nCOP Licensing

This section defines the licensing terms and permitted uses for the nShield Container Option Pack software ("nCOP").

Authorized Use

In this document, when we refer to "you", we mean the Entrust customer ("Customer") who has purchased one or more nCOP licenses; or an individual authorized by Customer to access components, features or functions of the nCOP ("Users"). Customer may also grant access to Users who are employees of external contractors, but only to the extent that such Users are using nCOP on Customer’s behalf in the operation or management of the Customer’s own business. Customer is responsible for all of its Users.

nCOP is:

  • licensed for internal Customer use only (i.e., use for the Customer’s own business purposes)

  • compatible with all nShield network-attached hardware security modules (HSMs) (including nShield as a Service cloud-hosted HSM deployments)

  • licensed on a per HSM basis (i.e., one nCOP license allows for the use of nCOP on a single network HSM)

  • supported for Linux distributions only

Except as may be otherwise specified in an express license agreement signed by Entrust, neither Customer nor any User may use nCOP for other companies (e.g. provision of nCOP functionality as a "Managed Service Provider" or "Systems Integrator").

License Restrictions

Prior to being able to use nCOP, you will require at least one supported nShield network-attached HSM, and you will also require that nShield Security World client software and Docker be installed.

Your permitted number of container pods and application containers will be dictated by the number of client licenses you have purchased for each of your HSMs. nCOP uses a weighting factor for calculating the number of HSM client licenses required based on the maximum number of container pods and running application containers to be deployed. You may not alter your nCOP license, nor circumvent or attempt to circumvent the license limits. For each network-attached HSM that you have purchased, you shall also have purchased a number of client licenses (3 received free of charge with the purchase of the HSM). For each such HSM client license, you shall be entitled to connect the HSM to one container pod (i.e., one active hardserver connection), and for each container pod you shall be entitled to run up to 10 application containers (effectively a ratio of 1:1:10). The chart below provides examples of how the number of HSM client licenses you purchase per HSM sets the maximum number of container pods and the maximum number of application containers permitted.

Number of client licenses per HSM

5

10

15

20

>25

Maximum number of container pods

5

10

15

20

25

Maximum number of application containers permitted

50

100

150

200

>250a

a Entrust recommends the purchase of enterprise client licenses

Should you decide to purchase an enterprise client license for your network-attached HSM, then there shall be no limits on the number of container pods and application containers permitted for that HSM.

You are strongly encouraged to keep your nCOP up to date with our latest product release.

The following are not included in your nCOP license and are sold separately (i.e., they would need to be covered in your Order):

  • network-attached HSM (on-premises or cloud)

  • other Entrust software or products

  • support entitlement

  • professional services

You are expected to keep reasonable records of the number of container pods you have connected to your licensed network-attached HSMs and the number of application containers that you have run in those container pods. Any increases in such numbers shall also be tracked in order to ensure that the requisite number of client licenses are in place.