How to apply licenses to NetWitness Platform server
Issue
This article explains:
- How to apply licenses to an NetWitness server.
- What is the NetWitness entitlement process?
- How to apply NetWitness product licenses.
Resolution
This procedure is to be used to apply NetWitness product licenses to a new NetWitness server. In order to perform the procedure, you will need to have the NetWitness Sales Order that contains the software license serial numbers for the recently purchased entitlements. You will need to enroll in MyNetWitness (https://enroll.netwitness.com). if this has not already been done. If you receive an error stating that your user does not exist, or are having any issues with the enrollment process, please open a NetWitness Support case for assistance.
Be advised that the NetWitness Platform architecture relies heavily on the NTP and DNS services. It is important that these two services are properly configured and functioning on the NetWitness Platform Admin server.
NetWitness Server Entitlement
This will allow the NetWitness Admin server to be licensed and entitled with add-ons.
- Login to the NetWitness Platform UI and obtain the License Server ID.
- Select Admin > System > License Info.
- Copy the License Server ID.
- Login to MyNetWitness
- Once logged in, look under the Manage Products and Licenses section on the front page.
- Click the Map Licenses button.
- A popup will appear with a Select a License Number drop down box.
- Click in the Select a License Number box and select the serial number of the license you want to apply. If you do not see the serial number, stop and open a NetWitness Support case.
- With the license serial number selected additional information about the license will appear such as the quantity, effective and end date, the order number, etc. Click the Go button to continue.
- Click Create License Server in the left hand box under Device Management. Utilizing the license server ID from the NetWitness UI, proceed to create the license server by placing the ID into the License Server ID field. Provide an optional description under Alias.
- Click the Create Server button to create the new License Server in our licensing system. If an error is produced, stop and open a NetWitness Support case with a screenshot of the error message.
- Once the server has been created, click on the Map Add-Ons link which opens a section that shows all the available licenses on the current account.
- Find the license that is to be mapped and place the quantity to be mapped in the Qty to Add box. You can see the number of available quantity by looking at the Available Units in Line Item field.
- Network Monitoring (NETMON): 1 quantity equals 1TB per day capture
- Network Monitoring META (NETMONMETA): 1 quantity equals 1TB per day capture
- Network Malware (NETMAL): 1 quantity equals 1TB per day capture
- SIEM: 1 quantity equals 50GB per day capture
- UEBA: 1 quantity equals 1 User/Entity
- Endpoint: 1 quantity equals 1 agent
- Once the number of quantity for the license has been set, click the Map Add-Ons button at the bottom of the page.
- Back on the View Server page, click the Download Capability Response link to download the bin file that will be required by the NetWitness UI.
- You are now ready to entitle the NetWitness Admin server.
Applying NetWitness Licenses
There are two options for applying the licenses to a NetWitness Admin server: Online and Offline.
Online Entitlement
Press the Refresh Licenses button under Admin > System > Licensing > License Details tab for the licenses from myNetWitness to be reflected within the UI. If any errors appear or the new licenses do not appear after 30 minutes, contact NetWitness Support. For the online entitlement process to work, the NetWitness Platform Admin server must be able to access the internet.
Offline Entitlement
Follow the steps below for the offline entitlement process.
- Take the license bin file downloaded from the NetWitness Server Entitlement section above.
- In the NetWitness Platform UI, click Admin > System, and then click Licensing.
- Click the Settings tab.
- Click the Upload button under Step 2: Upload Offline Response and browse to the license bin file downloaded in Step 1.
- Refresh the NetWitness UI browser.
- If any errors are produced while uploading the bin or if the license status in the UI does not change, please contact NetWitness Support.
Confirm Your Entitlement
Follow the steps below to confirm that the entitlement process was successful.
- In the NetWitness Platform UI, click on Admin > System.
- Click Licensing and then on the License Details tab. The product entitlements should be reflected in this tab.
Refer to the Licensing Management Guide 12.5.1 for more details.
If you are unsure about any of the steps above or experience any issues, contact NetWitness Support and quote this article ID.
Product Details
RSA Product Set: NetWitness Platform
RSA Product/Service Type: NetWitness Products
Approval Reviewer Queue
Technical approval queue