B&R License Management When the OEM is Gone
A practical reference for automation engineers maintaining B&R CP1584 PLCs inherited from defunct OEMs with zero documentation.
1. Overview
The Licensing Challenge
When you inherit a B&R machine from a defunct or unreachable OEM, you face a unique licensing problem. B&R Automation’s licensing model is built around a system called Technology Guarding (TG), which ties software and runtime licenses to physical hardware containers (USB dongles) or software containers. Unlike Siemens TIA Portal licenses that can sometimes be recovered through factory support portals, B&R licenses are tightly coupled to the original purchasing entity’s account and the physical dongle they shipped on.
The core problems you face:
- No B&R portal access – the OEM owned the account; you cannot log in to manage licenses.
- Dongle custody – the TG USB dongle may be missing, damaged, or stuck with expiring licenses.
- Unknown license inventory – you do not know which licenses (AS, AR, mapp components) were purchased.
- Perpetual vs. time-limited confusion – mixing AS (annual) and AR (perpetual) licenses on one dongle creates transfer deadlocks.
- No documentation – no license keys, no purchase records, no activation records.
What Licenses Are Typically Needed
| License Category | Purpose | Type | Typical Duration |
|---|---|---|---|
| Automation Studio (AS) | IDE for programming, configuration, diagnostics | Time-limited (AS) | 1 year, auto-renews with service |
| Automation Runtime (AR) | Runtime execution on PLC (CP1584) | Perpetual (AR) | No expiration |
| mapp View | HMI/web visualization framework | TG-licensed | Perpetual or time-limited |
| mapp AlarmX | Alarm management | TG-licensed | Perpetual |
| mapp IO | I/O mapping and diagnostics | TG-licensed | Perpetual |
| mapp User | User management and authentication | TG-licensed | Perpetual |
| mapp Safety | Safety function blocks (requires Safety Designer) | TG-licensed | Perpetual (safety-critical) |
| Safety Designer | Configuration of safety functions | TG-licensed | Perpetual |
| OPC UA (mapp) | OPC UA server/client | TG-licensed | Perpetual |
| Motion / CNC | Motion control, CNC functionality | TG-licensed | Perpetual |
Technology Guarding Ecosystem Overview
B&R License Server
(license.br-automation.com)
|
TLS 1.2 / HTTPS
|
+-----------------------+-----------------------+
| |
Technology Guarding CodeMeter Runtime
Desktop Application Service (Windows Service)
| |
License Management UI Container Detection & Decryption
(Activate / Deactivate) |
| +--------+--------+
+-------+-------+-------+ | |
| | | USB Dongle Software
Dongle X20CMR Software (0TG1000.02) Container
(USB) Modules Container (VM-bound)
2. Technology Guarding Architecture
CodeMeter by Wibu-Systems
Technology Guarding is B&R’s branding of the Wibu-Systems CodeMeter digital rights management (DRM) platform. CodeMeter is a widely-used licensing framework in industrial automation (also used by Lenze, Bosch Rexroth, and others). Understanding this helps because:
- The CodeMeter Runtime Service is a Windows service that must be running for AS to function.
- The CodeMeter Control Center (separate from TG) can inspect dongles and software containers.
- Error codes beginning with WB (e.g., WB47, WB67) originate from CodeMeter, not B&R’s TG layer.
- Firmware updates to the dongle are actually CodeMeter firmware operations.
License Container Types
| Container | Part Number | Description | Binding Mechanism |
|---|---|---|---|
| USB Dongle | 0TG1000.02 | Physical USB stick, most common | Hardware-bound (portable) |
| USB Dongle (CmStick) | 0TG1000.02 | Same as above, Wibu nomenclature | Hardware-bound |
| Software Container | — | Licensed to a specific PC | Bound to hardware fingerprint (CPU, motherboard, MAC) |
| X20CMR Module | X20CMR0190 (and others) | Built-in TG in X20 bus module | Hardware-bound to module |
| Network Dongle | — | Dongle on network share | Hardware-bound (remote) |
USB Dongle (0TG1000.02)
- The primary license container shipped by B&R.
- Can hold multiple licenses (AS + AR + multiple mapp components).
- Plugs into PC for AS licensing, or into PLC for AR licensing.
- Portable between machines (by design).
- Fragile: physical damage or firmware corruption renders all licenses on it inaccessible.
Software Container
- A license bound to a specific PC’s hardware fingerprint.
- Created during “Activate on this PC” operations in TG.
- Critically: invalidated by any hardware change – VM migration, snapshot revert, hardware upgrade, motherboard replacement.
- NOT recommended for production environments.
- Suitable only for development PCs that never change hardware.
X20CMR Modules
- Select X20 system modules have a built-in Technology Guard element.
