> Source: [sk44455](https://support.checkpoint.com/results/sk/sk44455)

# sk44455 - Remote Access Licenses in Multi-Domain Security Management (Provider-1) Environment

| Property | Value |
|----------|-------|
| Solution ID | sk44455 |
| Date Created | 2010-03-24 |
| Last Modified | 2022-10-06 |
| Technical Level | General |
| Products | Security Gateway, Multi-Domain Security Management Server |
| Versions | R81.10 (EOS), R81 (EOS), R81 (EOS), R81.10 (EOS) |

## Symptoms

- * Endpoint Connect fails to connect to the Security Gateway.
* Endpoint Security Client can connect. However, a `?no license?` error message appears in SmartConsole Logs \& Monitor or in SmartView.

## Cause

The VPN client license is installed on the CMA instead of the MDS. The licenses effected by this include:

* SecureClient license
* SSL Network Extender (SNX) license
* Secure Access license
* Remote Access VPN Software Blade license

## Solution

Follow this procedure:

1. Install the Endpoint VPN client licenses on the MDS level of the MDS server.
2. To restart the MDS level, run:  
   `mdsstop -m`  
   `mdsstart -m`
3. In SmartConsole for the relevant Domain Management Servers, install policy for the Security Gateways / Clusters to which the VPN client is connecting.
4. Delete the licenses from the CMA:
   1. Run:  
      `mdsenv <IP Address or name of CMA>`
   2. Run:  
      `cplic print -x -D -n to list applied licenses on the CMA`
   3. Copy the signature key for the licenses you want to delete.
   4. Run:  
      `cplic del <signature key you want to delete>`
   5. Repeat this procedure for all licenses you want to delete.

**Clarification:** When "X" licenses are installed on the MDS, each Domain Management Server allows "X" licenses.\* Therefore, "X" users will be able to connect to each Domain Management Server. For example, a license for 10 seats is installed on the MDS. When the 11th user tries to connect to Domain Management Server 1, that connection fails. Domain Management Server 2 has its own license for 10 seats. A maximum of 10 users can connect to Domain Management Server 2.  

After the licenses are installed on the MDS, when you connect to the Security Gateway via either Endpoint Connect or SecureClient, a "`?no policy server license?`" error message appears in the log files. You can ignore this error message.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content