ISE license - portability to VM based deployment

[dngore]

Hi,

Customer has ISE device administration license for appliance SNS-3515-ACS-K9. They want to use it for VM based ISE application. 

Is it possible to convert it for VM based deployment?

And second query is: can it be make device free license means same can be used for different VMs, one at a time? I believe smart license should allow it.

Kindly verify the same.

[Jason Kunst · Accepted solution]

Base plus apex and device admin are not applied to a vm or appliance. They are applied on the whole deployment when added to the admin node

When you add the license it authorizes the deployment to use it

If you have 1 license for deployment then it would be consumed by the PSN running the service. If you have 2 psn with device admin enabled then you would need 2 licenses

Not sure of your portability question with smart licensing. No it can’t move around as it’s consumed per service running on PSN. You would need to turn off the service to use it somewhere else and frankly don’t recommend doing this as likely not tested scenario. We assume you leave it on and not switch it around

Please buy the needed licenses for high availability and use minimum of 2 psn

[dngore]

Thx for reply Jason.

When you order base license from PAK key, then you need to give node details like Product Identifier (PID), Version Identifier (VID), and Serial Number (SN). 

License is bind to primary and secondary PAN appliances. 

Can we change that node info (PID, VID and SN) to VM based ISE for given base license? So that base license will be applicable to VM based ISE deployment.

I believe it should be possible by using re-hosting option.

Kindly correct my understanding.

[Jason Kunst]

Yes you can rehost the licenses from appliance to Vm or VM to VM
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_0101.html#concept_E664BCA9F4164C7F8DE590B7C2C4AD99
HTH