Manage AD Bridge Enterprise Licenses

There are two options to manage the assignment of AD Bridge Enterprise licenses:

An image of the License Management page in BeyondTrust Management Console.

  • Globally using the License Management page in the BeyondTrust Management Console on a Windows administrative workstation connected to Microsoft Active Directory.
  • We recommend that you manage your licenses through the BeyondTrust Management Console.


An image of the AD Bridge Enterprise setkey-cli comand-line utility.

  • Locally using an AD Bridge Enterprise command-line utility (setkey-cli) on a Unix or Linux computer.


License Types

Evaluation Licenses and Permanent Licenses

When you install the AD Bridge Enterprise agent without a permanent license on a Unix or Linux computer, a 90-day product evaluation key is automatically generated. If a permanent license key or an extended evaluation license key is unavailable, AD Bridge Enterprise will stop authenticating users and applying Group Policy settings after 90 days. The expiration date of an evaluation license applies only to the computer on which the license is installed.

To obtain a permanent license or to convert a trial license to a full license, contact a BeyondTrust sales representative at

You can upgrade an evaluation license to a permanent license by importing the permanent license key into the BeyondTrust Management Console, and applying it to a client computer. If the automatic assignment feature is in use, the AD Bridge Enterprise agent will automatically apply a permanent license when you log on a client with an AD account, restart the AD Bridge Enterprise authentication service, or run the command-line utility for managing licenses.

Single-Computer Licenses

BeyondTrust offers single-computer licenses for each of its agents.

If there are multiple domains, a different license file is required for each domain. To spread a set of single-computer licenses across two or more domains, you can request BeyondTrust sales to distribute the licenses in two or more license files.

The number of concurrent logins is unlimited.

License Feature Codes

An image of license feature codes in the Feature column.

Licenses contain codes that can include or exclude features. When a license is displayed in the console, the codes in the Features column indicate the entitlements that the license covers.


The following table describes each feature code:

Feature Code Description
SC Covers the use of two-factor authentication with a smart card
GP Covers the application of GPOs
AU Covers the auditing and reporting components
AD Covers the use of the AD Bridge Enterprise management tools for Active Directory