Troubleshooting: "Account Is Not Licensed for This Service" Error on IP Reputation/Threat Data Tab

Version Affected: 9.0 and later
 
 

Overview

The IP Reputation/Threat Data tab (Adaptive Authentication > IP Reputation/Threat Data) shows the message "Your account is not licensed for this service. Please contact SecureAuth to enable this feature," even though the account does have a valid license for this feature.

Cause

The certificate the appliance uses for this feature (typically issued by SecureAuth G3 Intermediate, SecureAuth Intermediate, or MFCIssuer) does not grant the Authenticated Users group permission to its private key. Without that permission, the appliance cannot use the certificate to validate the license, so it shows the generic "not licensed" message even though the account is actually licensed.

Resolution:

To resolve this:

1. On the appliance, open the Certificates Console (Start > All Programs > SecureAuth > Certificates Console).
2. In the Certificates folder (under Certificates > Properties), right-click the signing certificate (typically issued by SecureAuth G3 Intermediate, SecureAuth Intermediate, or MFCIssuer), select All Tasks, and click Manage Private Keys.
   
3. In the new window, click Add to open the Select Users, Computers, Service Accounts, or Groups window. Type Authenticated Users in the object names field, and click Check Names.
   
4. Click OK. Authenticated Users now appears in the Group or user names list with Read access allowed.
   
5. Click Apply, then OK to close the window.
6. Repeat these steps for Network Service if it is not already present in the list.

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.