Troubleshooting · 15.8
License and activation
License events are logged in the Operational channel (1530–1538). The activation needs HTTPS access to license.itrain.ch.
| Symptom | Cause | Solution |
|---|---|---|
| License limit: maximum reached with the installed license - certificates <used> of <max>. Raise the license or delete an item. Disabling does not free a slot. | The license allows no more certificates, deployments or tenants. If more certificates or deployments exist than the license allows, for example after installing a smaller license, event 1536 is logged. | Delete items you do not need or install a larger license. Disabling does not free a slot. |
| License: <feature> is not included, for example License: DNS-01 is not included | The edition does not include this issuer, deployment target or feature. | Use an edition that includes the feature, see chapter License. |
| License expired <date>; grace until <date> (renew only). | The license has expired. During the grace period, only renewals are possible. After the grace period, event 1533 is logged and the daily cycle is skipped (event 1106). | Install a renewed license. |
| License server not reachable. This host must reach license.itrain.ch over HTTPS with TLS 1.3. 7-day grace applies. (Initial Setup Wizard, after the activation) or This host must reach license.itrain.ch over HTTPS with TLS 1.3. (Check now) | The online check failed (event 1537). If no check has succeeded since the activation, the host must reach the license server within 7 days of the activation; TLSPilot retries every hour. After a successful check, the host may be offline for up to 30 days after the last successful check; TLSPilot retries every 6 hours. Grace remaining on the tab License shows the time left, and an alert warns 7 days before the grace period ends. | Allow outbound HTTPS with TLS 1.3 to license.itrain.ch. |
| License revoked. Operations continue until <date time>. (status dialog after Check now and once per session), tile License: Revoked until <date> | The license server reports the license as revoked, for example because the subscription was cancelled and the paid period has ended. TLSPilot keeps all licensed features and limits unchanged for 7 days from the check that first reported the revocation, then deactivates the license. | Contact iTrain or install a valid license. |
| License deactivated. | The grace period has ended without a successful online check, or the license was revoked more than 7 days ago. The features are reduced as with an expired license and show Unavailable until a valid license is active. | Restore HTTPS access to license.itrain.ch and click Check now, or install a valid license. |
| <error>. Web UI service is still running. or <error>. Management service is still running. (Desktop Admin console), The TLSPilot services did not stop. Check the TLSPilot log and the Services console. (WebUI) | After a migration backup, the license seat was deactivated, but TLSPilot could not stop a service. The Desktop Admin console stays open. | Stop the service in services.msc. The stop steps are logged as event 1538 in the Operational channel. |
| License in use on another management host. Prefer Deactivate on that host, then Activate here. If that host is unreachable: overwrite once in 30 days. | The license is bound to another management host. | Deactivate the license on the other host first. Overwriting without deactivation works once in 30 days. |
| License install record could not be read on this computer (copied or restored onto a different host). Enter a one-time key in Settings → License. | The configuration was copied or restored onto another host. | Enter a one-time key in the settings on the tab License. |
| This license has been revoked. or License file present but signature invalid. | The license is revoked (event 1532) or the file was changed. | Contact iTrain for a valid license. |
| This file is older or narrower than the license already installed. Re-install with confirmation to force a downgrade. | The license file contains less than the installed license. | Install the current license file, or confirm the downgrade. |
| Event 1534: Data directory ACL is weaker than SYSTEM+Administrators. | Other accounts have access to the data directory of TLSPilot. | Restrict the permissions of %ProgramData%\iTrain\TLSPilot to SYSTEM and Administrators. |