10-15-2021 12:13 AM
hello
I have two ASA 5585-X in an Active/Standby failover.I tried to install the 10GE license on both units. I am getting the below error.
SHZF-DBFW-5585X-01# activation-key d81ace61 1838c7b5 7870a944 85949800 c73b0680
Validating activation key. This may take a few minutes...
The following features available in running permanent activation key are NOT
available in new permanent activation key:
Encryption-3DES-AES
WARNING: The running activation key was not updated with the requested key.
Proceed with update flash activation key? [confirm]
The flash permanent activation key was updated with the requested key,
and will become active after the next reload.
SHZF-DBFW-5585X-01#
SHZF-DBFW-5585X-01# wr
after I reload the units, the license is not wok
SHZF-DBFW-5585X-01# show version
Cisco Adaptive Security Appliance Software Version 9.1(6)
Device Manager Version 7.12(1)
Compiled on Fri 27-Feb-15 14:30 PST by builders
System image file is "disk0:/asa916-smp-k8.bin"
Config file at boot was "startup-config"
SHZF-DBFW-5585X-01 up 2 mins 21 secs
failover cluster up 4 mins 35 secs
Hardware: ASA5585-SSP-10, 6144 MB RAM, CPU Xeon 5500 series 2000 MHz, 1 CPU (4 cores)
Internal ATA Compact Flash, 2048MB
BIOS Flash S25FL032P @ 0x0, 4096KB
Encryption hardware device : Cisco ASA-5585 on-board accelerator (revision 0x1)
Boot microcode : CNPx-MC-BOOT-2.00
SSL/IKE microcode : CNPx-MC-SSL-PLUS-T020
IPSec microcode : CNPx-MC-IPSEC-MAIN-0026
Number of accelerators: 1
Programmable device : Cisco CPLD revision 0x8
0: Int: Internal-Data0/0 : address is 0000.0001.0001, irq 5
2: Int: Internal-Data0/1 : address is 0000.0001.0002, irq 10
3: Ext: Management0/0 : address is 0027.e373.2a44, irq 10
4: Ext: Management0/1 : address is 0027.e373.2a45, irq 5
16: Ext: GigabitEthernet0/0 : address is 0027.e373.2a46, irq 255
17: Ext: GigabitEthernet0/1 : address is 0027.e373.2a47, irq 255
18: Ext: GigabitEthernet0/2 : address is 0027.e373.2a48, irq 255
19: Ext: GigabitEthernet0/3 : address is 0027.e373.2a49, irq 255
20: Ext: GigabitEthernet0/4 : address is 0027.e373.2a4a, irq 255
21: Ext: GigabitEthernet0/5 : address is 0027.e373.2a4b, irq 255
22: Ext: GigabitEthernet0/6 : address is 0027.e373.2a4c, irq 255
23: Ext: GigabitEthernet0/7 : address is 0027.e373.2a4d, irq 255
24: Ext: TenGigabitEthernet0/8: address is 0027.e373.2a4e, irq 255
25: Ext: TenGigabitEthernet0/9: address is 0027.e373.2a4f, irq 255
26: Int: Internal-Data0/2 : address is 0000.0100.001b, irq 255
27: Int: Internal-Data0/3 : address is 0000.0100.001c, irq 255
28: Int: Not used : irq 255
29: Int: Not used : irq 255
30: Int: Not used : irq 255
31: Int: Not used : irq 255
32: Int: Not used : irq 255
33: Int: Not used : irq 255
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Disabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
10GE I/O : Disabled perpetual
Cluster : Disabled perpetual
This platform has an ASA5585-SSP-10 VPN Premium license.
Failover cluster licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 4 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 4 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 4 perpetual
Total UC Proxy Sessions : 4 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
10GE I/O : Disabled perpetual
Cluster : Disabled perpetual
This platform has an ASA5585-SSP-10 VPN Premium license.
