How CA licensing still works.
CA mainframe products are licensed by MIPS or MSU on the LPAR they run against, with sub-capacity rules under specific contract terms, and per-product mainframe ELA agreements that bundle dozens of tools into a single capacity number. Distributed CA products — including AIOps, Spectrum, eHealth, and the API Management portfolio — are licensed by user, by device, by transaction, or by node depending on the product line and the vintage of the entitlement.
Most CA customers have not re-papered their CA entitlement since the Broadcom acquisition. The contract on file is often a decade old, with sub-capacity rules that may or may not have been preserved through assignment.
What auditors look at for CA.
For mainframe CA, the audit pulls SMF records, IPL history, LPAR configuration, and the product activation records that show which CA tools were used during the audit window. For distributed CA, the audit pulls the product console exports, the agent deployment list, and the configuration database.
Mainframe CA disputes often centre on whether sub-capacity rules apply to a given LPAR, and whether peak MSU should be measured by rolling 4-hour average or by raw peak. Distributed CA disputes centre on installed-but-unused agents and on the metric definition.