About Trellix license keys

License keys are required for system operation. The Central Management System appliance requires these license keys:

License key	Description
FIREEYE_APPLIANCE	Required to register your system and use the product features.
CONTENT_UPDATES	Allows your system to access the Dynamic Threat Intelligence (DTI) network, which provides the latest intelligence on advanced cyber attacks and malware callback destinations. This enables Trellix products to proactively recognize new threats and block attacks. The two-way sharing license provides your appliance with malware intelligence from the DTI network and shares data about malware analyzed by your appliance. The one-way sharing license provides your appliance with malware intelligence, but no information is submitted to the DTI cloud. You can use the `analysis one-way-override enable` command to override the one-way sharing CONTENT_UPDATES license on your appliance and send requests to `unity.fireeye.com`. Important See About support and content license sharing combinations . Note When you use a one-way license, locally generated intel is shared across all appliances attached to the Central Management System appliance.
FIREEYE_SUPPORT	Allows your system to receive software image updates and the latest guest images and depending on your sharing option, upload telemetry and statistics to the DTI cloud. The two-way sharing license allows the appliance to upload telemetry and statistics to the DTI cloud for Trellix to monitor. The one-way sharing license does not upload telemetry and statistics to the DTI cloud. Important See About support and content license sharing combinations .

License key

Description

FIREEYE_APPLIANCE

Required to register your system and use the product features.

CONTENT_UPDATES

Allows your system to access the Dynamic Threat Intelligence (DTI) network, which provides the latest intelligence on advanced cyber attacks and malware callback destinations.

This enables Trellix products to proactively recognize new threats and block attacks.

The two-way sharing license provides your appliance with malware intelligence from the DTI network and shares data about malware analyzed by your appliance.

The one-way sharing license provides your appliance with malware intelligence, but no information is submitted to the DTI cloud.

You can use the analysis one-way-override enable command to override the one-way sharing CONTENT_UPDATES license on your appliance and send requests to unity.fireeye.com.

Important

See About support and content license sharing combinations .

Note

When you use a one-way license, locally generated intel is shared across all appliances attached to the Central Management System appliance.

FIREEYE_SUPPORT

Allows your system to receive software image updates and the latest guest images and depending on your sharing option, upload telemetry and statistics to the DTI cloud.

The two-way sharing license allows the appliance to upload telemetry and statistics to the DTI cloud for Trellix to monitor. The one-way sharing license does not upload telemetry and statistics to the DTI cloud.

Important

See About support and content license sharing combinations .

The following licenses are optional:

Note

The functionality provided by optional licenses is disabled if the FIREEYE_APPLIANCE license is invalid.

License key	Description
MD_ACCESS	Allows Trellix products to connect to the Managed Defense VPN. Without this license, Managed Defense cannot manage the server.
DA_HANCOM	Allows your appliance to perform dynamic analysis of Hancom Office files.

If licenses have expired or will expire within 30 days, warnings are displayed on the Central Management System License Settings page. For details, see Viewing license notifications using the Web UI .