Endpoint Security Suite Enterprise Support for VDI v1.3

Persistent VDI

Client Access Licenses are associated with Virtual Machines in a VDI clone pool. VDI clone pools are often created, torn down, and rebuilt, which causes artificially high usage of Client Access Licenses. Returning the Client Access Licenses to the license pool helps to alleviate this issue.

Currently, the process to return Client Access Licenses is based on removal of the device. SQL statements, run manually in the SQL Management Studio, can mark the devices as removed, which returns the Client Access Licenses to the license pool.

Non-Persistent VDI

Client Access Licenses that are allocated to Non-Persistent VDI clients are returned for reuse after the VDI client device lease expires. The default device lease expiration interval is 480 minutes.

Check for returned licenses

License expiration is logged in the Security Server. To check for licenses returned for reuse, open output.log from the appropriate path:

Dell Enterprise Server: Program Files\Dell\Enterprise Edition\Security Server\logs

VE: /opt/dell/server/security-server/logs

Sample log entries:

2017-01-09 08:17:40,500 INFO com.dell.scheduled.jobs.NonPersistentVdiLicenceExpirationJob [jobsScheduler-2] - Running NonPersistentVdiLicenceExpirationJob

2017-01-09 08:17:40,593 INFO com.dell.scheduled.jobs.NonPersistentVdiLicenceExpirationJob [jobsScheduler-2] - Expired 0 non persistent VDI device(s)

2017-01-09 08:17:40,593 INFO com.dell.scheduled.jobs.NonPersistentVdiLicenceExpirationJob [jobsScheduler-2] - NonPersistentVdiLicenseExpirationJob finished

2017-01-09 08:19:40,606 INFO com.dell.scheduled.jobs.NonPersistentVdiLicenceExpirationJob [jobsScheduler-9] - Running NonPersistentVdiLicenceExpirationJob

2017-01-09 08:19:40,606 INFO com.dell.scheduled.jobs.NonPersistentVdiLicenceExpirationJob [jobsScheduler-9] - Expired 1 non persistent VDI device(s)

2017-01-09 08:19:40,606 INFO com.dell.scheduled.jobs.NonPersistentVdiLicenceExpirationJob [jobsScheduler-9] - NonPersistentVdiLicenseExpirationJob finished

2017-01-09 08:21:40,617 INFO com.dell.scheduled.jobs.NonPersistentVdiLicenceExpirationJob [jobsScheduler-15] - Running NonPersistentVdiLicenceExpirationJob

2017-01-09 08:21:40,617 INFO com.dell.scheduled.jobs.NonPersistentVdiLicenceExpirationJob [jobsScheduler-15] - Expired 3 non persistent VDI device(s)

2017-01-09 08:21:40,617 INFO com.dell.scheduled.jobs.NonPersistentVdiLicenceExpirationJob [jobsScheduler-15] - NonPersistentVdiLicenseExpirationJob finished

Change lease expiration values

To change the default device lease expiration values, open application.properties from the appropriate path:

Dell Enterprise Server: Program Files\Dell\Enterprise Edition\Security Server\conf

VE: /opt/dell/server/security-server/conf

Modify the following properties, as desired:

vdi.nonpersistent.leaseexpiration.jobfrequency.millis=120000

vdi.nonpersistent.leaseexpiration.initialdelay.millis=30000

vdi.nonpersistent.leaseexpiration.minutes=480

where

vdi.nonpersistent.leaseexpiration.jobfrequency.millis - Frequency with which the license expiration job runs (in milliseconds).

vdi.nonpersistent.leaseexpiration.initialdelay.millis=30000 - Time interval before the license expiration job runs after Security Server startup (in milliseconds).

vdi.nonpersistent.leaseexpiration.minutes=480 - Length of time before device lease expiration (in minutes).

Key Material

Over time, the Dell Server accumulates an excess of unused key material associated with encrypted endpoints that no longer exist. At the current expected rate, any issue associated with this accumulation should take years to manifest in a Dell Enterprise Server instance based on current information.