Ensuring Proper Licensing of Your Client Software
There are three licensing types you should be aware of as you configure your Luna Network HSM 7:
>Client licenses
>Feature licenses
>Partition licenses
Client Licenses
>A client license gives you the right to connect an application server, whether physical or virtual, to your Luna Network HSM 7.
>A single client license allows you to run multiple applications from your application server and connect to multiple Luna Network HSM 7s.
>A single client license suffices when multiple containers connected in a cluster to the same partition/HA group are part of the same application.
Exceptions
Client licenses are not required for the following:
>Luna USB HSM 7
>Luna PCIe HSM 7
>Luna Backup HSM 7
The need for a license is waved when other Thales CPL solutions are used. These include:
>Cipher Trust Manager (physical or virtual) when the HSM is used as root of trust / key source or to manage anchored domains
>Waf products
>ID Prime Virtual
>DKE broker
>DPOD Luna Cloud HSM tile
>Crypto Command Center
Enforcement
>Honor based: it is your responsibility to declare the number of client licenses you are using to your Thales account manager and maintain them.
>Client licenses are perpetual and do not require you to download a license file.
Transfer
Client licenses are not attached to a specific HSM serial number, so no transfer procedure is required.
Feature Licenses
Feature licenses can be applied to the Luna Network HSM 7 and Luna PCIe HSM 7. See Upgrading HSM Capabilities and Partition Licenses.
Feature licenses enable the following feature upgrades to your HSM:
>Functionality module for Luna Network HSM 7
>Functionality module for Luna PCIe HSM 7
>PQC FM (Post-quantum cryptographic functionality module)
>Korean algorithms
Enforcement
>Per device for functionality modules: you will need to provide your device's serial number and have a CUF file generated for that device.
>Honor based: it is your responsibility to declare the number of feature licenses you are using to your Thales account manager and maintain them.
Transfer
>Functionality module licenses can be revoked from your HSM and reassigned to another through the Thales Licensing Portal.
>PQC FM transfer is honor based.
Partition Licenses
Partition licenses can be applied to any Luna Network HSM 7. They come in upgrade packs (of 5) that increase the maximum number of application partitions available on your HSM. See Upgrading HSM Capabilities and Partition Licenses.
Activation
>After receiving the entitlement confirmation email, visit the Thales Licensing Portal and create an account to activate your upgrade license. You need the Entitlement ID from the confirmation email to complete this procedure.
>Partition licenses are perpetual and do require you to download and install a license file.
>Partition license upgrade is not destructive.
Transfer
You can revoke a partition upgrade license from one HSM in order to activate it on another. Contact Thales for assistance.
Support and Maintenance
>Support and maintenance fees are due every year and can be purchased in advance for up to five years at a discounted rate.
>Maintenance fees are a percentage of the licensing price with services corresponding to the Standard, Enhanced, and Premier HSM levels.
>These services are applicable to client and partition licenses.
