SEP licensing confuses people because it lives in three places at once: a Broadcom portal, a file, and a counter inside your console. This page joins them up, loosely and honestly, without inventing prices.
Nobody buys Symantec Endpoint Protection for the licensing experience, yet licensing is what decides whether your clients keep receiving protection content. The model is simpler than the portal makes it feel: you buy seats, Broadcom issues a licence file, you import it into SEPM, and the console counts your deployed clients against it. Prices and bundles change too often to print responsibly, so this page covers the mechanics that do not change, and says plainly where your reseller owns the numbers.
Illustrative numbers. Your console shows your real counts; the Seats in use line is the one to watch monthly.
SEP is licensed per endpoint: broadly, each protected client consumes a seat for the term of the licence. The manager itself is the control point, not another mouth to feed; it is the clients reporting to it that the licence counts. Buy for the fleet you actually run, including the laptops that only appear on Fridays, and leave a little headroom for growth and replacements. Running chronically over your seat count is not a clever saving; it is a compliance problem your auditor will eventually price for you.
The licence file is born in the same place as the download: the Broadcom Support portal, under your entitlement, in the Licences area, where keys can be downloaded or generated depending on the product. Your reseller typically registers the purchase and the entitlement appears against your site. Download the licence file, keep the original somewhere safe with the recovery file and backup set, and treat "we bought Symantec" paperwork, invoice and entitlement, as one bundle. If the file never reaches you, chase the reseller first; they hold the thread between your payment and Broadcom's portal.
In SEPM, the Admin page's Licenses section is where licence files are imported or activated, after which the console shows seats purchased, seats in use and the validity period. Do the import on day one, not when the warnings start. Then make a habit of the counter: check seats in use monthly, because fleets grow quietly, a PC here, a new branch there, and the first symptom of over-deployment should be your own report, not a renewal conversation. The video's install and this first-login discipline are what make the counter trustworthy.
Five boxes between you and never thinking about licensing at 2 a.m. again.
When a SEP licence passes its date without renewal, the sky does not fall at midnight, but the important thing degrades: content. Clients depend on the manager being entitled to fetch and distribute current definitions and protection updates, and an expired licence cuts that supply off, with console warnings arriving well before the deadline. A fleet running last month's definitions is protected against last month. The professional routine is dull: calendar the renewal with a long warning, renew early through your reseller or Broadcom, import the fresh file, and confirm the console shows the new dates. Dull is the goal.
Renewal is a purchase plus a file swap: the new entitlement lands in the portal, you download the new licence file, import it, done. If the fleet outgrew the seats mid-term, the honest move is a true-up, buying the difference, not hoping nobody counts; SEP counts continuously, in writing, inside your own console. Moving SEPM to a new server does not strand the licence: the entitlement belongs to your organisation, and the file can be imported into the rebuilt manager as part of the recovery routine. Keep the paperwork with the backup set and every one of these operations stays boring.
No prices, no bundle comparisons, no "cheapest way" claims. SEP pricing depends on product edition, seat count, term and region, and it changes; any page that prints a confident price is guessing with your budget. Get two quotes from authorised resellers, confirm exactly which product edition and seat count each quote names, and check the entitlement appears in your Broadcom account after purchase. The mechanics above will still be true whatever you pay, which is why they are the part worth writing down.
Licence imported and seats checked, the install story is complete. Watch the video for the console screens, and calendar the renewal date today.
▶️ Watch Full VideoLicensing is counted per protected endpoint client reporting to the manager. The manager is the control point. Confirm your exact edition terms with your reseller, since bundles differ.
The console shows seats in use above seats purchased, and you are out of compliance. The fix is a true-up purchase for the difference, arranged through your reseller, followed by importing the updated licence file.
Broadcom offers trial and proof-of-concept routes through its site and partners. A trial still comes with a proper time-limited entitlement from Broadcom, so the portal and console experience matches the real thing.