Tenable One OT Exposure License Components

This topic breaks down the licensing process for Tenable One OT Exposure as a standalone product. It also explains how assets are counted, lists add-on components you can purchase, explains how licenses are reclaimed, and describes what happens during license overages or expirations.

Important! To purchase Tenable products, contact your Tenable Representative.
Tip: To update or reinitialize your license, see OT Security License Workflow.

Licensing Tenable One OT Exposure

You can purchase Tenable One OT Exposure in subscription or perpetual/maintenance versions.

To license Tenable One OT Exposure, you purchase licenses based on your organizational needs and environmental details. Tenable One OT Exposure then assigns those licenses to your assets: all detected devices with IP addresses, one license for each IP address.

Configure a Reporting Console

If you license Tenable One OT Exposure through Tenable One Foundation or Tenable One Advanced , you can self-provision a Tenable Security Center companion license, now called a Reporting Console, from the Tenable Account Management portal.

Important! This applies only to Tenable One OT Exposure licensed under Tenable One Foundation or Tenable One Advanced packaging. It does not apply to standalone Tenable One OT Exposure customers.

Before you Begin

  • You must have an activated Industrial Core Platform (ICP) site on your Tenable One OT Exposure product. The option to create a Reporting Console does not appear until you activate an ICP.
  • Only the primary contacts on the account, or users delegated to administer the Tenable One OT Exposure activation code under Tenable One, can create, update, or delete a Reporting Console.
Tip: For steps to create and manage a Reporting Console, see Manage Reporting Consoles and Product Details in the Tenable Account Management User Guide.

The Reporting Console status changes from Unactivated to Activated after you enter the 20-digit activation code in Tenable Security Center.

How Assets are Counted

In Tenable One OT Exposure, your license count is based on the number of unique IP addresses in your environment. Assets are licensed from the moment they are detected.

Note: Assets on internal networks behind live IP addresses do not count towards your license. For example, in a redundantly connected Programmable Logic Controller (PLC) chassis with two live IP addresses and 10 modules behind these, only the two live IP addresses count towards your license.

Note: While you can connect a standalone purchase of Tenable One OT Exposure to your instance of Tenable One, that does not handle the licensing of those assets. Tenable One customers have a plethora of Tenable solutions that are licensed to them, including Tenable One OT Exposure, but the licenses must be part of the Tenable One license first. You can work with your customer success managers (CSM) to update the account accordingly.

Tenable One OT Exposure Components

You can customize Tenable One OT Exposure for your use case by adding components. Some components are add-ons that you purchase.

Included with Purchase Add-on Component

  • Virtual Core Appliance.

  • Tenable Security Center.

  • Tenable One OT Exposure Enterprise Manager.

  • Tenable One OT Exposure Configurable Sensor.

  • Tenable One OT Exposure Certified Configurable Sensor.

  • Tenable One OT Exposure Certified Core Platform.

  • Tenable One OT Exposure Core Platform.

  • Tenable One OT Exposure XL Core Platform.

Reclaiming Licenses

When you purchase licenses, your total license count is static for the length of your contract unless you purchase more licenses. However, Tenable One OT Exposure reclaims licenses in real time as your asset count changes.

Tenable One OT Exposure reclaims the following assets:

  • Hidden assets

  • Assets that have been offline for more than 30 days

  • Assets you remove or hide in the user interface

Exceeding the License Limit

In Tenable One OT Exposure, you can only use your allocated number of licenses unless you purchase more licenses.

When you exceed your license limit:

  • Non-administrators can no longer access Tenable One OT Exposure.

  • A message that your license has been exceeded appears in the user interface.

  • You can no longer restore assets from the Tenable One OT Exposure Settings.

  • You can no longer update vulnerability plugins or IDS Signatures (Feed updates).

Note: When you exceed your license limit, Tenable One OT Exposure can still detect and add new assets.

Expired Licenses

The Tenable One OT Exposure licenses you purchase are valid for the length of your contract. 30 days before your license expires, a warning appears in the user interface. During this renewal period, work with your Tenable representative to add or remove products or change your license count.

After your license expires, Tenable One OT Exposure is disabled and you cannot use it.