- Allows AR license activation directly on the PLC hardware (no dongle needed for AR).
- The module’s TG element is treated as a license container, similar to a dongle.
- Useful for machines where the PLC itself should hold the runtime license permanently.
License Types
AS Licenses (Time-Limited)
- Duration: 1 year from activation.
- Auto-renew: renews automatically when a valid B&R service contract exists and the license can reach the B&R server.
- Stops auto-renewing if the service contract lapses or the OEM goes bankrupt.
- Cannot be returned to the B&R server after expiration (by design).
- Key risk: if an expired AS license sits on the same dongle as perpetual AR licenses, the AR licenses become trapped because returning any license from the dongle requires all licenses to be in a valid state.
AR Licenses (Perpetual)
- No expiration date.
- Tied to the PLC hardware or a dongle.
- Not affected by service contract status.
- Stored separately from AS licenses in most deployment scenarios (AR on PLC, AS on PC dongle).
- Can be activated via PLC network connection or by plugging the dongle into the PLC.
mapp Component Licenses
- Most mapp components are perpetual licenses.
- Stored on the same TG container as AS licenses (typically the USB dongle).
- Required at download time (AS verifies mapp licenses before downloading to PLC).
- Some mapp components have different licensing models; verify individually.
Server-Activated vs. Offline Licensing
| Mode | Description | Use Case |
|---|---|---|
| Online Activation | License key validated against B&R server in real time | Normal operation, internet-connected |
| Offline Licensing | Request file generated offline, imported into TG | Air-gapped machines, no internet access |
Online activation requires:
- TLS 1.2 support (mandatory since March 2024).
- TG software version >= 1.4.
- CodeMeter Runtime >= 6.70.
License Key Format
B&R license keys follow this pattern:
xxxxx-xxxxx-xxxxx-xxxxx-xxxxx
25 characters total (5 groups of 5), alphanumeric. This key is your primary asset – treat it like a serial number. It is NOT the dongle serial number. The key is what you activate on the dongle; the dongle is the storage medium.
3. Identifying What Licenses You Have
Step 1: Locate the Physical TG Dongle
Physically inspect the machine and control cabinet:
- Check the engineering PC USB ports.
- Check the PLC panel – some machines have the dongle permanently plugged into the PLC.
- Check spare parts boxes and documentation folders.
- Check the CF card (CompactFlash) in the PLC – license documentation is sometimes stored there.
- The dongle is a small USB stick, typically green/blue, branded “CodeMeter” or “B&R.”
Step 2: Inspect the Dongle with Technology Guarding Software
- Install TG software (see Section 4).
- Plug the dongle into your PC.
- Launch Technology Guarding (BR.AS.License.UI.exe).
- The UI will show all licenses on the connected dongle.
Alternative: CodeMeter Control Center
- Install CodeMeter Runtime (included with TG installation).
- Launch CodeMeter Control Center from Start Menu.
- Navigate to the dongle under “Devices.”
- Select “License” tab to see individual license entries.
Step 3: Check PLC for AR Licenses
AR licenses stored on the PLC can be checked via:
Method A: SDM (Service & Diagnostics Manager)
- Connect to PLC via Ethernet.
- Open SDM in Automation Studio.
- Navigate to PLC > Diagnostics > License.
Method B: OPC-UA
- Connect to PLC OPC-UA server.
- Browse to
Automation.Components.AR.Licensenamespace. - Read license status nodes.
Method C: PLC Web Interface
- Open PLC IP in browser.
- Navigate to System > License (on supported firmware versions).
Step 4: Find License Documentation on the CF Card
B&R PLCs use CompactFlash (or CFast) cards. Remove the card and check:
/System/License/
/System/Documentation/
/License/
/Config/
Look for files named:
LicenseKey*.txtLicense.txtActivationLog*.xml- Any .txt or .pdf files with “license” in the name
Step 5: Check AS for Installed mapp Components
- Open the existing AS project (if available).
- In Solution Explorer, expand
Logical View > mapp. - Each mapp component with a lock icon requires a license.
- Check
Project > Properties > mappfor a summary. - If AS is running with the dongle, open
Tools > Technology Guardingto see what mapp licenses are detected.
Step 6: Determine Active vs. Installed Licenses
A license being “present” on the dongle does not mean it is “in use.” To determine active usage:
- AR licenses: always in use if the PLC is running.
- AS licenses: in use if AS is open on a PC with the dongle.
- mapp licenses: in use if mapp function blocks are instantiated in the running project and the PLC is executing them.
- Check PLC runtime: if the PLC is running, AR and active mapp licenses are in use. A PLC in stop state still “holds” its AR license but may not require mapp licenses.
4. Technology Guarding Software Setup
Download
TG software is available from B&R’s website. It is included in the PVI Development Setup download package.
