Container
Geschütze Protected
0101001010101010 10100101010101010 01010101001010101
Anwendung
Application
01010010101010101 01010010101010101 01001010101010100
Named Volume
CodeMeter Network
sions need to be taken at an early point in planning and development .
Solutions The great advantage of CodeMeter by Wibu- Systems is that the access and cryptographic operations with the licenses are identical for any type of CmContainer . This means that the way of rolling out licenses can be adjusted perfectly to match each individual situation . When initially encrypting and protecting an application , it does not matter at all how or where the license is provided to the end user .
CmDongles If technically feasible , a CmDongle can be used to benefit from its dedicated hardware with a built-in crypto chip . Since a CmDongle can be connected with only a single CodeMeter component , a setup with multiple containers usually runs a container with a CodeMeter license server that links up with the CmDongle . From there , the licenses are made available to all the other containers .
CmActLicense The purely software-based CmActLicenses are another choice that binds the licenses to a fingerprint of the system ’ s properties . For meaningful security , the license needs to be bound to a secure anchor . This is usually done by selecting a whole set of system traits that are then combined by the patented SmartBind technology to create a unique ,
Edge Computing
Container
Geschütze Protected
0101001010101010 10100101010101010 01010101001010101
Anwendung
Application
01010010101010101 01010010101010101 01001010101010100
License Check
Access to the Encrypted Key
Container
Protected
0101001010101010 10100101010101010 01010101001010101
Application
01010010101010101 01010010101010101 01001010101010100 but also sufficiently tolerant fingerprint .
Enforcing systemspecific licensing can be harder in a container environment , because containers were designed to make everything as abstract as possible and limit data flows to the host or other containers to the desired minimum . A side effect is that the usual set of system properties can normally not be read out , and the license data cannot be kept persistent over time .
For Docker environments in particular , Wibu- Systems has already tweaked its binding technology for CmActLicenses . The necessary data is stored in a so-called named volume and bound to that volume at the same time . This makes it impossible to simply copy or move licenses around . However , this also needs more rights for the container accessing the license . For CmActLicenses to be installed in a container , the license provider needs to specifically activate this option .
CmCloudContainers Another highly secure variant is provided by CmCloudContainer , a cloud-based licensing system . The keys on the license never leave the private cloud operated by Wibu-Systems and all cryptographic operations are also executed
CodeMeter Network
Container
Protected
0101001010101010 10100101010101010 01010101001010101
Application
01010010101010101 01010010101010101 01001010101010100
License Server
Container
Edge Computing
Container
Protected
0101001010101010 10100101010101010 01010101001010101
Application
01010010101010101 01010010101010101 01001010101010100
License Check
Container
Protected
0101001010101010 10100101010101010 01010101001010101
Application
01010010101010101 01010010101010101 01001010101010100
License Server
Account Data Container there . Of course , a CmCloudContainer needs an Internet connection , which has to be permanent and stable for the licensing system to work as it is supposed to . If that is not guaranteed , it helps to separate IP protection from licensing and add some tolerance for the latter .
Taking a detour On top of the options explained here , there is another way : using CodeMeter licenses indirectly . The edge device or the container with the CodeMeter license server can connect to any CodeMeter license server on the network . It is there that licenses could be provided ( using any type : CmDongle , CmActLicense , or CmCloudContainer ).
A final option is providing a CmDongle indirectly via an USB-over-Ethernet setup . This is favored by many administrators for its easy management and ability to keep CmDongles and the dongles of other makers in a single physical place .
The right stuff It is simple : Different use cases need different solutions . When picking the right option , it helps to ask an expert and carefully weigh up one ’ s choices . There is no one final answer to everything that could determine which solution is best for any scenario . But the versatility of CodeMeter ensures real compatibility with a vast range of use cases , making it the ideal solution for software makers who want to master the complexity of licensing in edge computing environments .
Access to the Secure Key
Cloud License Server
Accountbound Licenses
11