OneSpan products are licensed per client component record in the data store. The licensing uses a license key that is verified when OneSpan Authentication Server starts. This license key is tied to the network location (IP address) where OneSpan Authentication Server is installed, and stored in the OneSpan Authentication Server server component record.
If the license key is missing, invalid, or expired, administrative logons are still allowed for configuration and management purposes, but all other services, such as authentication, will be unavailable. A license key is required for all of the following:
- SOAP
- RADIUS
- Authentication
- Signature validation
As of OneSpan Authentication Server 3.23, SOAP is by default enabled in all licenses. If your license was created prior to product version 3.23, you can contact OneSpan Support and request a free license upgrade.
Licensing for multiple instances of OneSpan Authentication Server
You can run multiple OneSpan Authentication Server instances on the same Linux host (see Running multiple OneSpan Authentication Server instances on a single Linux host machine). Each server instance will require its own valid license tied to the IP address of its corresponding instance.
Re-licensing
You need to obtain and load new license keys for your server components in the following cases:
- You need to change or have changed the OneSpan Authentication Server IP address.
- You need to change from an evaluation license to a commercial license.
- You need to upgrade a commercial license to add new license options.
- You want to upgrade to a higher major version of OneSpan Authentication Server.
Whenever you change or update the server license key, you need to reconfigure OneSpan Authentication Server replication!
Obtaining and Loading License Keys
The Maintenance Wizard will guide you through the process of requesting and loading a license key. If for some reason it is impossible to complete the licensing during the initial installation, the Administration Web Interface can be used to obtain and load a license key for a component later. This process must be completed for each OneSpan Authentication Server instance.
To view license information for a client component, log on to the Administration Web Interface and navigate to Clients > List. This will display the Client list. Note that not all clients require a license.
To view license information of a OneSpan Authentication Server component
- Log on to the Administration Web Interface.
- Navigate to SERVERS > List. This will list all OneSpan Authentication Server instances. Select the required server to view its property pages.
- Switch to the License tab and inspect the licensing properties of that server component.
To obtain a license key, an active Internet connection is required.
To obtain and load a license key
In the SERVERS > List > License tab, click GET LICENSE KEY.
A new web browser window is opened to take you to the OneSpan Customer Portal at https://cp.onespan.com/.
- Sign in with your contract ID and serial number.
- Follow the instructions on the portal to generate and download an appropriate license key.
- Once the download is complete, return to the Licensing page of the server component for which you are obtaining a license.
- Click LOAD LICENSE KEY.
- Browse to the download location of the license key previously downloaded and select the license key file.
To enable OneSpan Authentication Server features that are newly licensed, select the Automatically enable new functionality checkbox. All new functionality is enabled and will be available in the Administration Web Interface. Note that some features, such as the RADIUS communicator, will not be enabled if they were disabled when the license was loaded. They will still have to be enabled manually.
If the Automatically enable new functionality checkbox is not selected, new functionality will only be enabled the next time you log on to the Administration Web Interface.
- Click UPLOAD to load the license key from the file into the component record.
Any new functionality may need to be enabled in other OneSpan Authentication Server instances. In that case, repeat this procedure for each instance.