Direct download path on B&R website:
- Navigate to
www.br-automation.com - Downloads > Software > Automation Studio > PVI Development Setup
- Download the version matching your AS version.
The TG component within the installer is: USB: 1TG0500.02 (Technology Guarding).
Installation
- Run the PVI Development Setup installer.
- When prompted for components, select only:
USB: 1TG0500.02(Technology Guarding)PVI Runtime(if not already installed)
- Complete the installation.
The installer places:
- TG application:
C:\Program Files\BR\TechnologyGuarding\BR.AS.License.UI.exe - State file:
C:\ProgramData\BR\TechnologyGuarding\BR.AS.License.UI.state - CodeMeter Runtime service (installed as Windows service)
Version Requirements
| Component | Minimum Version | Why |
|---|---|---|
| TG Software | >= 1.4 | TLS 1.2 support for B&R server communication |
| CodeMeter Runtime | >= 6.70 | Required for AS operation and modern crypto |
| .NET Framework | >= 4.6 | TLS 1.2 API availability |
| Windows | 7 SP1 / 10 / 11 / Server 2012 R2+ | OS compatibility |
Critical: Since March 2024, B&R’s license server requires TLS 1.2. AS versions below 4.6 cannot license from within AS itself. Use TG standalone >= v1.4 instead.
CodeMeter Runtime Service
- Must be running for AS to detect the dongle and validate licenses.
- Service name:
CodeMeter Runtime Server(or localized equivalent on non-English systems). - Start manually: Services MMC, or:
net start "CodeMeter Runtime Server" - Set to Automatic startup for production PCs.
Server Configuration
When first launching TG standalone:
- TG will prompt for server credentials.
- If you do not have the OEM’s B&R portal credentials, you can leave the username/password blank or fill with placeholder text.
- For activation with a known license key, the server communication is minimal – the key is validated, not authenticated against a user account.
- The TG standalone tool can activate a license with just the key string, even without a valid portal login.
Offline Licensing Mode
For air-gapped systems (no internet at the PLC or engineering PC):
- On an internet-connected PC with TG installed, start the offline activation process.
- TG generates a request file (XML/encrypted) containing the license key and container ID.
- Transfer the request file to the B&R license server manually (e.g., via email from a different PC).
- The server returns an activation file.
- Transfer the activation file back to the air-gapped PC.
- Import the activation file into TG.
Alternatively, B&R support can process offline activations via email if you provide the dongle serial number and license key.
5. License Transfer Between Hardware Units
Moving Licenses from Old Dongle to New Dongle
Prerequisites:
- Both dongles must be functional (not stuck in firmware update mode).
- Licenses to be transferred must NOT be expired (expired licenses cannot be returned).
Method A: Via PLC (Network Transfer)
- Plug the source dongle (old) into the target PLC’s USB port.
- Connect to the PLC from AS (or SDM).
- Activate the new licenses on the PLC’s TG element (or a dongle already on the PLC).
- Once the PLC has the licenses, the source dongle’s licenses are consumed (transferred).
- Remove the old dongle.
Method B: Direct Transfer (PC-Based)
- Plug the source dongle (old) into the PC.
- Plug the target dongle (new) into the PC.
- Open TG software.
- Select the source dongle, choose “Deactivate” or “Return” for specific licenses.
- If return succeeds, activate those licenses on the target dongle.
Critical Limitation: If the source dongle has ANY expired license, the return operation may be blocked for ALL licenses on that dongle. See Section 7 for the workaround.
Software Container Migration
Do NOT use software containers on VMs. Software containers are bound to hardware fingerprints. Any of the following will invalidate the container:
- VM migration (moving to different host hardware).
- VM snapshot revert (restores old hardware fingerprint data).
- VM clone/copy.
- Virtual hardware upgrade (changing vCPU count, RAM, NIC MAC).
- Hypervisor host change.
If you must use a software container:
- Use it only on a physical PC.
- Do not upgrade the PC’s hardware.
- Back up the container activation files (from
C:\ProgramData\BR\TechnologyGuarding\).
6. Activating Licenses Without Original B&R Portal Account
Using TG Standalone with License Key Only
This is the most common scenario when the OEM is gone:
- Install TG software (Section 4).
- Plug in a functional TG dongle (new or existing).
- Launch TG (BR.AS.License.UI.exe).
- When prompted for credentials, enter any placeholder text for username and password (e.g., “user” / “user”). The TG standalone tool does not strictly validate these for license key activation.
- Select “Activate license online”.
- Enter the 25-character license key:
xxxxx-xxxxx-xxxxx-xxxxx-xxxxx. - Select the target container (dongle) from the dropdown.
- Click Activate.
If the license key is valid and has activations remaining, the activation will succeed without OEM portal credentials.
