Keystone Gateway

Renew or replace a license

For routine renewal with unchanged gateway_id and replica IDs, obtain a replacement signed license, install it with restrictive permissions, restart Gateway, and confirm the startup verification log and /v1/license. Keep the previous license until verification succeeds so a file-placement error can be rolled back by restoring it and restarting.

For expiry, invalid signature, wrong IDs, rebuild, or identity changes, request a replacement license that names the actual configured deployment and every HA replica. Before reducing a component’s entitlement, release enough capacity or wait for leases to expire. V1 permits startup with a lower replacement entitlement than current live grants; it reports the component as over capacity, rejects new acquisitions, and allows existing leases to renew or release until use returns within the new limit. In HA, install the same new license on both nodes and restart them in a controlled maintenance window. Gateway does not hot-reload licenses.

Confirm