Trial Expiration?!?

[BugginOuT]

A number of our Integrity clients are coming up with a trial expiration notice, when they log in.

One way to resolve this is by unistalling the agent and re-installing it. Our support vendor gave me instructions on how to manually plug in the valid license key, but it's not working at all.

I am 100% sure that I've integrated a valid license key onto each client package, does anyone know why this is happening?

[CSING]

Yes,
What is happening is that when installed the registry key under zonelabs registration should contain the license. When Integrity boots the first time it reads this key and creates a hidden encrypted file. After the initial boot this file is read for license information. You should be able to use the Lickey argument to add the new license. To verify that the new license has been correctly installed advanced the endpoints clock 90 days reboot and see if the license is expired.

[BugginOuT]

I was instructed to shutdown the Integrity client before using the lickey command, and the only way I know is by going into Safe Mode, do you know of an alternative method?

Many thanks going out to my vendor that instructed me to copy and paste the license key from the website into my client packages, hence, the 50+ headaches that I need to deal with now.

[CSING]

Have you enabled the shutdown option in the client package? Then all you have to do is enable it in the policy and deploy. Once this is done you can right click on the Integrity icon and the shutdown option will appear. To restart just naviagte to checkpoint/integrity client/iclient.exe This is for Integrity 6.x

[BugginOuT]

Originally Posted by CSING

Have you enabled the shutdown option in the client package? Then all you have to do is enable it in the policy and deploy. Once this is done you can right click on the Integrity icon and the shutdown option will appear. To restart just naviagte to checkpoint/integrity client/iclient.exe This is for Integrity 6.x

We didn't want end-users to shutdown the Integrity client, so we disabled that function. There was no point in installing the software, if the client has the ability to shutdown.

If the Checkpoint Integrity client has indeed expired, will it still be able to accept a new policy from the server?

[CSING]

Originally Posted by BugginOuT

We didn't want end-users to shutdown the Integrity client, so we disabled that function. There was no point in installing the software, if the client has the ability to shutdown.

If the Checkpoint Integrity client has indeed expired, will it still be able to accept a new policy from the server?

NO. The client will be notified once on expiration and iclient will no longer load.

Here's a batch file to simplify:

REM - we want to delete existing license keys - /AH since zllictbl is a hidden file
IF EXIST %windir%\system32\zllictbl.dat DEL %windir%\system32\zllictbl.dat /AH
IF EXIST %windir%\system\zllictbl.dat DEL %windir%\system\zllictbl.dat /AH

REM TO CHECK FOR THE EXISTENCE OF INTEGRITY 6.x CLIENT:
IF EXIST c:\progra~1\checkp~1\integr~1\iclient.exe c:\progra~1\checkp~1\integr~1\iclient -lickey 123456789123456789123456789
IF EXIST d:\progra~1\checkp~1\integr~1\iclient.exe d:\progra~1\checkp~1\integr~1\iclient -lickey 123456789123456789123456789

[BugginOuT]

I've tried the batch file on 2 laptops so far. One Integrity client was able to come back online, while the other failed to start Integrity. Even though, the iclient.exe and vsmon.exe was displayed on the Task Manager, the Integrity icon on the system tray did not appear.

I have another 25+ laptops coming back to the home office in January, wish me luck.

I'll let you know how it goes.

[CSING]

Thanks, for the update. Also remember that the licence key should not have the dashes. How did you get the other agent online?

[BugginOuT]

Originally Posted by CSING

Thanks, for the update. Also remember that the licence key should not have the dashes. How did you get the other agent online?

Yeah, I've edited the license key to lower case and no dashes.

I haven't got a chance to bring the failed agent back online yet. I'm hoping all the other 25 laptops that are coming back won't suffer the same issue. If not, it's pretty much a re-install.

[BugginOuT]

After testing with a few laptops installed with Checkpoint Integrity and experiencing the expiration issue, here are the steps that I've taken to ensure Integrity runs.

I ran the batch program provided by CSING, placed the iclient.exe in the startup folder, restarted the laptop and CheckPoint Integrity ran flawlessly. Thanks for the help!

Buggin