CPPM.VM.x86.64.6.12.0.300732.ARUBA.LICENSE.PATCH

Activation/Licensing Method:

- License Patch

- File Name: license-validator.jar

License Patch Features:

The newLicenseInfo method has been modified so that an evaluation is treated as Permanent, setDuration is always set to 0 (Permanent duration), and setNumUsers (endpoint) is set to 25,000 (theoretically up to 25,000 endpoints, not tested yet).

Validation relies on the LicenseInfo class (this class is found in hibernate-common.jar) written using this method.
Therefore, all other functions, such as isLicenseExpired and performLicenseExpiryChecks, have not been modified.

So, all you need to do is get a trial key from the HPE website or the one provided in this release to take advantage of all ClearPass features.

How to activate:

A patch.sh is provided in the release that will do everything automatically.

I recommend placing patch.sh and license-validator.jar on a PC with ssh installed (needed to excute scp by patch.sh), in the tmp folder.

All you need to do is:

1. After deploying the appliance, stop at Platform License entry screen and shut down the appliance.

2. Boot the VM using a recovery ISO (I recommend almalinux boot iso), mount the partition (with almalinux in recovery mode, press 1, c, and ENTER, and it will do automatically the mounting of vmimage01 disk and mount it on /mnt/sysroot).

3. chroot /mnt/sysroot (#bash4.4 should appear).

4. execute 'scp (-P if ssh port is different than 22) user@<ip-address>:/<folder>/patch.sh ./'

5. execute 'chmod +x patch.sh'

6. run './patch.sh'

6a. Enter the values requested by patch.sh

7. execute 'rm patch.sh'

8. Reboot

9. You can now add the Platform, Entry, Access, OnGuard, and On Board licenses in permanent mode

Manually Patching:

1. After deploying the appliance, stop at the Platform License entry screen and shut down the appliance.

2. Boot the VM using a recovery ISO (I recommend almalinux), mount the partition (with almalinux in recovery mode, press 1, c, and ENTER, and it will do automatically and mount it on /mnt/sysroot).

3. remove original license-validator.jar (make a backup if you want before pathing) located in '/usr/local/avenda/platform/lib/activation-client/' and '/var/avenda/tomcat/frontend/webapps/tips/WEB-INF/lib/'

4. copy patched license-validator.jar in '/usr/local/avenda/platform/lib/activation-client/' and '/var/avenda/tomcat/frontend/webapps/tips/WEB-INF/lib/'

5. perform 'chown 10100:10000 /var/avenda/tomcat/frontend/webapps/tips/WEB-INF/lib/license-validator.jar'

6. perform 'chmod 644 /var/avenda/tomcat/frontend/webapps/tips/WEB-INF/lib/license-validator.jar'

7. check '/usr/local/avenda/platform/lib/activation-client/license-validator.jar' in owned by root:root (by default it's set to this without making any changes)

8. Reboot

9. You can now add the Platform, Entry, Access, OnGuard, and On Board licenses in permanent mode

PS:

It has been tested by trying to change the RTC clock dates beyond 90 days and beyond 180 days and I have not received any Expired, but if any exceptions or problems should occur, write to hyp3rcore@protonmail.com with detailed info about the problem.

no other function has been touched since the patch is still experimental, for example not yet patched checkLicenseKeyInUse (not needed for now) and other methods of monitoring activation and license (yes there are checks for license and activation,
so a license can be not expired but not activated), since theoretically it is not needed

INFO:

Hypercore Team is looking for collaborators, we have open positions check hyp3rcore.com

Next Project:

PANOS VM EDITION