Licensing Guidelines

The following article describes the various license or activation guidelines that are implemented in PAM, why you may be out of compliance with your activated key and how to bring yourself back under compliance.

Of note, the license guidelines messages will only appear to those users with either the System Administrator or Auditor global role.

Application Node License

When activated, your license key contains a total number of Application Nodes that you have been issued.

When the total number of configured Nodes in your PAM deployment exceeds your license amount, the following message will appear within the software where x represents the total number of nodes allowed and y represents the total number of nodes currently in your deployment:

To view the current Application Nodes in your deployment, navigate to the Administration > Settings > Application Nodes tab.

On this page, each Application Node will be displayed and is calculated by the number of unique nodes deployed.

A unique node is considered one that has a unique Host Name.

For instance, the following represents a common scenario where two application nodes are listed but are only counted as one because they have the same Host name xtamServer:

1
2
3
4
xtamServer:Worker
2.3.201907212255 / 07/26/2019 12:04
xtamServer:GUI
2.3.201907212255 / 07/26/2019 12:04

Another instance represents a common scenario where PAM is configured in a High Availability configuration where four application nodes are listed but are only counted as two:

1
2
3
4
5
6
7
8
xtamServerNode-A:Worker
2.3.201907212255 / 07/26/2019 12:04
xtamServerNode-A:GUI
2.3.201907212255 / 07/26/2019 12:04
xtamServerNode-B:Worker
2.3.201907212255 / 07/26/2019 12:04
xtamServerNode-B:GUI
2.3.201907212255 / 07/26/2019 12:04

If you find yourself out of compliance with your Application Node license guidelines, then the following options are available to bring yourself back into compliance:

• Uninstall or shutdown unused or extra nodes from your PAM server farm. After that, remove these nodes from your vault by clicking the Edit button located in your node’s Actions menu and then click the Remove button. When the node appears online again, it will create a configuration record in the list of Application Nodes again with the default configuration. Or:
• Contact your Account Representative to purchase additional Application Nodes for your license.

Remote Session Manager Node License

Similar to the above Application Nodes, you are also restricted by the number of Remote Session Manager nodes that can be included within your licensed PAM deployment.

When the total number of configured Session Manager Nodes (known as Proximity Groups) in your PAM deployment exceeds your license amount, the following message will appear within the software where x represents the total number of Proximity Groups allowed and y represents the total number of Proximity Groups currently in your deployment:

To confirm your current deployment of Session Manager Nodes or Proximity Groups, navigate to the Administration > Settings > Proximity Groups tab.

Each Proximity Group listed will be counted towards the license regardless of its current connectivity status.

If you find yourself out of compliance with your Remote Session Manager Node license guidelines, then the following options are available to bring yourself back into compliance:

• Remove any additional unused or extra nodes from your deployment by clicking the Edit button located in your proximity group’s Actions menu and then click the Delete button. This will permanently remove this node from your PAM deployment so please understand the significance of each proximity group before removing it from your deployment. Or:
• Contact your Account Representative to purchase additional Remote Session Manager Nodes for your license.

User Count License

When activated, your license key may contain a total number of Users that are permitted to use PAM. When the total number of Users in your PAM deployment exceeds your licensed amount, the following message will appear within the software where x represents the total number of users allowed and y represents the total number of users currently in your deployment.

To generate a report containing your current list of licensed Users, navigate to Administration > Global Permissions > Access Report.

This report will list all users that have permissions to access any object within PAM and the level and means by which they are granted this access.

If you find yourself out of compliance with your User Count license guidelines, then the following options are available to bring yourself back into compliance:

• Remove the permissions of any unused, test or extra Users from your PAM objects. This can be done by finding the user(s) in the Reports > Users report, using the View Objects option to determine which objects they have permissions to and then removing them where necessary. Once all permissions have been removed for the user, they will no longer be counted towards the license’s User Count. Or:
• Contact your Account Representative to purchase additional Users for your license.

Record Count License

When activated, your license key may contain a total number of Records that are permitted to be created in PAM.

When the total number of Records in your PAM deployment exceeds your licensed amount, the following message will appear within the software where x represents the total number of records allowed and y represents the total number of records currently in your deployment.

To generate a report containing your current list of Records, navigate to Reports > Inventory.

This report will list all objects that are currently within the PAM Identity Vault.

In the Inventory Report’s Search box, enter the query records to filter out all Vaults and Folders so you have a complete report of only the Records.

If you find yourself out of compliance with your Record Count license guidelines, then the following options are available to bring yourself back into compliance:

• Delete any records that are no longer needed such as those that were being used for testing. Or:
• Contact your Account Representative to purchase additional Records for your license.

Expired License

When your license expires, you will still have full access to all objects within PAM; however, you will not be permitted to Create new objects (Vaults, Folders or Records), Connect a session, or Execute tasks.

When your license has expired, you will see the following message:

And if anyone attempts to create a new record, they will receive the following message:

If a user attempts to Connect a session, they will receive the following message:

If a user attempts to Execute a task, they will receive the following message:

To extend or renew your license, you must contact your Account Representative.

If questions remain or issues arise while using PAM, please contact our Support team: https://support.imprivata.com/.