WSA 12.0.3 / S19x - Unable to RENEW smart license AUTHORIZATION

[mbilgrav]

Hello, Dear fellow Networkers
Im running a larger install base of WSA's and thus incl. Smart-License - This was done 3-4 years ago, and new license are all popping up just nicely.
However I am starting to see these warning email:

The Warning message is:
You have 60 day(s) remaining to renew authorization of Smart Licenses.

Note: If Authorization expires the licenses will move to Authorization Expired state and features will stop working.
      You can renew authorization in any one of the following ways:
         -- System Administration > Smart Software Licensing > Renew Authorization Now page in the web interface

         -- license_smart > renew_auth command in the CLI

Product: Cisco S190 Web Security Appliance
Model: S190
Version: 12.0.3-007
Serial Number: REMOVED

Timestamp: 10 Jan 2023 14:58:45 +0000


I have so far been unsuccessful in both web-UI and CLI, the change the status:

f.ex:
license_smart

[]> status

Smart Licensing is : Enabled

Evaluation Period: Not In Use
Evaluation Period Remaining: 89 days 23 hours 58 minutes
Registration Status: Registered ( 06 Jan 2020 10:59 ) Registration Expires on: ( 10 Jan 2024 15:22 )
Smart Account: REMOVED
Virtual Account: DEFAULT
Last Registration Renewal Attempt Status: SUCCEEDED on 10 Jan 2023 15:27
License Authorization Status: Authorized ( 06 Jan 2020 11:16 ) Authorization Expires on: ( 10 Apr 2023 15:23 )
Last Authorization Renewal Attempt Status: SUCCEEDED on 10 Jan 2023 15:29
Product Instance Name: REMOVED
Transport Settings: Direct (https://smartreceiver.cisco.com/licservice/license)

I would expect this line to update:

License Authorization Status: Authorized ( 06 Jan 2020 11:16 ) Authorization Expires on: ( 10 Apr 2023 15:23 )

and I dont see any errors, and it looks like it ok .... or ?

[mbilgrav]

on one WSA I even tested by reregister with new Token in CSSM portal, same same - Authorization Expire date do NOT change/update

[balaji.bandi]

as per the information you are ok. check on the feature keys

[mbilgrav]

Thank you for taking your time and reply to my question.

I checked features keys and they all look fine.
however I dont understand why the "Authorization Expires on" date do not change and  I am not sure what will happend when this date arrives ?

[balaji.bandi]

you mean after this date ?  10 Apr 2023

if you renewed that will automatically updated ?

[mbilgrav]

So looking at the output:
at these two line:

License Authorization Status: Authorized ( 06 Jan 2020 11:16 ) Authorization Expires on: ( 10 Apr 2023 15:23 )
Last Authorization Renewal Attempt Status: SUCCEEDED on 10 Jan 2023 15:29

I have issued a renew_auth CLI and it was success at 10 Jan 2023 15:29 (the second line)

however the 1. line containing "Authorization Expires on:" still show the same date, as before the renew_auth was issued : ( 10 Apr 2023 15:23 )

This date doesnt change, for some reasons, so I wonder why and what happens when this date arrives ?

[mbilgrav]

i will expect the email alert of 60 days are referring to :
License Authorization Status: Authorized ( 06 Jan 2020 11:16 ) Authorization Expires on: ( 10 Apr 2023 15:23 )

but looking now that is more than 60 days .... (?)

[mbilgrav]

could it be a bug bug that the WSA sent email alert with notice of 60 days, when its actually 90 days ?

You have 60 day(s) remaining to renew authorization of Smart Licenses.

makes no sense as the date is 90 days away

[balaji.bandi]

not that aware any bugs , but if you are concerned contact TAC.

also just side note 12.X not that i am ware TAC can support, you need to go 13.X or above

[mbilgrav]

well, maybe so, but there are no version 13 for WSA, and Im on current and latest 12.5.5-008
next is 14, or upcoming 15, but that is besides this topic

[amojarra]

Hello @mbilgrav 

kindly note that : 

The license authorization is renewed automatically every 30 days. The license authorization status will expire after 90 days if the ESA/SMA/WSA does not communicate with CSSM.

also from CLI you can check smartlicense logs , to make sure Renew authorization was successfully

again from CLI >> license_smart >> summary : you can see the " License Authorization Status"

from your logs:

License Authorization Status: Authorized ( 06 Jan 2020 11:16 ) Authorization Expires on: ( 10 Apr 2023 15:23 )
Last Authorization Renewal Attempt Status: SUCCEEDED on 10 Jan 2023 15:29

it was Authorized on 10 Jan 2023 and will be valid for 90 days which will be 10 Apr 2023

06 Jan 2020  : this is the first time you moved to smart license 

and I believe this link might be helpful: 

Smart Licensing Overview and Best Practices for Cisco Email and Web Security (ESA, WSA, SMA) - Cisco

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

[mbilgrav]

I'll take it as all is actually ok .... so why are the WSA sending me email with renewal warning ?

[amojarra]

Hi 

12.0 last date of support will be 30 June 2024

End-of-Sale and End-of-Life Announcement for the Cisco Web Security Appliance AsyncOS 12.0.x - Cisco

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

[mbilgrav]

already and almost on 12.5.5 on all WSA's