ASA5555 with Firepower Service error

[cuongnp]

Hi guys,

I have an error as pictures below and I do not know why and how to fix it.

I appreciate if there is any help from all of you.

for more details:

- The error occurs on Standby device, the Master work properly.

- There is no log of this error.

If you need more info, please let me know.

thanks a lot.

CuongNP.

[Marvin Rhoads]

For an ASA HA pair, the primary and standby units' Firepower service modules must each be configured separately to be locally managed (i.e. by ASDM as is implied by your screenshot) or registered to FMC. 

Please log into the cli of the standby device and share the output of:

show module sfr detail

[cuongnp]

Here is information you ask

 

[Marvin Rhoads]

Hmm. that looks OK.Have you installed the Control license?

Is it possible to switch the associated ASA to active role and check it in ASDM after doing that?

[cuongnp]

"Is it possible to switch the associated ASA to active role and check it in ASDM after doing that?"

-> yes, it is. but the new active one still have same error.

Please take a look at pictures below for the license and version info.

[Marvin Rhoads]

The version information you shared is all about the parent ASA. The issue is on the Firepower service module.

What about the answer regarding "Have you installed the Control license?"

[cuongnp]

Can you please send me the guide document how to install it? As I know it is perpetual license come along with the device, right?

[Marvin Rhoads · Accepted solution]

The control license is a free license that should come as a PAK printed on a cardboard insert with the new ASA with Firepower service module (or when separately ordered). It is perpetual.

You go the the Licenses section of the ASDM Firepower Configuration tab and get a License key there. You then use in with the PAK at software.cisco.com to get a license file (.lic) which you open in a text editor to put into ASDM and license the module.

[cuongnp]

Much appreciated.