Cisco 1111 ISR - crypto map / IPsec tunnel

[Beaker Bunsen]

It is my understanding that I need a certain license on my Cisco 1111 ISR to build a crypto / IPsec tunnel. Any idea which license that is?

And, if I enable the evaluation / right to use of that license, what happens if it expires? Will the crypto / IPsec configs go away as well?

Any assistance is appreciated. Thank you.

[MHM Cisco World]

check this link 
https://community.cisco.com/t5/network-management/asr-1000-x-series-licenses/td-p/2853735