Technical Tip: Why there is a limit on the number of enrollment Token uses
| Description | This article describes Why there is a limit on the number of enrollment Token uses. |
| Scope | FortiDLP. |
| Solution | Reveal Agent enrollment Tokens are designed to be multiple uses to reduce the complexity of deployment by allowing a fleet management tool to use the same settings across multiple machines. These Tokens are however a form of credential, which give devices access to the Reveal platform and thus are limited in duration and a maximum number of uses to prevent abuse or denial of service attacks.
There is no link between the maximum number of enrollments and the number of licenses or seats available to an individual customer. Licenses are tracked based on the number of unique active agents over the preceding 30-day period. As such, in some situations where the same machine has been re-enrolled, the number of 'enrollment Token uses' may exceed the available licenses on the Reveal tenant.
Run out of enrollment uses or expiry: The enrollment Tokens page allows administrators to dynamically update the remaining number of uses and the expiry date, whilst allowing the existing enrollment Token code to remain the same. If an agent has been deployed and attempted to install using a Token that had expired or no remaining uses, it can be re-installed or manually re-enrolled with the same Token after an update to the remaining uses or expiry date. |
