How to Upgrade a License from a Single to Triple Data Encryption Standard/Advanced Encryption Standard (3DES/AES) for Adaptive Security Appliance (ASA)

Introduction

The article describes the process of upgrading a license from a single to triple data encryption standard/advanced encryption standard (3DES/AES) for Adaptive Security Appliance (ASA). A 3DES/AES license, otherwise known as a K9 license, is required for strong encryption. If you do not have a K9 license, decryption processing with a server that requires strong encryption fails. Any flow that requires decryption that the device cannot perform is denied regardless of access policies. Although the K9 license is free, its availability is limited by export restrictions.

Prerequisites

Before you start, ensure that:

• You have the following data at your disposal:
  • Active Cisco.com account
  • ASA serial number (from chassis or printed circuit board (PCB) - also known as motherboard)

Upgrading a License from a Single to Triple Data Encryption Standard/Advanced Encryption Standard (3DES/AES) for Adaptive Security Appliance (ASA)

Step 1: 

Go to Cisco Software Central and log in with your Cisco.com account.

Step 2:

In the Traditional Licenses section, click Access LRP.

Step 3:

From the Get Licenses drop-down list, select IPS, Crypto, other.

Step result: The system displays the Request Crypto, IPS and Other Licenses dialog box.

Step 4:

In the Request Crypto, IPS and Other Licenses dialog box, from the Product Family list select Security Products, and from the Product list select Cisco ASA 3DES/AES License. Click Next.

Step 5:

On the Specify Target and Options tab, in the Serial Number field enter the serial number. If you have a Smart Account, select your Virtual Account from the drop-down list. Click Next.

Step 6:

On the Review and Submit tab, in the Recipient and Owner Information section, enter your email address and username. Click Submit.

Step 7:

Obtain your Cisco software license key by clicking Download in the License Request Status dialog box. You should also receive the Cisco software license key to your email within an hour from submitting the License Agreement. After downloading your Cisco software license key, you can close the window.

Caution: Since the email is sent from do-not-reply@cisco.com, ensure that you check your junk email folder.

Troubleshooting

If you experience an issue during the process of upgrading your license, open a case in Support Case Manager (SCM).

Next Steps

After you receive a license key file, refer to the product configuration guide for license installation and guidance.