Managing the KeyControl License

Your KeyControl license determines the number of KeyControl nodes you can have in a cluster, the number of VMs that you can manage, the length of time for which you can use KeyControl, and any entitlements that you purchased.

Beginning with KeyControl 5.4, we now support the following license entitlements: 

  • Secrets Vault—Whether Secrets Vault support is enabled.

  • KMIP Server—Whether the KMIP Server is enabled.

  • BYOK—Whether KeyControl support for BYOK is enabled.

If your license expires, you can still access or decrypt your VMs using the keys managed by KeyControl. You can also continue to manage KeyControl or your VMs using the KeyControl webGUI or hicli. However, you cannot:

  • Register a new VM with KeyControl.
  • Encrypt any new data, root, or swap disks, even if they have already been registered with KeyControl.

If your license is about to expire, or if you have registered the maximum number of VMs allowed by your license, KeyControl sends the following alerts:

  • If your license will expire in 7 to 60 days, KeyControl sends an alert once per week.
  • If your license will expire in less than 7 days, or if your license has already expired, KeyControl sends an alert once per day.
  • If you have registered the maximum number of VMs allowed by your license, KeyControl sends an alert once per week.

KeyControl uses https://my.nalpeiron.com on port 443 for the license server.