.

A namespace (batch code) represents your company's unique vendor code. When you order Sentinel protection keys from Thales, you specify your namespace, which is both written to the keys before dispatch and printed on the outside of each Sentinel HL key. Your company can have one or more namespaces. The namespace for Sentinel protection keys with a demo vendor code is DEMOMA.

In Sentinel EMS, a namespace also acts as a workspace, differentiating between separate storage locations. If you have multiple namespaces, the features, memory files, and products in each namespace are available only to those vendor users who have permissions for that namespace. Vendor users with roles that have entitlement-related permissions (such as order takers) can access these items from all namespaces.

Unlocked from Device (Product)

A product that is distributed with a license that is not locked to a specific device and can therefore be installed freely by any user on any device. Typical uses include:

Trial licenses (free for up to 90 days), which can start from the date of license generation or first use, depending on the License Model. (The Execution Count license model is not relevant for products that are not locked to a device.)

"Unlimited" products in an application for which you use Envelope to protect your intellectual property (IP). These products may or may not contain licensing restrictions. For example, you might decide to apply a Perpetual license, limit the time period in which the license can be used, use another mechanism to license the application, or not impose any licensing restrictions at all.

When you create an entitlement, you can include products that are either locked to a device or unlocked from a device, but not both.

ClosedWhat's not included?

Your business plan.

This guide assumes that you know your products, their features, and how you package them. You know who your customers are and what license terms you want to provide for them. Understanding your own business objectives will help you understand how the various components in Sentinel EMS can be mapped to your system.

Information about other Sentinel LDK components.

This guide assumes that you are already familiar with Sentinel LDK and its various components, including:

How to install Sentinel LDK. For details, see the Sentinel LDK Installation Guide.

How to use the Sentinel LDK Master Wizard to download API libraries and introduce your Sentinel Vendor keys. For details, see Running the Sentinel LDK Master Wizard in the Sentinel LDK Installation Guide and the Sentinel LDK Software Protection and Licensing Guide.

How to use the Sentinel Licensing API to perform the licensing and protection functionality available in the Sentinel LDK Run-time Environment. For details, see the Sentinel Licensing API Reference:  C   |   .NET   |   .NET Standard   |   Java

How to use Sentinel LDK Envelope to encrypt your application and wrap it in a protective shield. For details, see the Sentinel LDK Envelope help system provided with Sentinel LDK.

How to use any of the following to fetch a device's fingerprint and save it as a C2V file.

Sentinel Remote Update System (RUS) tool. For details, see Collecting Computer Data in the Sentinel LDK Software Protection and Licensing Guide.

Sentinel Admin Control Center. For details, see Sentinel Keys.

Sentinel Licensing API. For details, see:   
C
  |   .NET   |   .NET Standard   |   Java  

How to use any of the following to retrieve Sentinel protection key license data and generate C2V files.

Sentinel Remote Update System (RUS) tool. For details, see Collecting Sentinel Protection Key License Data in the Sentinel LDK Software Protection and Licensing Guide.

Sentinel Admin Control Center. For details, see Sentinel Keys.

Sentinel Licensing API. For details, see:   
C
  |   .NET   |   .NET Standard   |   Java  

How to use Sentinel Admin Control Center to manage licenses and keys. For details, see Sentinel Admin Control Center in the Sentinel LDK Software Protection and Licensing Guide.

To learn more about any of the components in the Sentinel LDK Vendor Suite, see Major Components of the Vendor Suite.

The Steps

Follow the steps below to generate a license using Sentinel EMS with Sentinel LDK enforcement.