Activate a License

In plain English

Identix runs free for 30 days with everything unlocked. To keep paid features after that, you apply a license file (.lic) — either by uploading one your vendor sends you, or by letting the broker fetch it from the activation server. Nothing you do here ever stops users from signing in.

Before you start

• A signed .lic file from your vendor (for the manual route), or a reachable activation server (for the online route).
• The broker configured with the vendor public key: LICENSE_PUBLIC_KEY = the Licenser's keys/public.pem. Without it, no license can be verified and the broker stays on the trial/FREE tier. See License & Trial.

First-run setup

On first boot during the trial, the admin console shows a one-time first-run setup dialog inviting you to record your email, organization, and an optional customer / download ID. This is also available any time from the License page (the Trial & Activation card).

Recording these details keys the trial to your install: if you later reinstall or activate online, the same trial is reused instead of being reset. It's optional and never blocks anything — you can skip it.

Option A — Upload a license file (offline)

Use this for air-gapped or restricted-egress deployments.

1. Sign in to the admin console.
2. Open Global Config → License.
3. Click Upload License and choose your .lic file.
4. The broker verifies the signature and applies it. The page now shows your edition, limits, and expiry, and the trial banner disappears.

If the file is rejected, the signature didn't verify — confirm LICENSE_PUBLIC_KEY matches the key that signed the file, and that the .lic wasn't modified after signing.

Reinstalling? Re-upload the same .lic — your entitlement is restored with no reset.

Option B — Online activation

Use this when the broker can reach the Licenser server.

1. Set LICENSE_SERVER_ENABLED=true and LICENSE_SERVER_BASE_URL=https://your-licenser-host, then restart.
2. On the License page, complete first-run setup (your email/organization and customer ID). The broker requests a server-issued signed license keyed to that identity and applies it automatically.
3. Use Refresh to re-check status against the server at any time.

If the server is unreachable, the cached signed license keeps working until its own expiry (offline grace) — connectivity loss never blocks the broker.

After activation

• The trial banner is gone; the License page reflects the active edition, limits, and expiry.
• Paid features and higher resource limits are unlocked.
• If a license later expires and isn't renewed, the broker degrades to the FREE tier — sign-in and SSO continue, only paid features and FREE limits apply.

Troubleshooting

Symptom	Cause / fix
"Invalid or missing license signature" on upload	LICENSE_PUBLIC_KEY doesn't match the signing key, or the .lic was edited. Re-download and confirm the key.
Banner says "integrity check failed"	The trial anchor was tampered with or the system clock moved backwards — the instance is treated as FREE. Apply a valid license to restore.
Online activation does nothing	LICENSE_SERVER_ENABLED is false or LICENSE_SERVER_BASE_URL is unset/unreachable; falls back to trial/FREE.
Features still locked after upload	Confirm the page shows the license as Valid and not expired; check the expiry date.