> Source: [sk179701](https://support.checkpoint.com/results/sk/sk179701)
# sk179701 - CPD daemon addon "EntitlementManager"
| Property | Value |
|----------|-------|
| Solution ID | sk179701 |
| Date Created | 2022-07-26 |
| Last Modified | 2026-03-16 |
| Technical Level | General |
| Products | Licensing |
| Versions | Not Version-Specific |
| OS | Gaia |
## Solution
Introduction
============
EntitlementManager is a CPD process addon to maintain, update, and transfer Check Point licenses and contracts. This article explains how troubleshoot license information per Software Blade and per asset (examples: Security Gateway, Management Server).
To view license status in SmartConsole, follow the procedure in the [Quantum Security Management Administration Guide](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doShowproductpage&productTab=documents&product=184) for your version \> chapter **Managing Gateways** \> section **Managing Licenses** \> page **Viewing Licenses in SmartConsole** \> heading **To view license information for each Software Blade**
**Table of Contents:**
* Blade Visibility
* Asset Visibility
* Automatic Synchronization with User Center - Contract Withdrawal
* Automatic Synchronization with User Center - License Update
Troubleshooting License Status For Each Software Blade {#Blade Visibility}
--------------------------------------------------------------------------
License status for each software blade appears in a table in the middle of the screen.
#### Mechanism that Collects Blade Status Information and Shows it in SmartConsole
1. Every two hours and after every change of the contract or the license, the Management Server / Multi-Domain Server tells the Security Gateway / Gateway instance processes to collect information about entitlement to the blades.
2. The processes calculate entitlement according to the contract and the license installed on the Security Gateway / Gateway instance
3. The processes write the information (name of the blade, expiration date, etc..) into the *$CPDIR/database/entitlement_status_collector_db.C* file. (see below: "Troubleshooting the *$CPDIR/database/entitlement_status_collector_db.C*file")
4. Other processes collect the information from the file and transfer the information to the Security Management Server / Multi-Domain server.
5. The Security Management Server / Multi-Domain Server saves the information in its database the information is saved in the DB.
6. SmartConsole shows the information from the database.
#### How to check if the *$CPDIR/database/entitlement_status_collector_db.C*file is corrupted
The file is corrupted if **both** of these are true:
* In the file, each blade has a "`last_modified`" parameter.
* In the last three hours, the file was not edited.
#### How to troubleshoot the *$CPDIR/database/entitlement_status_collector_db.C* file
**Important:** If the file is **not** corrupted, do **not** edit it.
If the file **is** corrupted, follow this procedure to activate the mechanism described above:
1. Back up and remove the file:
`mv -v $CPDIR/database/entitlement_status_collector_db.C{,_BKP}`
2. Touch the contract file:
`touch $CPDIR/conf/cp.contract`
*** ** * ** ***
Troubleshooting License Information and Status for Each Asset {#Asset Visibility}
---------------------------------------------------------------------------------
#### License information and status for the asset (example: Security Gateway) appears above the table.
****
#### How to check the registry of the Security Management Server / Domain Server
On the CLI of the Security Management Server / Domain Management Server, run:
`cpstat os -f licensing`
Example:
#### 
How to troubleshoot problems with Assets
**Case 1: Asset list is empty**
If the Assets list is empty, on the CLI of the Management Server / Domain Server, run:
`cplic send_license`
**Case 2: Asset list in the management database is different from the asset list in SmartConsole**
If the assets do not match the assets in the Smart Console, there may be a problem in the Management database. [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) for assistance.
**Case 3: Asset list is the same in SmartConsole and in the management database, but is incorrect**
For a Security Management Server / Domain Management Server:
1. In the CLI, delete the *$CPDIR/database/EntMgr_DB.xml* file.
**Important** - Do not change the file.
2. Restart the CPD process:
`cpwd_admin stop -name CPD -path "$CPDIR/bin/cpd_admin" -command "cpd_admin stop"`
`cpwd_admin start -name CPD -path "$CPDIR/bin/cpd" -command "cpd"`
After a few minutes, the asset list is updated.
For a Security Gateway:
1. Perform the procedure above for the Security Management Server / Domain Management Server (CMA) that manages the Security Gateway.
2. On the CLI of the Security Gateway, run:
`cplic send_license`
*** ** * ** ***
Automatic Synchronization with User Center - Contract Withdrawal {#Contract Withdrawal}
---------------------------------------------------------------------------------------
When you install a new license on an a Security Gateway / Management server, it is expected behavior for the appliance to send the license number to Check Point User Center. Then, User Center sends a contract to the appliance, which the appliance installs automatically.
Follow the procedure in [sk83520](upportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk83520) to make sure the Security Gateway and the Management Server can access Check Point servers.
If the problem continues, use the "`contract_util`" command to make sure that the most up-to-date contract is installed on the appliance.
**To update contracts (attached to pre-installed licenses) from UserCenter:**
Run:
`contract_util update [{-proxy : | -ca_path }]`
If you do not enter a value for "`-proxy`", UserCenter uses the proxy server configured in the database of the appliance.
If you do not enter a value for "`-ca_path`", User Center uses the default CA bundle path.
**To download all associated User Center contracts from User Center:**Run:
```
contract_util download uc [ [:]]
```
**To download all associated User Center contracts from a specified local file:**
Run:
```
contract_util download local
```
*** ** * ** ***
Automatic Synchronization with User Center - License Update {#License Update}
-----------------------------------------------------------------------------
1. Follow the procedure in [sk83520](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk83520) to make sure that the Security Gateway and Security Management Server can access Check Point servers.
2. Check if the license information changed.
Examples: changes in attached/detached software blades, expiration dates, assets
3. If necessary, update the license information, pull new licenses/contracts, and install them on the appliance.
The appliance checks for licenses automatically once every two hours.
To do this check manually, on the CLI of the appliance run:
`cplic update_by_cks`
---
# Agent Instructions
This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.
## Navigating This Knowledge Base
- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content