ASAv unlicensed after reboot

[JoshGreen07630]

Hi all,

I recently upgraded one of our ASAv's to code 9.12.4-10 as an interim code, just to keep a customers appliance up to date.

Upon reboot, the device was alerting as unlicensed and therefore ran at a rate limit of 100kps and with (i think) up to 100 connections permitted. In our smart licensing portal, the appliance was still registered but a 'show license all' on the ASAv showed it was unregistered. I applied a fix by removing the license off of the appliance and re-registering it with a brand new token.

Is this expected behavior or can someone perhaps advise if they've had something similar? I'm trying to write a root cause document for the customer but i'm a little reluctant to put it down to a bug considering they've just been upgraded (albeit is likely a bug). I also can't find anything on google or on here that provides a technical reason.

Thanks.

[balaji.bandi]

You need to go with cisco smart License and register.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/general/asa-98-general-config/intro-license-smart.html#task_03242D29B58D4DB9B95F4F844973CE2E

[Marvin Rhoads]

It's not expected behavior. I've upgraded ASAv appliances several times and never had one come back from reload as unlicensed.

I could see it being a transient state - lasting no more than 10-20 minutes while things "settle down" after the reload.. How long did you wait before deciding to manually re-register it?

[JoshGreen07630]

Hi Marvin,

Probably about that period of time to be honest. It looks like from Dinesh's comments I may of walked straight into a bug. D'oh!

[Dinesh Moudgil · Accepted solution]

Hi Josh,

This could potentially be

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvw33987

9.12(4.10) is one of the known affected release.

Thank you,

Dinesh Moudgil

P.S. Please rate helpful posts.

[balaji.bandi]

thanks for the input, that what is the suggest re-regsiter to fix issue ?

[Dinesh Moudgil]

Hi Balaji,

Essentially registering the device again (‘force’ option) with a token.

Command: license smart register idtoken id_token [force]

Thank you,

Dinesh Moudgi

[JoshGreen07630]

Hi Dinesh,

Yeah that looks about right. I couldn't find any reference to this online so thank you for pointing this out.

I'll mark this as the resolution.

Thanks again,

Josh

[Dinesh Moudgil]

Glad to help, Josh!

Thank you,

Dinesh Moudgil