If Online Activation Fails
Possible causes:
- License key already fully activated on other dongles (max activations reached).
- B&R server rejects activation for keys tied to accounts in bad standing (bankrupt OEM).
- Network/firewall blocking TLS 1.2 to B&R server.
Escalation path:
- Contact B&R support (
[email protected]). - Provide the license key and dongle serial number.
- Explain the situation (OEM defunct, you are the new machine owner/maintainer).
- B&R can:
- Reset activation counts on the server.
- Reassign licenses to a new account.
- Issue replacement license keys in extreme cases.
Getting Help from B&R Support
When contacting B&R support as a non-original customer:
- Have ready: license keys, dongle serial number(s), PLC serial number, machine location.
- Explain clearly: “The OEM (name) is no longer in business. We maintain this machine and need to manage the B&R licenses.”
- B&R support is generally helpful in these situations, but response times vary.
- For safety-related licenses (mapp Safety, Safety Designer), B&R may require additional verification.
- Create a new B&R portal account in your company’s name before calling – they may reassign licenses to your account.
7. Common License Problems and Solutions
Problem: TG Dongle Stuck in Firmware Update Mode (WB47 / WB67)
Symptoms:
- TG software detects the dongle but shows it as “updating” indefinitely.
- Error code WB47 or WB67 in CodeMeter / TG.
- AS cannot detect the dongle.
- Dongle LED may flash continuously or stay off.
Cause: The dongle’s CodeMeter firmware became corrupted during an update attempt, or the update was interrupted (USB disconnect, power loss, AS crash).
Solution:
- There is no user-serviceable fix. The dongle must be returned to B&R for repair/replacement.
- Contact B&R support with the dongle serial number.
- B&R will typically re-flash the dongle and restore licenses from their server records (if licenses were properly activated and recorded).
- If the dongle is out of warranty, there may be a cost for this service.
- Do NOT attempt to flash the dongle firmware yourself using third-party CodeMeter tools.
Prevention:
- Never disconnect the dongle while TG or AS is running.
- Never unplug during a license activation/deactivation operation.
- Use a USB port with stable power (not a hub, not a front-panel port on a flaky PC).
Problem: AS License Expired Before 1 Year
Symptoms: AS shows “license expired” despite being activated less than a year ago.
Cause: The TG system time on the dongle was reset or corrupted. If the dongle’s internal clock was not properly synchronized, the expiration calculation can be wrong.
Solution:
- Ensure the PC’s system time is correct.
- Plug the dongle in and open TG software.
- TG should re-synchronize the dongle’s internal time with the PC.
- If the dongle time is severely off, the license may appear expired permanently.
- Contact B&R support for a license key reset in this case.
Problem: TLS 1.2 Blocking
Symptoms: TG cannot connect to B&R license server. Error about SSL/TLS or connection refused.
Cause: Since March 2024, B&R requires TLS 1.2. Older TG versions or .NET configurations default to TLS 1.0/1.1.
Solution: Force TLS 1.2 in .NET via Windows Registry:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\.NETFramework\v4.0.30319]
"SchUseStrongCrypto"=dword:00000001
"SystemDefaultTlsVersions"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework\v4.0.30319]
"SchUseStrongCrypto"=dword:00000001
"SystemDefaultTlsVersions"=dword:00000001
After applying, restart the PC and retry.
Alternative: Upgrade TG to >= 1.4 and CodeMeter Runtime to >= 6.70.
Problem: CodeMeter Runtime Service Not Running
Symptoms: AS shows “no dongle found” or “license system unavailable.” TG software shows no containers.
Solution:
net start "CodeMeter Runtime Server"
If the service fails to start:
- Check Windows Event Viewer for errors.
- Reinstall CodeMeter Runtime from the TG installer.
- Ensure no other CodeMeter instances from other software (Lenze, Bosch) are conflicting.
- Restart the PC.
Prevention: Set the service to Automatic startup type.
Problem: “Maximum Number of Activations Reached”
Symptoms: TG reports that the license key cannot be activated because all activations are used.
Cause A: Genuine over-activation. The license was activated on multiple dongles/PCs by the OEM.
Cause B: File permission issue. TG cannot write its state file.
Check file permissions:
The TG state file must be writable:
C:\ProgramData\BR\TechnologyGuarding\BR.AS.License.UI.state
- Open Properties > Security on this file.
- Ensure the current user has Full Control.
- Ensure the folder
C:\ProgramData\BR\TechnologyGuarding\is also writable. - If permissions are correct and activations are genuinely exhausted, contact B&R support for a reset.
Problem: License Activated on Wrong Dongle (Third-Party Dongle)
Symptoms: A license appears on a dongle that is not the B&R TG dongle. CodeMeter Control Center shows the license under a different manufacturer’s container.
