ISR4221 Licensing Issues

[JonWA-IT]

We have just recently purchased a Cisco ISR4221 Sec/K9. Now are in the beginning stages of configuration and need to activate the securityk9 license so that we can use IPSEC Tunnel but for cannot find how to activate it. Show License Detail Shows 

Index: 4 Feature: securityk9 Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: Non-Counted
License Priority: Medium
Store Index: 0
Store Name: Primary License Storage

The trick is how to do we make it in use I can find no command to do so to change it from from the ipbasek9  in use.

Thank you for any advise.

[balaji.bandi]

Can you post :

#show license feature

check the license install guide :

https://www.cisco.com/c/en/us/td/docs/routers/access/4400/software/configuration/guide/isr4400swcfg/bm_isr_4400_sw_config_guide_chapter_0101.html#concept_01F7CF6D7A7C46D7AC809398F872FA09

[JonWA-IT]

Thank you have looked at that numerous times. However when I do the Show License Feature this is what I see.

Feature name Enforcement Evaluation Subscription Enabled RightToUse
appxk9 yes yes no no yes
securityk9_npe yes yes no no yes
ipbasek9 no no no yes no
FoundationSuiteK9_npe yes yes no no yes
throughput yes yes no no yes
internal_service yes no no no no

For some reason it doesn't show the securityk9 license but it shows the license securityk9_NPE 

Is that the same thing? It looks like that is for No Payload Encryption which Is not what I would need as the point is to have encrypted packets. Does this mean I Was sold the wrong device or the wrong license?

Thanks for any help.

[JonWA-IT]

Also this is what is displayed for licensing on the Show Version Command.

Suite License Information for Module:'esg'

--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------
FoundationSuiteK9_npe None None None
securityk9_npe
appxk9

Technology Package License Information:

-----------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------
appxk9 None None None
securityk9 None None None
ipbase ipbasek9 Permanent ipbasek9

[Richard Burts]

This is your major issue

securityk9_npe yes yes no no yes

npe means no payload encryption. This will prevent being able to configure ipsec tunnels. You will need an image (and perhaps a license) that supports payload encryption.

HTH

Rick