DynFi (on premise) will run with all features without any paid license if there are one, two or three appliances (firewall devices) managed by the DynFi instance.
If someone wishes to manage more devices with DynFi, it is possible with paid licenses which can be obtained on dynfi.com page. Visit the page for current offer, prices and subscriptions.
9.1. Importing licenses¶
After paid license has been purchased on dynfi.com, it has to be imported to DynFi (on premise) to increase the limit of devices. It is possible in System settings, in License information tab, after clicking Import license button.
A small window for license import should pop-up, with Instance ID being different for each DynFi installation.
Using this window a new license key or a renewal can be imported.
In case of on-line licenses, DynFi will send its Instance ID to dynfi.com automatically, so all that has to be done is pasting the License ID obtained at dynfi.com and clicking the Submit button.
For off-line licenses, the user has to paste Instance ID at dynfi.com before generating the license key for further offline usage. Then the whole license key (not only License ID) has to be pasted into the import window before clicking the Submit button.
9.2. License renewals¶
When the imported license key expires, DynFi can do two things, depending on how it has been configured.
- If automatic download of license renewals has not been disabled, DynFi will try to download the renewal, starting some time before the expiration.
- If automatic download of license renewals has been disabled, the renewed or new license key has to be imported manually to your DynFi instance in order to keep DynFi working.
If license subscription is not cancelled, a license will automatically be renewed at dynfi.com. Depending on the selected schema this can happen 4 days for monthly plans, 2 weeks for quarterly plans and 3 weeks for yearly plans.
Automatic download of licenses can be configured in System settings, tab General as shown below.
If automatic download of license renewals is disabled or cannot be performed (e.g. due to whole network traffic to dynfi.com being blocked), make sure that the renewed license key is imported manually before the old one expires.
If no active license is detected and if not disabled, DynFi will also try to download license renewals during startup.
In order to fetch renewed license keys, DynFi instance needs to be able to connect to https://license.dynfi.com. Please make sure that this connection is allowed in your firewall. The rule might look like this:
Allow FROM IP_of_your_DynFi_server any port TO license.dynfi.com ON TCP port 443
9.3. License expiration¶
If the license key expires and its renewal is not imported (either automatically or manually) AND there are more than three devices configured in the DynFi instance, DynFi will stop working. If your DynFi instance manages more than three appliances, at any time it must have at least one license key imported, which covers the number of devices being managed. I.e. for more than three devices you always need active license key which allows the number of appliances you have (the license can be issued for more appliances). The license keys can overlap in time.
9.4. Importing license in CLI¶
In case DynFi’s license has expired and DynFi has already stopped working and automatic license renewals are disabled or DynFi cannot contact license server, the new license has to be imported using CLI (command line interface or “terminal”). First, the license key (whole key, not only License ID) has to be downloaded and saved to a file, e.g. license.key.
Next, the renewed license key can be imported from the file like this:
java -jar /path/to/dynfi.jar --import-license /path/to/license.key
In case you are running DynFi Manager in Debian/Ubuntu using dynfi.com’s DEB archive or repository (as described in Installing DynFi on Ubuntu), you can use the following command. Please note, that the path to the JAR file has to be specified precisely and the version tag will be different in your setup:
sudo -u nobody java -jar /usr/share/dynfi/lib/dynfi-version.goes.here.jar --import-license /path/to/license.key
If the manual import procedure in CLI does not work and the log file says License not matching this DynFi, most probably you are trying to import license file generated for another DynFi Manager instance or that the licence file has been generated for incorrect InstanceID.