Secure Global Desktop Administration Guide > Getting started > Licensing and Sun Secure Global Desktop Software

Licensing and Sun Secure Global Desktop Software

Sun Secure Global Desktop Software has two licensing modes: evaluation mode and fully licensed mode.

License mode	Description
Evaluation mode	Applies when no license keys have been installed. Lets you evaluate Secure Global Desktop for 30 days. The size of an array is limited to 2 Secure Global Desktop servers; The number of users that can log in or have running emulator sessions is limited to 5.
Fully licensed	Applies when any license keys have been installed. The size of an array is not limited. The number of users that can log in or have running emulator sessions is limited by the installed license keys.

While you are evaluating Secure Global Desktop, the number of days remaining in the evaluation period is shown whenever a user logs in to Secure Global Desktop using a web browser.

After the 30-day evaluation period, users will be unable to log in to their webtop and unable to start or resume applications. To continue using Secure Global Desktop you must obtain and install a license key.

You add license keys on the Licenses properties panel in Array Manager or by using the tarantella license add command.

License keys and licenses

When you install a license key, it installs the licenses that unlock the software features. Licenses are either:

array-based, they make functionality available to the Secure Global Desktop servers in an array; or
user-based, they make functionality available to users.

The following table lists the types of license available, their basis and what they license:

License type	Basis	Software features
Base Component	User	Core functionality such as: the ability to log in; the ability to authenticate users against an LDAP directory server; support for SOCKS v5 proxy servers; support for HTTP and Secure (SSL) proxy servers; the ability to traverse firewalls; webtops, application launches and session management; and support for arrays.
Security (TSP)	User	The ability to use secure connections and the ability to authenticate users using RSA SecurID^®.
Advanced Security (TASP)	User	The ability to use FIPS-compliant secure connections and the ability to authenticate users using RSA SecurID^®. Note This requires a separate software package.
Windows Connectivity	User	The ability to run Windows applications.
UNIX Connectivity	User	The ability to run UNIX and Linux applications.
AS/400 Connectivity	User	The ability to run 5250 applications.
Mainframe Connectivity	User	The ability to run 3270 applications.
Directory Services Integration	Array	The ability: to use an LDAP version 3 directory instead of ENS for holding user information. to use the Active Directory login authority.
Portal Integration	Array	The ability to use Secure Global Desktop with a Sun^™ Portal Server.
Advanced Load Management	Array	The ability to load balance application servers based on their true CPU or memory load.

User-based licenses

User-based licenses are enforced by the software on a concurrent user basis. A user is allocated a license as soon as they use a software component. For example, when a user logs in to Secure Global Desktop, they are allocated a Base Component license. If they then run a Windows application, they are allocated a Windows Connectivity license. The license is released when they stop using the component.

A single user is never counted as using more than one of each type of license. However, a user may be counted as using several license types at once. For example, if a user has four UNIX applications running over a secure connection, then that user is counted as using one Base Component license, one Security license and one UNIX Connectivity license.

Note the following:

Each guest user and anonymous user is counted as a separate user.
When all the Base Component licenses are allocated, additional users may not log in to Secure Global Desktop.
When all the Security licenses are allocated, additional users may not log in to Secure Global Desktop using secure connections.
Array Manager and Object Manager are counted as applications.
If a user suspends an application, they are counted as still using a connectivity component and keep their license, even if they are not logged in to Secure Global Desktop.
If a user logs out of Secure Global Desktop without closing applications that are configured to be always resumable, the applications continue run (and use a connectivity component) until they time out (Resumable For). The default timeout period is 8 days.
It is possible for a user to log in to Secure Global Desktop but not be able to run any applications. This is because there are Base Component licenses available but all the connectivity licenses are being used (users, who are not logged in, have suspended application sessions).

License administration

Secure Global Desktop automatically allocates and releases licenses to users as they use software components. Secure Global Desktop Administrators cannot manually allocate and release licenses, although they can end a user's webtop and emulator sessions.

The Secure Global Desktop log files record all license usage over time. Secure Global Desktop Administrators can use the tarantella license query command to display information on both current and past license usage across the array.

Related topics
The tarantella license command Licenses properties (array-wide)