How to Manage Licenses for Keytos Shield

Learn how to manage licenses for your Keytos Shield subscription.

Overview - What is a Keytos Shield License?

A license for Keytos Shield grants a user the right to access and use the features and services provided by the Keytos Shield platform. These include:

  • Unlimited certificates issued via SCEP or ACME
  • Unlimited RADIUS authentications
  • Access to Keytos Connect for BYOD device management (if enabled in your network)

How to Manage Licenses for Keytos Shield

To manage licenses for Keytos Shield, follow these steps:

  1. Sign in to your Keytos Shield account.
  2. Navigate to the Settings page.
  3. Scroll down to the Licensing section.
  4. If you check the box for License Full Tenant, all active Entra ID users in your tenant will automatically be assigned a Keytos Shield license.
  5. If you uncheck the box for License Full Tenant, you will need to manually assign Keytos Shield licenses to individual users or groups. If you select a group, your license count and associated cost will be billed based on the number of users in that group each month.

Frequently Asked Questions About Keytos Shield Licenses

What If My Users Have More Than One Device?

Each user requires only one Keytos Shield license, regardless of the number of devices they use. This means that if a user has multiple devices, they do not need separate licenses for each device; a single license covers all devices associated with that user for certificates and RADIUS authentication.

Can I Transfer a License to Another User?

Licensed users can be updated at any time. If you need to transfer a license to another user, simply remove the license from the current user and assign it to the new user. This ensures that your license count remains accurate and that you are only billed for active licenses.

If I Use MAC Authentication Bypass Do Those Devices Require a License?

Devices that connect to your network using MAC Authentication Bypass (MAB) do not require a Keytos Shield license. Licenses are only needed for users who actively use Keytos Shield features such as certificate issuance and RADIUS authentication. MAB devices are considered unmanaged and are not counted towards your license total.

If I Have Kiosk Devices Do They Require a License?

Kiosk devices, which are typically shared devices used by multiple users, do not require individual Keytos Shield licenses. Licenses are only needed for users who actively use Keytos Shield features such as certificate issuance and RADIUS authentication. Kiosk devices are considered unmanaged and are not counted towards your license total.

What Happens If a User Leaves My Organization?

When a user leaves your organization, their Entra ID account will typically be deactivated or deleted. As a result, any Keytos Shield license assigned to that user will be removed and will not be charged moving forward. This helps ensure that your license count remains accurate and that you are only billed for active users.

How Do I Check My Current License Usage?

To check your current license usage, navigate to the Settings page in your Keytos Shield account and scroll down to the Licensing section. Here, you will see the total number of users in your tenant and how many of them are currently assigned a Keytos Shield license.