|Applies To||RSA Product Set: NetWitness Endpoint|
RSA Product/Service Type: NetWitness Endpoint
RSA Version/Condition: 4.4.0.x
|Issue||The UI shows all Endpoint Agents with off-line status. Attempts to start the "RSA ECAT Server" fail.|
\Program Files\RSA\ECAT\Server\ConsoleServer-Error.log displays message "Invalid License or missing License"
The License file is in the \Program Files\RSA\ECAT\Server folder.
|Cause||The License is based on the CID number (Computer Identification hash based on machine). The CID will change if the NW Endpoint is installed on a different physical machine, or if the Virtual Machine has been moved or rebuilt.|
To verify this is the case, check the UI -> About -> About RSA NetWitness Endpoint panel. Scroll down to the section with the line "LicenseComputerID=xxxxxxxxx" and "LicenseExpirationDate= M/DD/YYYY"
If the present date match's the expiration date, contact your sales rep to get the license renewed.