ASA OS Upgrade and Licenses

[JeromeTechie1]

Hi everyone,

Say i got a 5505 or a 5510 with a security + license. Now let's assume that there is an 8.2 OS version that i want to upgrade to 9.x. Is it going to kill my security + License? If yes is it lost for good or can I get a new key for 0$?

I am not very familiar with the licensing yet so thanks for the your time.

[Jouni Forss · Accepted solution]

Hi,

Here is a link to the Licenses available to the ASA5505 and ASA5510

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80402e36.html

I can't see that the software upgrade would have any change to those licenses. (to my knowledge atleast)

Most common problem related to the software upgrade might be the amount of memory on your ASA unit.

Check this link for the memory requirements of different Licenses

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_bulletin_c25-586414.html

- Jouni

[JeromeTechie1]

aight thank you very much i was rly unsure after reading this

http://www.gomjabbar.com/2011/07/17/recovering-a-license-activation-key-for-the-cisco-asa/

but it made non sense hence why i wanted confirmation

thanks a lot for the links and the quick answer

[Jouni Forss]

Hi,

After a quick read it seems to deal mostly about the event when you ERASE flash. Ofcourse when you upgrade the ASA software you DONT NEED to do this or YOU SHOULD NOT DO THIS.

You simply copy the new software to the flash from some host connected to the ASA using TFTP.

In the case where the ASA Flash memory is full and cant fit the new software image you have to delete files from the Flash

Command format for that should be

delete flash:/.bin

Before doing the above you should probably consider copying the files you are about to remove (possibly) to TFTP server

copy flash:/.bin tftp://x.x.x.x/.bin

So if you make some mistakes you will still have the softwares somewhere. Though atleast in my own case I have never had the need to revert back to an old software.

Most of the time old Software images or ASDM images take the most space. I usually have 1-2 image files of both on the Flash at the same time (Images/.bin files of ASDM and ASA software)

- Jouni

[JeromeTechie1]

yep i go tthat much as well, just got confused on this one

"Even after you load a new boot image, the ASA will report that the license key is not valid during boot up (you can also check with a

show version.) Some of the original features will be disabled until you install the correct license key"

so even if i had a fair idea its much better to have confirmation from someone who is actually sure :>

Thanks again

[Jouni Forss]

Hi,

I think that refers to the situation where you have completely erased the flash (which naturally removes all your software images) and then again load the software image back to the empty flash that the ASA wont simply work as licensing information is also lost.

I have never run into such situation (but do know people that have )

Which again makes me doubt if I ran into this situation. I'd imagine that in this case if you had backed up the "activation-key" shown in the "show version" BEFORE the erasing of the Flash memory that you should be able to enter it again after you have recovered the software to the Flash and booted the device. (As the activation-key is for that ASA serial number)

- Jouni