topic Re: Smart License usage is out of compliance. in Network Security

Smart License usage is out of compliance.

MedTiti92 — Wed, 09 Nov 2022 07:29:12 GMT

Hi Guys, i have this issues "Smart License usage is out of compliance." ... what is the solution of this error

Thanks !

Re: Smart License usage is out of compliance.

balaji.bandi — Wed, 09 Nov 2022 08:09:17 GMT

Looks like it was registered a long time in 2020 ( what happens when you click re-authorise )

First, i would log in to the portal and check the License and any alerts related to the License.

Second, if all that is good, I will troubleshoot - is the FMC able to reach the smart license Server ? (follow below guide)

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/215838-fmc-and-ftd-smart-license-registration-a.html#anc6

Re: Smart License usage is out of compliance.

MedTiti92 — Wed, 09 Nov 2022 09:25:18 GMT

Yes i logged to the portail and i see this in the portal :

Re: Smart License usage is out of compliance.

balaji.bandi — Wed, 09 Nov 2022 11:28:34 GMT

check the details it will give you more information - check your oder or purchase ?

Re: Smart License usage is out of compliance.

Aref Alsouqi — Wed, 09 Nov 2022 11:40:25 GMT

Try this please:

1) Go into the FMC CLI into expert mode

2) Type "sudo su -" and type in the password

3) Issue the command "rm /etc/sf/gch/call_home_ca"

4) Issue the command "pmtool restartbyid sla"

5) Issue the command "pmtool restartbyid CloudAgent"

6) Wait a couple of minutes and check the registration again.

Re: Smart License usage is out of compliance.

Marvin Rhoads — Wed, 09 Nov 2022 12:15:40 GMT

If you are running an older release, you need to update it to allow FMC to accept the newer certificates that Cisco has been using for some time now.

https://www.cisco.com/c/en/us/support/docs/field-notices/723/fn72332.html

Re: Smart License usage is out of compliance.

MedTiti92 — Thu, 10 Nov 2022 08:03:05 GMT

@Marvin RhoadsI'm using 6.5.0 in FMC, manage two FTD(6.3.0) ...

@Aref Alsouqi are will be some impact in the production with thoses command

Thanks !

Re: Smart License usage is out of compliance.

MedTiti92 — Thu, 10 Nov 2022 08:07:10 GMT

is it a problem of licence expired or just an update of FMC & FTD

Re: Smart License usage is out of compliance.

Aref Alsouqi — Thu, 10 Nov 2022 09:13:55 GMT

No impact AFAIK. The issue would be related to a change from Cisco side of a trusted certificate. The steps I provided should fix the issue, however, if that doesn't help please follow the instructions of the "Firepower - Manual Certificate Update" in the link @Marvin Rhoads provided. Please remember to issue the command "pmtool restartbyid CloudAgent" which is not documented on that link I think. If you don't issue this additional command you would need to wait for the FMC to trigger the synch again which I don't know how long it would take.

Re: Smart License usage is out of compliance.

Marvin Rhoads — Thu, 10 Nov 2022 13:39:25 GMT

It's (usually) not a problem of license being expired but rather the FMC not trusting the updated certificates being used by Cisco.

If you are running 6.5.0 managing 6.3.0 devices I strongly recommend you evaluate your operations as the version are quite out of date and subject to a lot of bugs and lacking features included in the more current releases.

Re: Smart License usage is out of compliance.

MedTiti92 — Mon, 28 Nov 2022 14:02:32 GMT

Thanks Guys ! like @Marvin Rhoads said, it is about FMC not trusting certificates being used by Cisco ..

Re: Smart License usage is out of compliance.

CiscoBrownBelt — Thu, 09 Mar 2023 13:07:58 GMT

Are you saying log into Smart license portal?

Re: Smart License usage is out of compliance.

Marvin Rhoads — Thu, 09 Mar 2023 13:14:01 GMT

@CiscoBrownBelt give us some context to your question or start a new thread.

Re: Smart License usage is out of compliance.

MSJ1 — Tue, 12 Dec 2023 03:39:38 GMT

@Aref Alsouqi @marvin

I have exact same issue for an FMC but my version is 7.0.2. Have you seen similar issue for 7.0.2 FMC ?

Re: Smart License usage is out of compliance.

Aref Alsouqi — Tue, 12 Dec 2023 10:14:05 GMT

Did you try the above suggested steps and they didn't work?

Re: Smart License usage is out of compliance.

MSJ1 — Wed, 13 Dec 2023 20:05:47 GMT

@Aref Alsouqi

I did not try this as version is more than 6.5 since was thinking version wise it not affect. Do you think is a worth try , I still have the Expired Root CA in the Trusted CA store of FMC.

Re: Smart License usage is out of compliance.

itninjas — Mon, 19 Feb 2024 11:37:42 GMT

Is there any other way to update FMC end certificate except from updating full FMC (and devices) to new version? One and only reason is that we use Cisco User Agent which will disappear after update as Identity source (Support for Cisco Firepower User Agent is deprecated and will be removed in a future release) , which is our AD. And we would not like to buy ICE just for this.

Re: Smart License usage is out of compliance.

Marvin Rhoads — Mon, 19 Feb 2024 12:22:11 GMT

@itninjas yes - please read the field notice link I provided on 11/09/2022. It has a section specifically titled "Firepower - Manual Certificate Update".

Re: Smart License usage is out of compliance.

itninjas — Mon, 19 Feb 2024 13:11:19 GMT

Thank you for your quick response!

I did manual cert update for FMC. In document you refer it is under Firepower - Manual Certificate Update. I did backed up old cert and pasted new one you provided. Afterward I run command pmtool restartbyid sla

Sadly, still I have same issue.

Is there any other suggestion to try? Except of calling support...

Thank you!

Re: Smart License usage is out of compliance.

Marvin Rhoads — Mon, 19 Feb 2024 13:24:05 GMT

Please try the steps listed under "Verify HTTPS (TCP 443) access from FMC to tools.cisco.com" in this document: https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/215838-fmc-and-ftd-smart-license-registration-a.html#anc4