Cause: If the PC has CodeMeter drivers from another vendor (e.g., Lenze, Bosch Rexroth), the TG activation may target the wrong container.
Solution:
- Disconnect all non-B&R CodeMeter dongles.
- Open CodeMeter Control Center.
- Identify the B&R dongle by its serial number.
- In TG, explicitly select the correct dongle/container before activating.
- If already activated on the wrong container, return it from the wrong container first, then activate on the correct one.
Problem: Software Container Invalidation in VMs
Symptoms: After VM migration or snapshot, all TG licenses show as invalid or missing.
Cause: Software containers are hardware-fingerprint-bound. VM changes invalidate the fingerprint.
Solution:
- Do not use software containers on VMs (preventive measure).
- If already in this state: return the invalid container activation (may not work if fingerprint is completely changed).
- Re-activate licenses on a USB dongle instead.
- If no dongle is available, contact B&R support.
Error Code Reference Table
| Error Code | Source | Description | Severity | Resolution |
|---|---|---|---|---|
| WB47 | CodeMeter | Dongle firmware update failed / stuck | Critical | Return dongle to B&R |
| WB67 | CodeMeter | Dongle communication error / firmware issue | Critical | Return dongle to B&R |
| 10080 | TG / .NET | Network timeout connecting to B&R server | Medium | Check firewall, TLS 1.2 |
| 262 | CodeMeter | License not found on container | Medium | Check license key, container ID |
| 71 | CodeMeter | Container access denied / permission issue | Medium | Check file permissions on state file |
| 280 | TG | Maximum activations reached | Medium | Return unused activations or contact B&R |
| 281 | TG | License expired | Medium | Renew or use evaluation |
| 282 | TG | License not yet valid (date issue) | Low | Check system time |
| 283 | TG | License returned successfully | Info | Normal operation |
| 501 | CodeMeter | Dongle removed during operation | Medium | Reinsert dongle, retry |
| 502 | CodeMeter | Dongle hardware failure | Critical | Replace dongle |
| 600 | CodeMeter | Software container fingerprint mismatch | Critical | Reactivate on new container |
| 601 | CodeMeter | Software container corrupted | Critical | Return and reactivate |
| 700 | TG | Server communication failed | Medium | Check internet, TLS 1.2 |
| 701 | TG | Invalid license key format | Low | Check key: xxxxx-xxxxx-xxxxx-xxxxx-xxxxx |
| 702 | TG | License key not found in B&R database | Medium | Verify key with B&R support |
| 703 | TG | Account / credential validation failed | Medium | Use placeholder credentials with standalone TG |
8. Evaluation Licenses
Using AS Evaluation Licenses as a Stopgap
When you have no valid AS license and need immediate access to the IDE for diagnostics or minor changes:
- Download Automation Studio from B&R website (full installation).
- During installation, select “Evaluation” mode.
- AS will run in evaluation mode for 30 days (typical; may vary by version).
What evaluation mode provides:
- Full AS IDE functionality.
- Ability to connect to PLCs, upload/download projects.
- Ability to go online and diagnose.
- Ability to edit logic and download changes.
What evaluation mode restricts:
- Time-limited (30 days typically).
- May have watermarks or “Evaluation Mode” indicators.
- Not suitable for safety-related work (mapp Safety changes).
- Cannot be used for production deployment in a commercial setting.
When Evaluation Licenses Are Sufficient
Evaluation AS licenses are appropriate for:
- Initial forensics on an inherited machine (reading the project, understanding logic).
- Diagnostics and troubleshooting (going online, monitoring variables).
- One-time code changes (quick fixes, parameter adjustments).
- Emergency recovery situations where you need AS access immediately.
Evaluation AS licenses are NOT appropriate for:
- Ongoing development (they expire).
- Safety-related modifications (mapp Safety requires proper licensing).
- Any work that needs to be audited or documented for regulatory compliance.
Important: Evaluation + Existing Dongle
You can run AS in evaluation mode while keeping the TG dongle plugged in for AR and mapp licenses. The evaluation license covers AS IDE access; the dongle covers the runtime and mapp component licensing. This is a practical workaround when the AS license on the dongle is expired but the AR/mapp licenses are still valid and you cannot return them.