Serial Number: JAD213400B2
Running Permanent Activation Key: 0xd81ace61 0x1838c7b5 0x7870a944 0x85949800 0xc73b0680
Configuration register is 0x1
Configuration last modified by enable_1 at 22:43:31.032 bjt Thu Oct 14 2021
SHZF-DBFW-5585X-01# $
SHZF-DBFW-5585X-01#
SHZF-DBFW-5585X-01# show version
Cisco Adaptive Security Appliance Software Version 9.1(6)
Device Manager Version 7.12(1)
Compiled on Fri 27-Feb-15 14:30 PST by builders
System image file is "disk0:/asa916-smp-k8.bin"
Config file at boot was "startup-config"
SHZF-DBFW-5585X-01 up 2 mins 31 secs
failover cluster up 4 mins 45 secs
Hardware: ASA5585-SSP-10, 6144 MB RAM, CPU Xeon 5500 series 2000 MHz, 1 CPU (4 cores)
Internal ATA Compact Flash, 2048MB
BIOS Flash S25FL032P @ 0x0, 4096KB
Encryption hardware device : Cisco ASA-5585 on-board accelerator (revision 0x1)
Boot microcode : CNPx-MC-BOOT-2.00
SSL/IKE microcode : CNPx-MC-SSL-PLUS-T020
IPSec microcode : CNPx-MC-IPSEC-MAIN-0026
Number of accelerators: 1
Programmable device : Cisco CPLD revision 0x8
0: Int: Internal-Data0/0 : address is 0000.0001.0001, irq 5
2: Int: Internal-Data0/1 : address is 0000.0001.0002, irq 10
3: Ext: Management0/0 : address is 0027.e373.2a44, irq 10
4: Ext: Management0/1 : address is 0027.e373.2a45, irq 5
16: Ext: GigabitEthernet0/0 : address is 0027.e373.2a46, irq 255
17: Ext: GigabitEthernet0/1 : address is 0027.e373.2a47, irq 255
18: Ext: GigabitEthernet0/2 : address is 0027.e373.2a48, irq 255
19: Ext: GigabitEthernet0/3 : address is 0027.e373.2a49, irq 255
20: Ext: GigabitEthernet0/4 : address is 0027.e373.2a4a, irq 255
21: Ext: GigabitEthernet0/5 : address is 0027.e373.2a4b, irq 255
22: Ext: GigabitEthernet0/6 : address is 0027.e373.2a4c, irq 255
23: Ext: GigabitEthernet0/7 : address is 0027.e373.2a4d, irq 255
24: Ext: TenGigabitEthernet0/8: address is 0027.e373.2a4e, irq 255
25: Ext: TenGigabitEthernet0/9: address is 0027.e373.2a4f, irq 255
26: Int: Internal-Data0/2 : address is 0000.0100.001b, irq 255
27: Int: Internal-Data0/3 : address is 0000.0100.001c, irq 255
28: Int: Not used : irq 255
29: Int: Not used : irq 255
30: Int: Not used : irq 255
31: Int: Not used : irq 255
32: Int: Not used : irq 255
33: Int: Not used : irq 255
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Disabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
10GE I/O : Disabled perpetual
Cluster : Disabled perpetual
This platform has an ASA5585-SSP-10 VPN Premium license.
Failover cluster licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 1024 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 4 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 4 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 5000 perpetual
Total VPN Peers : 5000 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 4 perpetual
Total UC Proxy Sessions : 4 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
10GE I/O : Disabled perpetual
Cluster : Disabled perpetual
This platform has an ASA5585-SSP-10 VPN Premium license.
Serial Number: JAD213400B2
Running Permanent Activation Key: 0xd81ace61 0x1838c7b5 0x7870a944 0x85949800 0xc73b0680
Configuration register is 0x1
Configuration last modified by enable_1 at 22:43:31.032 bjt Thu Oct 14 2021
SHZF-DBFW-5585X-01# $
Please let me know if you have further questions.
Solved! Go to Solution.
10-18-2021 08:38 PM
Thank you for your reply
The license on the secondary ASA is installed,The only primary ASA is not installede,But the both units is installed befor I install the 10GE license.
I will to try installing the strong encryption license
10-15-2021 01:27 AM
What was your source for the activation key?
10-17-2021 07:24 AM
the activation key is ok, it was given by Cisco license team
10-16-2021 12:24 AM
Have you tried installing / re-installing the strong encryption license? It is free and can be retrieved from the Cisco licensing portal.
10-17-2021 07:41 AM
Thank you for reply
The strong encryption license have been enabled
Do I remove the license befor i re-install it, and how do i remove it?
10-18-2021 02:09 AM
For the host you are running the show version command on, the strong encryption license is not installed:
Encryption-3DES-AES : Disabled perpetual
So you would just need to install the strong encryption license on that one. Have you checked the license on the secondary ASA?
10-18-2021 08:38 PM
Thank you for your reply
The license on the secondary ASA is installed,The only primary ASA is not installede,But the both units is installed befor I install the 10GE license.
I will to try installing the strong encryption license
10-19-2021 02:14 PM
The post is marked as solved. Could you please provide us with the solution.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide