IBM Support What's New?

How to obtain and apply licenses for AppScan Enterprise

Technote (FAQ)


Question

What are the available license types for IBM Security AppScan Enterprise and how do I obtain and apply the licenses in the most common installation scenarios?

Answer

AppScan Enterprise uses the Rational Common Licensing system, and follows it's licensing processes as described below. For the Policy Tester product, consult Licensing for Policy Tester.



How to obtain licenses



After you purchase the AppScan Enterprise product, the licenses are available at the License Key Center (LKC). You can obtain the licenses as described in this video How to acquire licenses from License Key Center or in How to generate license keys at License Key Center.

If you have difficulty login to License Key Center, consult License Order workflow.

Note: You do NOT receive licenses from your IBM Sales representative nor from AppScan Support (with some exceptions for evaluation licenses). Instead, you or the primary contact with IBM at your company obtain the licenses from LKC as described above.




Licenses needed


The AppScan Enterprise product can be installed in three different configurations. Depending on which configuration you install, you will need a different set of licenses.

To install and run (full) AppScan Enterprise you need licenses for:

  • AppScan Enterprise Server installation
  • Dynamic Analysis Scanner installations
  • Console users (for users to log in to AppScan Enterprise Console)   

To install and run AppScan Enterprise Reporting Only you need licenses for:

  • AppScan Enterprise Server installation
  • Console users (for users to log in to AppScan Enterprise Console)

To install and run AppScan Enterprise Server (for AppScan Source) you need a license for:

  • AppScan Enterprise Server installation
       


Licenses in details



1. Licenses for AppScan Enterprise Server installation

    There are two licenses available for an AppScan Enterprise installation: AppScanServerBasic or AppScanServerPremium. You need only one of them, and you need only one (1) key of the license for an AppScan Enterprise installation.

  • AppScanServerBasic

    The AppScanServerBasic license is for small AppScan Enterprise installations serving up to 10 connections. You can count the connections as described in this technote: Number of connections in AppScan Enterprise. In the License Key Center, this license is referred to as: "IBM Security AppScan Enterprise Svr Basic Per Install License Key".
  • AppScanServerPremium

    The AppScanServerPremium license is for large AppScan Enterprise installations with an unlimited number of connections. In the License Key Center, this license is referred to as: "IBM Security AppScan Enterprise Svr Per Install License Key".


2. Licenses for Dynamic Analysis Scanner installations

    There is only one license for a Dynamic Analysis Scanner installation: AppScanEnterpriseScanner. The number of keys of this license will allow you to install the same number of Dynamic Analysis Scanners. For example, if you have three keys of this license you can install three Dynamic Analysis Scanners on three different machines.

    In the License Key Center, this license is referred to as: "IBM Security AppScan Enterprise Dynamic Analysis Scanner Per Install License Key".


3. Licenses for Enterprise Console Users


    There are two different types of licenses for users who log in to the AppScan Enterprise Console: Floating User or Authorized User.

  • Floating User

    If you have Floating User licenses, then at any time you can have as many users logged in to the Enterprise Console as you have floating user license keys.

    A license key is consumed when a user logs in to the Enterprise Console, and it is released as soon as the user logs out (by using the "Log Out" function in the Enterprise Console). If the user closes the browser without logging out, or leaves the browser open without logging out, the license will be kept for two hours and then released, and then it will be available for the next user.

    Note Users must log off properly to release the license. However for changing the license timeout, refer to How to change license timeout for AppScan Enterprise sessions.

    There are two floating user licences available: AppScanEnterpriseFLT and AppScanEnterpriseReportingFLT:

    • AppScanEnterpriseFLT

      The AppScanEnterpriseFLT license allows users to access most of the functionality in the Console, including creating scans and running scans. In the License Key Center, this license is referred to as: "IBM Security AppScan Enterprise Dynamic Analysis User Floating User Single Install License Key".

    • AppScanEnterpriseReportingFLT

      The AppScanEnterpriseReportingFLT license gives the user limited functionality in the Enterprise Console. The user will not be able to create or run scans. This is a typical license for users who access the Enterprise Console for viewing reports. It is used mostly in the "AppScan Enterprise Reporting Only" configuration.

