Support Center > Search Results > SecureKnowledge Details
License, Contract, and Package Management on Security Management Servers and Security Gateways Technical Level
Solution

Licenses and Contracts for Check Point products are activated and entitled automatically in most common scenarios.

Administrators can view, add, and delete licenses directly from the SmartConsole application:

First Time Activation of the License and Contract

On Check Point Appliances

Licenses and Contracts are activated automatically on Quantum Security Management Servers or Quantum Security Gateways that are installed on Check Point appliances (requires Internet connectivity to Check Point User Center).

On Open Servers or Virtual Machines

Activate the license in one of these ways:

  • During the Gaia First Time Configuration Wizard (see the Installation and Upgrade Guide for your version > Chapter The Gaia Operating System > Section Configuring Gaia for the First Time)

  • After the Gaia First Time Configuration Wizard:

    • In Gaia Portal (see the Gaia Administration Guide for your version > Chapter Maintenance > Section License Status)

    • In SmartConsole (see the Security Management Administration Guide for your version > Chapter Managing Gateways > Section Managing Licenses > Section Managing Server and Gateway Licenses)

    • With the cplic command (see CLI Reference Guide for your version > either Chapter Security Management Server Commands, or Chapter Security Gateway Commands > Section cplic)

Subsequent License Installation and Renewal of Service Blades

New licenses are installed and updated automatically when the Quantum Security Management Servers or Quantum Security Gateways can connect to Check Point User Center over the Internet.

A Quantum Security Gateway that has no Internet connectivity can access Check Point User Center through a connected Security Management Server.

To use this feature, you must enable Automatic Downloads (see the Installation and Upgrade Guide for your version > Chapter Check Point Cloud Services).

Important Note - If an installed license expires, then the corresponding products / features stop working. If you renew your license or install a new license, then the corresponding products / features continue working again.

Options to renew your licenses or create new licenses:

Offline Deployments

If a Quantum Security Management Server or managed Quantum Security Gateway cannot connect to Check Point User Center over the Internet:

  • To manage licenses, use either SmartConsole or the cplic command

  • To manage contracts, use either the cplic command or Legacy SmartUpdate GUI (in SmartConsole, click Menu > Manage licenses & packages)

See the:

  • Security Management Administration Guide for your version > Chapter Managing Gateways > Section Managing Licenses > Section Managing Server and Gateway Licenses

  • CLI Reference Guide for your version > either Chapter Security Management Server Commands, or Chapter Security Gateway Commands > Section cplic

CloudGuard Network

For distributing licenses to CloudGuard Network Gateways:

Deployment of Software Packages (Hotfixes and Version Upgrades)

See sk168597 - How to keep your Security Gateways up to date and follow the applicable procedure:

  • For Security Gateways R80.40 and higher - Central Deployment from SmartConsole (recommended)

  • For Security Gateways R80 and higher - Central Deployment Tool (CDT)

  • For Management Servers and Security Gateways R80 and higher - CPUSE (local deployment)

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment