Smart License usage is out of compliance | FMC 6.4.0.10

[mbarada]

Hello,

I came across some similar threads and none seem to solve this problem.

We are facing the below error on FMC 6.4.0.10 since almost 2 months ago:

Here are the expired Cisco AnyConnect Apex licenses shown in the Smart Account, although we are neither using any Apex feature/license on FMC and FTD, nor RA VPN. Instead, AnyConnect and ISE are used for RA VPN on another ASA device, which is not managed by/related to this FMC:

This does not seem to be an SSL certificate problem because I compared the current certificate in "/etc/sf/gch/call_home_ca" with the one mentioned in the below Field Notice and they are identical:

https://www.cisco.com/c/en/us/support/docs/field-notices/721/fn72103.html

System -> Licenses -> Smart Licenses is showing the below and pressing the "Re-Authorize" button is not solving the issue:

Based on the above, is it just a bug or something that could be ignored? Since we are planning to upgrade this FMC (and 2 FTDs) to version 7.0.5 soon.

Any hint on how to solve/eliminate this critical health error would be appreciated.

[mbarada]

Additional information:

Devices -> Device Management -> Summary is showing the below, but I am not sure why it is set like that since no RA VPN or Site to Site VPN are used on this device:

So not sure why/when the AnyConnect Apex license has been used on this device.

Please advise.

[Mohammed al Baqari · Accepted solution]

Hi,

Its because your FTD has an AnyConnect Apex license enabled. If you don't
have anyconnect configured, just disable the lic. Then try to deploy to
your FTD, if there is any related config to the license, the deployment
will fail and you will get an error. If no dependent config, the deployment
will go successfully.

On a side note, 6.4 is eol for a while.

**** please remember to rate useful posts

[Marvin Rhoads]

Like @Mohammed al Baqari said - edit the device license screen and disable AnyConnect Apex.

That will stop FMC from trying to check out an unavailable license (valid SSL certificate to tools.cisco.com notwithstanding) and should clear up the health alert.

[mbarada]

@Mohammed al Baqari and @Marvin Rhoads disabling the license (after making sure it is not being used) solved the issue.

@MHM Cisco World the FMC licenses were already registered.

Thank you all.

[MHM Cisco World]

I know little but I think you not register the license through FMC 
https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/215838-fmc-and-ftd-smart-license-registration-a.html