topic Re: Have Problem to enable Export-Controlled Features in Firepower2100 in Network Security

Have Problem to enable Export-Controlled Features in Firepower2100

MedTiti92 — Tue, 18 Feb 2020 12:37:27 GMT

I Have firepower2100 with smart licence activated. I would like use VPN remote access, my problem is Export-Controlled Features is disabled. I opened case in cisco team, they recommded me to use 3DES-AES license .. I have Two question :

1-i just have this "3DES-AES license" only in my virtual account(see screenshot below), but not in my FMC (see screenshot below), how i can import to my FMC for used them after ?

2-if i do De-register Firepower Management center from Cisco smart software Manager, there is a impact in my production system ?

Re: Have Problem to enable Export-Controlled Features in Firepower2100

Marius Gunnerud — Tue, 18 Feb 2020 22:54:20 GMT

As far as I know, the FTD does not require the strong encryption license, that is only for the ASA software.

You can deregister you FMC from smart licensing without any impact on production. Licensing is only done on the FMC and not on the FTDs themselves. The only issue is that while the FMC is not registered you will not be able to perform any changes until it is registered again.

Re: Have Problem to enable Export-Controlled Features in Firepower2100

MedTiti92 — Wed, 19 Feb 2020 14:57:49 GMT

I think it is necessary using strong encryption when you want to use Anyconnect VPN, that's mean have "Export-Controlled Features" firstly enabled.

Thanks for your reply. I wait.

Re: Have Problem to enable Export-Controlled Features in Firepower2100

Marius Gunnerud — Thu, 20 Feb 2020 21:43:39 GMT

You need to contact your Cisco representative if you want to enable the export-controlled functionality option.

If Export-Controlled Features shows Disabled and you want to use features that require strong encryption:

There are two ways to enable strong cryptographic features. Your organization may be eligible for one or the other (or neither), but not both.

If there is no option to enable export-controlled functionality when you generate a new Product Instance Registration Token in Cisco Smart Software Manager (CSSM):

Contact your account representative.

The Firepower Management Center allows you to use export-controlled features if your Smart Account is eligible for export-controlled functionality. When approved by Cisco, an export control license is added to your virtual account and you can use the export-controlled features. For more information, see Enabling the Export Control Feature (for Accounts Without Global Permission)

reference: https://www.cisco.com/c/en/us/td/docs/security/firepower/630/configuration/guide/fpmc-config-guide-v63/licensing_the_firepower_system.html#id_81552

Re: Have Problem to enable Export-Controlled Features in Firepower2100

MedTiti92 — Sun, 23 Feb 2020 14:09:52 GMT

I contact them, they give me a equivalent of strong encryption like 3DES series Asa ....

I don't know how to use them !

Re: Have Problem to enable Export-Controlled Features in Firepower2100

Marius Gunnerud — Sun, 23 Feb 2020 20:13:59 GMT

Looks like you have been issued the wrong license.

L-F9K-ASA-ENCR-K9(=) (for the Cisco Firepower 9300), L-FPR4K-ENC-K9(=) (for Cisco Firepower 4100 Series models), L-FPR2K-ENC-K9(=) (for the Cisco Firepower 2100 Series models) or L-FPR1K-ENC-K9(=) (for Cisco Firepower 1000 Series models): This license provides for strong encryption (K9) on the platform

reference: https://www.cisco.com/c/en/us/products/collateral/security/firepower-8000-series-appliances/guide-c07-737902.html

Re: Have Problem to enable Export-Controlled Features in Firepower2100

MedTiti92 — Mon, 24 Feb 2020 08:56:23 GMT

I can't open your URL link ... ==403 - Forbidden Page or Application !

i have this licence FPR2K-NWFL-K9(=) as licence in my smart acoount !

Re: Have Problem to enable Export-Controlled Features in Firepower2100

Marius Gunnerud — Mon, 24 Feb 2020 09:30:18 GMT

L-FPR2K-ENC-K9(=) is the license you need for strong encryption

Re: Have Problem to enable Export-Controlled Features in Firepower2100

MedTiti92 — Wed, 26 Feb 2020 07:23:03 GMT

Yes exactly, I have this license L-FPR2K-ENC-K9(=) in my virtual smart account, but not in my FMC?

How can I insert it in my FMC ?

Re: Have Problem to enable Export-Controlled Features in Firepower2100

Marius Gunnerud — Thu, 27 Feb 2020 19:20:53 GMT

You need to first contact your Cisco partner and request them to enable "export controlled features" for you smart licensing account.

Re: Have Problem to enable Export-Controlled Features in Firepower2100

MedTiti92 — Sun, 01 Mar 2020 08:44:51 GMT

Hi Marius !

Yeah exactly, i contact them, the rigth licence that i must to have in my Smart Account is FMC-ENC-K9.

Thank you for your support and repplies !

Re: Have Problem to enable Export-Controlled Features in Firepower2100

techdata — Tue, 02 Jun 2020 20:33:24 GMT

L-FPR2K-ENC-K9= is not use in FMC. The license is for the firewall to enable strong encryption. If the license comes up in you SMART account you should be able to download the license if you login credentials have the correct access rights.

Re: Have Problem to enable Export-Controlled Features in Firepower2100

freddy-bautista — Mon, 27 Oct 2025 18:35:41 GMT

Hello, I have the same problem. The customer requires me to enable the “Export Controller” permanently in their Smart Account. We carried out this process with the TAC licensing team, but it was only enabled temporarily.

However, as a partner, I do not know the process for enabling the “Export Controller” permanently.

Please can you help me with how to carry out this process?

Re: Have Problem to enable Export-Controlled Features in Firepower2100

Marius Gunnerud — Thu, 30 Oct 2025 11:03:02 GMT

If I remember correctly, enabling the Export Controller is done when associating the smart license to the FMC. So, I believe you would need to unregister the FMC from smart licensing and then register it again and remember to select the Export Controller during registration. it has been a while since I have had to do this, so I am not sure if there have been any "improvements" to allow the enabling of this after the controller has already been registered to smart licensing.