License Management
The Schrödinger Suite installed on a Virtual Cluster needs access to a valid license. This section describes different supported configurations for installing or accessing licenses.
Note
A client system needs to be able to establish network connections on one TCP port to the license server (port 52000 is the default) for the license check-out to work when using the Schrödinger License Manager.
In case a legacy FlexLM license is used two TCP ports are required (27008 and 53000 are the defaults).
License Server Hosted by the Virtual Cluster#
The “frontend” instance of the Virtual Cluster can act as a license server for the Schrödinger Suite installation on the Virtual Cluster and any external installations, e.g., on on-premises computers. The diagram below shows this configuration.
Installation of a license file on the “frontend” instance is as simple as executing the following command depending on the licensing system:
sudo -u licserver /opt/schrodinger/licserver/bin/lictool install -k <LICENSE_KEY>
sudo -i SCHRODINGER_FEATURE_FLAGS=-SCHRODINGER_LICENSE_MANAGER "$SCHRODINGER/licadmin" INSTALL -k <LICENSE_KEY>
as user with “admin” authorization level
(see Authorization Levels) where
“<LICENSE_KEY>” is the license key provided by Schrödinger. The
new license file is downloaded and placed in a directory where it is automatically
recognized by the license server service. After the license
file has been installed successfully the commands:
sudo systemctl enable schrodinger-licserverd
sudo systemctl restart schrodinger-licserverd
sudo systemctl enable licadmin
sudo systemctl restart licadmin
enable and (re-)start the license server service, respectively. To test whether the license check-out works correctly, execute the following command:
/opt/schrodinger/licserver/bin/lictool test-server frontend.virtual-cluster.lan:52000 -f MMLIBS
SCHRODINGER_FEATURE_FLAGS=-SCHRODINGER_LICENSE_MANAGER "$SCHRODINGER/run" lictest -l MMLIBS -v
If this command succeeds, the license is available within the whole Virtual Cluster. To access and share the license with any resources external to the cluster, such as on-premises systems, it must be ensured that TCP connections to the “frontend” instance of the cluster can be established on the TCP port used by the license server daemon. (default port is 52000 for SLM and 27008 plus 53000 for FlexLM). Any corporate firewall needs to be configured to allow outgoing traffic on this/these port(s) and, additionally, the firewall settings for the Virtual Cluster need to be configured to allow incoming traffic on this/these port(s).
Note
It is recommended to configure the access rules as restrictive as possible, i.e., allow incoming traffic on the license server port only if it originates from the coporate network.
Access to External Hosted License Servers#
The Virtual Cluster can access licenses hosted by external license servers as well. It needs to be ensured that the cluster instances can access the external license server on the TCP port as described in the previous section.
Note
If the Virtual Cluster is supposed to access a license server hosted by
Schrödinger (e.g., for FEP+ model 2 licenses), the public IP address of
the cluster needs to be safelisted by Schrödinger. The public
IP address of the cluster instance can be acquired by executing the command
curl ipecho.net/plain on a terminal on any instance of the cluster.
A client license file (file extension “.lic”) containing the following content
needs to be placed in the /opt/schrodinger/licenses directory:
{
"licenseFileType": "server-identifier",
"serverAddress": "<LICENSE_SERVER_NAME>:<PORT>"
}
SERVER <LICENSE_SERVER_NAME> ANY 27008
USE_SERVER
The Schrödinger Suite will obtain the information about the external license server from this file and will try to connect to it. It is recommended to test whether the license checkout works correctly by executing the command
/opt/schrodinger/licserver/bin/lictool test-server <LICENSE_SERVER_NAME>:<PORT>
SCHRODINGER_FEATURE_FLAGS=-SCHRODINGER_LICENSE_MANAGER "$SCHRODINGER/run" lictest -l MMLIBS -v