9. mapp Component Licenses
Common mapp Components
| mapp Component | Function | License Type | Notes |
|---|---|---|---|
| mapp View | HMI visualization, web-based | Perpetual | Required for any HMI development |
| mapp AlarmX | Alarm management, logging | Perpetual | Handles alarm configuration and display |
| mapp IO | I/O configuration and diagnostics | Perpetual | Auto-discovery of I/O modules |
| mapp User | User authentication and roles | Perpetual | Login/logout, role-based access |
| mapp Safety | Safety function blocks | Perpetual | Requires Safety Designer license separately |
| Safety Designer | Safety function configuration | Perpetual | Part of mapp Safety ecosystem |
| mapp Motion | Motion control | Perpetual | Axis configuration, camming, gearing |
| mapp CNC | CNC functionality | Perpetual | G-code support, CNC machining |
| mapp OPC UA | OPC UA server and client | Perpetual | Industry-standard communication |
| mapp Database | Database connectivity | Perpetual | SQL/NoSQL database access |
| mapp Audit | Audit trail logging | Perpetual | Traceability and compliance |
| mapp Energy | Energy monitoring | Perpetual | Power consumption tracking |
Determining Which mapp Components Are Licensed
Method 1: TG Software
- Open TG with dongle connected.
- Browse the license list on the container.
- Each mapp license appears as a separate entry (e.g., “mappView,” “mappAlarmX”).
Method 2: CodeMeter Control Center
- Open CodeMeter Control Center.
- Select the dongle.
- View Product Items – each mapp component has a distinct product code.
Method 3: AS Project
- Open the AS project.
- Expand
Logical View > mappin Solution Explorer. - Each mapp component folder present indicates that component is used in the project.
- Cross-reference with TG to confirm licensing.
What Happens When a mapp License Expires
- AS behavior: AS will show a warning when opening the project. You can still view the code but may not be able to download to PLC.
- PLC behavior: The PLC continues to run the existing code. mapp components already loaded and executing on the PLC do not stop when the license expires on the dongle/PC.
- Download restriction: You cannot download a project to PLC if required mapp licenses are missing/expired on the TG container used by AS.
- Runtime implications: For mapp components that check licenses at runtime (rare), functionality may degrade.
mapp Safety Specific Considerations
mapp Safety licensing has additional constraints:
- Safety Designer requires its own TG license (separate from mapp Safety runtime).
- Safety-related function blocks will not compile/download without valid Safety Designer and mapp Safety licenses.
- Do not attempt to modify safety logic without proper licensing. If safety logic needs changes and no safety license is available, contact B&R support immediately – this is a safety-critical gap.
- Safety licenses may have additional transfer restrictions compared to standard mapp licenses.
10. Automation Runtime Licenses
AR License Types
| License Type | Description | Container | Duration |
|---|---|---|---|
| AR Standard | Standard Automation Runtime | PLC or Dongle | Perpetual |
| AR Safety | AR with Safety functionality | PLC or Dongle | Perpetual |
| AR Fieldbus | AR with Fieldbus support | PLC or Dongle | Perpetual |
| AR Service | Service contract license (enables updates) | PLC | Perpetual (valid while service active) |
AR License Storage Locations
AR licenses can be stored on:
- The PLC itself (via X20CMR module or built-in TG element).
- A USB dongle plugged into the PLC.
- A software container on the PC running AS (for download-time validation only – the AR license itself must be on the PLC or its dongle).
Best practice: AR licenses should be on the PLC or a dongle permanently attached to the PLC, not on a portable dongle shared with AS.
AR License Activation via PLC
If the PLC has a TG-capable element (X20CMR module):
- Connect the PLC to the network with internet access.
- In TG, select the PLC’s TG element as the target container.
- Activate the AR license key on the PLC’s TG element directly.
- No dongle required.
If using a dongle:
- Plug the TG dongle into the PLC’s USB port.
- From a network-connected PC, use TG or SDM to activate the AR license on the dongle while it’s on the PLC.
- Alternatively, plug the dongle into a PC, activate the AR license, then move the dongle to the PLC.
Checking AR License Status Without AS
If AS is unavailable (no license, no installation):
- SDM (Service & Diagnostics Manager) can connect to the PLC independently and show license status.
- PLC Web Interface: Open the PLC’s IP address in a browser. Navigate to System > License (if available on your firmware version).
- OPC-UA: Connect to the PLC’s OPC-UA server and read the license status nodes under
Automation.Components.AR.License. - Physical inspection: Check if an X20CMR module is installed in the X20 bus. Its LED indicators can show TG status.
- FTP/SFTP: Connect to the PLC via FTP and check
/System/License/directory for license files.
AR Service License
The AR service license is a separate concept from the AS service contract:
- It enables the PLC to receive firmware updates.
- Without it, the PLC still runs but cannot be updated.
- It is perpetual but may have a validity period linked to the service contract.
- If the OEM’s service contract has lapsed, the AR service license may show as expired, but the PLC continues to run its current firmware.
11. License Recovery Scenarios
Scenario A: OEM Went Bankrupt
What happens to licenses:
- Perpetual licenses (AR, mapp) remain valid on their containers indefinitely.
- AS licenses will stop auto-renewing after the current period expires (typically 1 year from last renewal).
