> Source: [sk120675](https://support.checkpoint.com/results/sk/sk120675)

# sk120675 - "No License for encryption" message on policy installation failure after upgrading R75.x to R77.x 

| Property | Value |
|----------|-------|
| Solution ID | sk120675 |
| Date Created | 2017-10-03 |
| Last Modified | 2025-05-15 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server |
| Versions | R82.10, R82, R81.20, R82.10, R82, R81.20, R82.20 |

## Symptoms

- * Policy installation fails with the following messages after upgrading Security Management from R75.x to R77.x:

  ```
  
  The following errors and warnings exist: fw: no license for 'ca' 
   Rule X: no license for encryption. 
   Failed to generate the rulebase 
   Operation ended with errors. 
   Operation ended with errors.
  ```

* The rule base contains traditional VPN rules.

## Cause

The IPSec VPN Software Blade (CPSB-VPN) is missing from the Security Gateway license, or the license was generated as Central with using the Gateway's object IP address instead of the Management server object IP address.

## Solution

To resolve the issue:

1. If the license was generated with an incorrect IP address, please generate and install a new license for the Security Gateway as described in the Check Point License Guide (sk11054)

2. If no IPSec VPN blade exists for the Security Gateway, contact Check Point Sales to order a new license

For further assistance, contact Check Point Account Services in one of these ways:

* by creating a [Non-Technical Service Request](https://help.checkpoint.com/)
* by phone:
  * Americas: +1-972-444-6600 - option 3 - option 5
  * International: +972-3-611-5100 - option 3 - option 5

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content