License renewal D-30 → D-1 notifications + 60-day grace period
The license renewal flow is designed to avoid any abrupt service interruption: progressive notifications, persistent UI banner, 60-day grace period after expiry, 1-click contact with SN2O.
Notification timeline
| Before expiry | Channel | UI state |
|---|---|---|
| D-30 | Email to admins, dashboard banner | Info banner (blue), dismissible |
| D-15 | Email to admins, SN2O notification | Warning banner (orange), dismissible 24h |
| D-7 | Email + dashboard + SN2O hotline alert | Warning banner persistent (close = red pill in header with countdown) |
| D-1 | Final email + SN2O ticket auto-opened | Danger banner (red), non-dismissible |
| Expiry day | Expiry email + 60-day grace start | Danger banner with "days remaining before lock" |
| D+60 | License lock | Full-screen lock with a paste-license textarea — no data loss |
During the 60-day grace period, all features remain fully available. CDR collection continues, the dashboard works, MCP queries work, exports work. Only the banner becomes more insistent. No data is destroyed at lock time — the lock screen lets you paste a new license and resume operations instantly.
Renewal procedure
-
1
Click the banner
The banner contains a Renew with SN2O button that opens a pre-filled support ticket with your customer reference, current license expiry and sizing tier.
-
2
Receive your new license
SN2O sends a signed
.license.tomlfile by encrypted email or via the partner portal. -
3
Install the new license
Settings → License → Install license. Upload the file or paste its content. The appliance verifies the signature and the validity period before activation.
-
4
Verify
The banner disappears, the new expiry date is displayed in Settings → License → Status. A success entry is written to the audit log.
Edge cases
- Already locked appliance: paste the license TOML directly in the lock screen, the appliance unlocks within seconds. No reboot required.
- Sizing tier upgrade: a license with a higher tier (e.g. Medium → Large) is accepted immediately, the new limits take effect at the next refresh.
- Sizing tier downgrade: allowed only if the current usage is below the lower-tier limits. Otherwise the install is rejected with an explicit error.
- Clock rollback attempt: detected by an HMAC-signed monotonic counter. Fraud detected → audit log entry + UI banner.
- License signature invalid: install rejected, typed error message (signature mismatch, expired, not-before in the future, key ID unknown).