- License keys remain valid on B&R’s servers unless explicitly revoked (which B&R does not typically do).
Your position:
- You own the physical dongle(s) and PLC(s) – you have physical possession of the licensed hardware.
- B&R’s general policy: licenses follow the hardware, not the account. If you have the dongle and PLC, you can use the licenses.
- AS auto-renewal stopping means you must find an alternative (evaluation, purchasing new AS license, or contacting B&R to transfer the license to your account).
Action items:
- Inventory all dongles, PLCs, and license keys immediately.
- Document everything (serial numbers, key strings, dongle serials).
- Contact B&R support to open a support case in your company’s name.
- Request license transfer to your account.
- Negotiate a new service contract with B&R if continued AS licensing is needed.
Scenario B: Lost TG Dongle
Impact:
- All licenses stored on that dongle are inaccessible.
- AS will not function (no AS license).
- mapp component licenses for download are unavailable.
- If the dongle was on the PLC, AR licenses may also be lost.
Recovery options:
- Check if B&R’s server has records of the licenses on the lost dongle (provide dongle serial number to support).
- B&R may be able to deactivate the lost dongle on their server and re-issue licenses on a new dongle.
- This process requires proof of ownership (PLC serial number, original purchase records if available).
- If B&R cannot verify the licenses, you may need to purchase replacement licenses.
Prevention:
- Keep the dongle permanently installed in the PLC cabinet (not carried around).
- Document the dongle serial number and keep it in multiple locations.
- Back up the contents of the CF card, which may contain license records.
Scenario C: Damaged Dongle
If the dongle is physically damaged but still detected by the PC:
- Try to return all licenses to the B&R server immediately.
- If some licenses cannot be returned (expired), contact B&R support.
- Once all returnable licenses are recovered, B&R can issue a replacement dongle with the returned licenses.
If the dongle is completely dead (not detected):
- Same as lost dongle (Scenario B).
- B&R may need the physical dongle for forensics. Send it to them if they request it.
Warranty:
- TG dongles have a limited warranty (typically 2 years).
- If under warranty, B&R will replace the dongle and restore licenses free of charge.
- If out of warranty, there may be a replacement cost plus a fee for license restoration.
Scenario D: Dongle with Stuck Licenses (Cannot Return Any)
The “sticky dongle” problem:
This occurs when:
- One license on the dongle has expired.
- You try to return other (still-valid) licenses from the dongle.
- The return operation fails because the dongle contains at least one expired license.
Root cause: B&R’s design intentionally prevents returning licenses from a container that contains expired licenses, to prevent license farming / abuse.
Workaround: Use Evaluation AS + Keep Dongle on PLC
- Install AS in evaluation mode (30 days, renewable by reinstalling).
- Keep the TG dongle plugged into the PLC (not the PC).
- The dongle’s AR and mapp licenses continue to serve the PLC.
- Use evaluation AS for IDE access (diagnostics, minor changes).
- The expired AS license on the dongle does not affect PLC operation – only AS IDE access.
Escalation:
- Contact B&R support.
- Explain that an expired license on the dongle is blocking return of other licenses.
- B&R support may be able to:
- Manually invalidate the expired license on their server.
- Enable a special return operation.
- Issue replacement license keys for the trapped perpetual licenses.
- This escalation may take days to weeks. Plan accordingly.
Scenario E: Buying Used Equipment
When purchasing a used B&R machine:
- Verify that TG dongles are included with the machine.
- Document all dongle serial numbers and note which licenses are on them.
- Request license transfer documentation from the seller.
- Contact B&R to confirm the licenses can be transferred to your account.
- Be aware that AS licenses from a defunct seller will eventually expire and cannot be renewed without a service contract in your name.
Buying from an auction / liquidation:
- Same as above, but seller documentation may be unavailable.
- B&R may require proof that the seller had legitimate ownership before transferring licenses.
- In some cases, licenses may not be transferable if the original account is in bad standing.
Scenario F: Upgrading to Automation Studio 6 (License Implications)
AS6 introduces a new licensing model called shared upgrades that differs from AS4’s perpetual dongle model. If you are migrating from CP1584 to a modern controller, you will need AS6 and its licensing affects your planning:
| Aspect | AS4 (Current) | AS6 (New) |
|---|---|---|
| AS license delivery | TG dongle (USB) | Shared upgrades + TG or software container |
| AS license type | Perpetual or annual | Subscription-based upgrades |
| AR license | Perpetual on PLC | Perpetual on PLC (unchanged) |
| mapp components | TG-licensed, perpetual | mapp 6 with updated licensing model |
| CodeMeter requirement | Yes | Yes (updated version) |
Key implications for the OEM-unavailable scenario:
- Existing AS4 perpetual licenses do not automatically carry to AS6. You need a new AS6 license or service contract.