      In the License Key Center, this license is referred to as:
      IBM Security AppScan Reporting Console Floating User License Key, or
      IBM Security Appscan Enterprise Reporting Only User Floating User Single Install License Key.

  • Authorized User

    If you have Authorized User licenses, only the users that you authorize (users that you specify in "Administration > Users and Groups") will be able to log in. You can authorize as many users as you have license keys of this license. If no users are logged in to the Enterprise Console, and an unauthorized user attempts to log in, they will be denied access.

    If you have a new installation and, for example, 5 Authorized User Licenses, then by default the first 5 users to log in to the Enterprise Console will be automatically authorized to the license, and if any other user attempts to log in, they will be denied access.

    To permit a different user to log in when all of the Authorized User licenses are consumed, the Administrator must first remove a license key from one of the authorized users. They can do it in the Console on the "Administration > Users and Groups" page.

    There are two authorized user licences: AppScanEnterpriseAU and AppScanEnterpriseReportingAU.

    • AppScanEnterpriseAU

      The AppScanEnterpriseAU license allows users to access most of the functionality in the Console, including creating scans and running scans. In the License Key Center, this license is referred to as: "IBM Security AppScan Enterprise Dynamic Analysis User Authorized User Single Install License Key".

    • AppScanEnterpriseReportingAU

      The AppScanEnterpriseReportingAU license gives the user a limited functionality in the Enterprise Console. The user will not be able to create or run scans, for example. This is a typical license for users who access the Enterprise Console for viewing reports. It is used mostly in the "AppScan Enterprise Reporting Only" configuration.

      In the License Key Center, this license is referred to as:
      IBM Security AppScan Reporting Console Floating User License Key, or
      IBM Security Appscan Enterprise Reporting Only User Floating User Single Install License Key.


    Note: The Authorized User license key is displayed incorrectly as Floating license type in the License Key Administrator.


    Usage of mixed types of user licenses

    If you have both Floating User and Authorized User licenses, when a user logs into the instance they will consume whatever license the Default User is set to use.

    The type of license the Default User consumes can be changed by an Administrator by going to "Administration -> Users and Groups" of the Enterprise Console.

    Note: The Product Administrator and Service Accounts (specified in the Configuration Wizards) do not consume a user license. Only one Product Administrator is allowed (you can have several Administrators, but only one "Product Administrator"). Note that in version 8.7 and older, only one Service Account is exempted from consuming a user license (for example, if you have one Service Account for Enterprise Console and another for the Scanners, the second Service Account will consume a user license).


4. Token licensing

For token licenses, consult: Token licenses for AppScan products



How to apply the licenses



Load the generated license file at License Key Center into the License Key Server as described in: How to import AppScan license keys into License Key Server.



Common Licensing scenarios



1. Installing a new AppScan Enterprise product


2. Upgrading AppScan Enterprise to a newer version


When upgrading to a newer version of AppScan Enterprise, you do not need to make any changes to the licensing if you are upgrading from version 8.5 or newer.

If you are upgrading from version 5.6 or 8.0, then you need to do the following tasks:

3. Moving License Key Server to another machine

 

4. Moving AppScan Enterprise to another machine

  • If the License Key Server is going to be moved as well, then refer to scenario #3 for moving the License Key Server.
  • Stop AppScan Enterprise servers on the old machine (or uninstall AppScan Enterprise).
  • Point AppScan Enterprise on the new machine to the License Key Server when running the Configuration Wizard.

Related information

Licensing for AppScan Standard
Licensing for AppScan Source
How to obtain and apply AppScan licenses
Documents on AppScan licensing
Licensing for Policy Tester

Document information

More support for: IBM Security AppScan Enterprise
Licensing

Software version: 8.7.0.0, 8.7.0.1, 8.8, 8.8.0.1, 9.0, 9.0.0.1, 9.0.1, 9.0.1.1, 9.0.2, 9.0.2.1, 9.0.3, 9.0.3.1

Operating system(s): Windows

Reference #: 1634292

Modified date: 2015-10-01