# License Management: Status and Keys

> Read your licence state — Active, Trial, Grace Period, Expired, Revoked, Offline — update the licence key, and understand what each state means for your team.

Source: https://totalshiftleft.ai/help-center/product-documentation/license-management

## Overview

**License Management** shows your licence state and lets you update the **License Key**. Your licence determines which capabilities are available — [Analytics](/help-center/product-documentation/understanding-analytics) needs Pro, Trial, or Enterprise; [Single sign-on](/help-center/product-documentation/single-sign-on), [Secret managers](/help-center/product-documentation/secret-managers), and self-hosted AI models need Enterprise.

Nav path: **Settings → Licensing & Users → License Management**. Requires Administrator access.

## Licence states

| State | What it means |
|-------|---------------|
| **Active** | Valid and current. Nothing to do. |
| **Trial** | A time-limited evaluation. |
| **Grace Period** / **Grace Period Active** | Expired, but still working — for now. |
| **Expired** | Past its end date. |
| **Inactive** | Not currently in force. |
| **Deactivated** | Deliberately deactivated. |
| **Revoked** | Withdrawn by the issuer. |
| **Invalid** | The key isn't valid. |
| **No License** | No licence present. |
| **Offline** | Validation couldn't reach the licensing service. |
| **Unknown** | The state couldn't be determined. |

### The two that need attention

**Grace Period** is the state that matters most, because everything still works and so nobody feels urgency. That's exactly the problem — grace exists to stop an expiry from breaking your CI at the worst moment, not to be a place to live. Renew during grace; the alternative is discovering the deadline via a red pipeline.

**Offline** does *not* mean your licence is bad. It means validation couldn't reach the service — a network path, a proxy, an egress rule. Check connectivity before assuming a licensing problem, especially on an on-prem install where outbound access is restricted. See [Proxy settings](/help-center/product-documentation/proxy-settings).

The rest are mostly self-explanatory, but note the difference between **Deactivated** (someone chose this) and **Revoked** (the issuer chose this). Revoked is a conversation with your vendor; deactivated is usually a key moved to another instance.

## Updating the key

Enter the new **License Key** and apply it. The state should move to **Active** — if it doesn't, read the state rather than re-pasting: **Invalid** is a wrong key, while **Offline** is a network problem and re-entering a perfectly good key won't fix it.

## Deactivating

**Deactivate License** releases the licence from this instance. Do this deliberately — typically when moving a key to a different install. It's not a troubleshooting step, and deactivating to "reset" a licence you're having trouble with can leave you unable to work while you sort out reactivation.

## When features disappear

If a capability vanished, check here first. Licence state changes are a common and easily-missed explanation:

- **Analytics gone from the navigation** — the licence dropped below Pro/Trial/Enterprise.
- **SSO stopped and users can't sign in** — an Enterprise licence lapsed. This one is urgent, because it can lock out everyone who authenticates through the identity provider.
- **Self-hosted AI model rejected** — that's Enterprise-only. See [AI settings](/help-center/product-documentation/ai-settings).
- **Can't add a user** — you may be at the licence's user entitlement, which is separate from **Max Users Per Project** in [User policies](/help-center/product-documentation/user-policies).

## What each tier unlocks

Licence tier is the explanation for a good share of "why can't I see this?" questions. The gating that comes up most:

| Capability | Requires |
|------------|----------|
| [Analytics & Dashboards](/help-center/product-documentation/understanding-analytics) | Pro, Trial, or Enterprise |
| [Single sign-on](/help-center/product-documentation/single-sign-on) — SAML 2.0, OIDC, Azure AD/Entra ID | Enterprise |
| [Secret managers](/help-center/product-documentation/secret-managers) — HashiCorp Vault, AWS Secrets Manager, Azure Key Vault | Enterprise |
| Self-hosted AI models — Ollama, LM Studio, vLLM ([AI settings](/help-center/product-documentation/ai-settings)) | Enterprise |
| Configurable audit retention ([Audit logs](/help-center/product-documentation/audit-logs)) | Enterprise |

A gated feature is generally absent rather than broken — the navigation item isn't there, or the option is labelled as unavailable. If something is present and erroring, that's a fault, not gating.

## Before a licence expires

Expiry is predictable, which makes being surprised by it avoidable:

- **Note the expiry date** somewhere your team looks, not just in this page.
- **Know which Enterprise features you depend on.** SSO lapsing is the one that hurts — if authentication runs through your identity provider and the licence drops, people can't sign in. That's an outage, not an inconvenience.
- **Renew during Grace Period, not after.** Grace exists to absorb the gap; it isn't extra runway.
- **On an air-gapped or restricted install, check validation can reach out** before renewal day. **Offline** on the day you need a new key is a bad time to discover an egress rule.

## Troubleshooting

- **"Offline"** — validation couldn't reach the licensing service. Check outbound connectivity and proxy configuration before suspecting the key.
- **"Invalid"** — the key is wrong or malformed. Re-copy it from your licence document; stray whitespace is a classic.
- **"Grace Period Active"** — you're past expiry and running on borrowed time. Renew now, not when it stops.
- **"Revoked"** — the issuer withdrew it. Contact your vendor; nothing here will fix it.
- **"No License"** — no key present. Enter one.
- **Everything works but a specific feature is missing** — that's plan gating, not a fault. Check your tier against the feature's requirement.
- **The page is unavailable** — you're not an Administrator.

## Related articles

- [Administration settings](/help-center/product-documentation/administration-settings)
- [User policies](/help-center/product-documentation/user-policies)
- [User management](/help-center/product-documentation/user-management)
- [Help & version information](/help-center/product-documentation/help-version-information)
- [Proxy settings](/help-center/product-documentation/proxy-settings)