- AR licenses (perpetual) on the PLC are unaffected by the AS version — the runtime doesn’t change.
- If you plan to use evaluation AS6 for migration work, note that evaluation periods are shorter and may not support all mapp 6 components.
- Contact B&R support early to discuss a migration license package — they may offer discounted upgrades for existing hardware owners.
- Community migration tools at
github.com/br-automation-community/as6-migration-toolscan help identify license implications in your project.
See firmware-version-mgmt.md §5.3.1 for the full AS4→AS6 migration guide.
12. Key Findings
-
Inventory immediately. Document every dongle serial number, license key string, PLC serial number, and X20CMR module before anything else is lost. Store copies off-site.
-
Do not let AS licenses expire on a shared dongle. An expired AS license on the same dongle as perpetual AR/mapp licenses traps all licenses and prevents returns. Monitor AS license expiration dates via TG software.
-
Keep the dongle on the PLC. For production machines, the TG dongle should live in the PLC cabinet, not on the engineering PC. This isolates AR/mapp licenses from PC-side AS license issues.
-
Use TG standalone >= v1.4 for licensing operations. Do not rely on AS < 4.6 for license management – it lacks TLS 1.2 support and cannot communicate with B&R’s license server after March 2024.
-
Never use software containers on VMs. Any VM migration, snapshot, or hardware change invalidates the container. Use physical USB dongles exclusively for production.
-
Force TLS 1.2 in Windows Registry. If TG or AS cannot connect to the B&R license server, apply the .NET SchUseStrongCrypto registry keys before spending time on network troubleshooting.
-
CodeMeter Runtime Service must run. If AS shows “no dongle” and the dongle is physically present, check that the CodeMeter Runtime Server Windows service is running before assuming the dongle is broken.
-
Evaluation AS licenses are a viable stopgap. Run AS in 30-day evaluation mode while keeping the dongle on the PLC for AR/mapp licensing. This sidesteps the expired-AS-on-shared-dongle problem.
-
TG standalone does not strictly validate portal credentials. When activating a license key on a dongle, placeholder credentials work. You do not need the OEM’s B&R portal account.
-
A stuck dongle (WB47/WB67) is a hardware problem. Do not waste time trying software fixes. Return the dongle to B&R repair immediately and use evaluation AS in the interim.
-
Expired licenses don’t stop running programs immediately. Most mapp technology components continue to function with expired licenses but display warnings. However, some features may be disabled after a grace period.
-
Offline licensing is possible for air-gapped systems. B&R provides an offline activation procedure using challenge/response codes for systems without internet connectivity.
13. Cross-References
| Related Document | Relevance |
|---|---|
| firmware.md | Firmware architecture — where license validation fits in the AR boot sequence |
| firmware-version-mgmt.md | Version identification — matching firmware versions to valid license files |
| cf-card-boot.md | CF card storage — license files reside on the CF card system partition |
| config-file-formats.md | Configuration files — where license configuration and TG settings are stored |
| ftp-web-interface.md | FTP access — reading license files from the CF card remotely |
| access-recovery.md | Credential recovery — regaining access when license management requires authentication |
| cp1584-forensics.md | Forensic extraction — pulling license information from an undocumented system |
| bootloader-recovery.md | Recovery procedures — what happens to licenses when the system is reinstalled from scratch |
| online-changes.md | Runtime changes — how mapp technology license checks behave during online modifications |
| cybersecurity-hardening.md | Security hardening — protecting license dongles and TG communication from interception |
| remanufacturing.md | Migration — transferring licenses to replacement hardware during system replacement |
| ar-rtos.md | AR OS internals — CVE table includes vulnerabilities affecting TG and licensing infrastructure |
| project-reconstruction.md | Project reconstruction — determining what licenses are needed when reconstructing an AS project |
14. Sources
- B&R Automation Studio documentation, Automation Runtime documentation – BrAutomation.com downloads section.
- B&R Technology Guarding product page and knowledge base articles.
- Wibu-Systems CodeMeter documentation – CodeMeter.com.
- B&R Knowledge Base article: “Technology Guarding – TLS 1.2 requirement since March 2024.”
- B&R Knowledge Base article: “License activation with Technology Guarding standalone.”
- B&R Knowledge Base article: “What to do when your TG dongle is stuck in firmware update mode.”
- B&R Knowledge Base article: “AS license expiration and auto-renewal behavior.”
- B&R Knowledge Base article: “Returning licenses from a container with expired licenses.”
- B&R Technical Note: “Offline licensing procedure for air-gapped systems.”
- Wibu-Systems CodeMeter error code reference (WB47, WB67, etc.).
- Community forum reports from automation engineers maintaining inherited B&R equipment.
- Practical field experience with CP1584 PLCs from defunct OEMs.