topic I'm not talking about ASA OS in Network Security

Finding License Private key

AliYashar Ladani — Tue, 12 Mar 2019 05:09:25 GMT

Hello Dear Group

I have an ASA5525, I need to renew the license that has been registered for Anyconnect VPN clients, but I forgot the private key that I have used for license registration. is there any solution to retrieving the private key because this key must be saved somewhere in Firewall.

Thank You

AliYashar

I'm not understanding what

Marvin Rhoads — Sat, 29 Nov 2014 16:14:33 GMT

I'm not understanding what you mean by "renew the license". The most commonly used AnyConnect Essentials and AnyConnect Premium licenses are not time-based and never need to be renewed.

If you have time-based licenses ("VPN Flex") they are re-purchased when expired (if necessary) and require you to request a new activation-key once you get the Product Authorization Key (PAK) from Cisco as part of your purchase. The PAK is combined with your product serial number in the Cisco licensing portal to get a new license (delivered in the form of an activation-key) in that case.

I'm not talking about ASA OS

AliYashar Ladani — Sat, 29 Nov 2014 17:25:24 GMT

Thank you for replying,

The SSL License private key (I have entered when I created CSR) I mean.

sorry if I didn't mention in my question 🙂

The private key is not a

Marvin Rhoads — Sat, 29 Nov 2014 17:50:48 GMT

The private key is not a license. It's an element of the ASA configuration used for certificates.

If you need to renew your certificate (for SSL VPN or other purpose), you create a new Certificate Signing Request (CSR) and install the certificate you receive from the Certificate Authority (CA) following this procedure.

The private key (which is used to sign the CSR) is viewable via "show crypto key mypubkey rsa" command; although that's not needed when renewing an SSL certificate.

You cannot backup or export the private key by itself but you can export the keypair (private key and associated identity certificate) in pkcs12 format using the "crypto ca export" command (or backup menu choice in ASDM and select identity certificates)

Yes, you are right I created

AliYashar Ladani — Sat, 29 Nov 2014 18:05:27 GMT

Yes, you are right

I created a new CSR and I can re-install the new CA after reissuing.

Thank You