PDF(748.0 KB) View with Adobe Reader on a variety of devices
ePub(750.4 KB) View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
Mobi (Kindle)(610.5 KB) View on Kindle device or Kindle app on multiple devices
Updated:February 5, 2020
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This document describes step-by-step instructions to register a Firepower Chassis Manager (FCM) on Firepower 4100/9300 platforms to a Smart Software Manager (SSM) On-Prem.
Contributed by Tomasz Kmiec, Cisco TAC Engineer.
Cisco recommends that you have knowledge of these topics:
Firepower Chassis ManageronFirepower 4100/9300 series
Smart Software Manager On-Prem
Smart licensing model for Firepower products
The information in this document is based on these software/hardware versions:
Firepower Chassis Manager 2.7(1.92)
Smart Software Manager On-Prem 7
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any step.
Cisco Smart Software Manager On-Prem (formerly known as Cisco Smart Software Manager satellite) is a component of Cisco Smart Licensing that works in conjunction with Cisco Smart Software Manager. It offers near real-time visibility and reporting of the Cisco licenses you purchase and consume, while giving security-sensitive organizations a way to access a subset of Cisco SSM functionality without using a direct internet connection to manage their install base.
Once you have Smart Software Manager On-Prem registered to your smart account, follow these steps to register it on the FCM.
Step 1. On the FCM, navigate to System > Licensing > Call Home, edit and save the call home settings using the address:
https://[FQDN of On-Prem server]/Transportgateway/services/DeviceRequestHandler
The FQDN of On-Prem server must match the Host Common Name configured on the SSM.
To check the configured Host Common Name on the SSM On-Prem 7, log into the SSM Administration workspace and navigate to Security tab.
Tip: SSM Host Common Name can be also verified using OpenSSL tool command openssl s_client -connect [OnPrem server IP]:443
MCPrT:~ user$ openssl s_client -connect10.48.23.171:443
depth=2 O = Cisco, CN = Cisco Licensing Root CA
verify error:num=19:self signed certificate in certificate chain
i:/C=US/O=Cisco/CN=TG SSL CA
1 s:/C=US/O=Cisco/CN=TG SSL CA
i:/O=Cisco/CN=Cisco Licensing Root CA
2 s:/O=Cisco/CN=Cisco Licensing Root CA
i:/O=Cisco/CN=Cisco Licensing Root CA
Note: In case of Host Common Name change via SSM GUI, synchronize SSM with the OnPrem Account on the Cisco Licensing page using one of the 2 synchronization options: 1. On-Demand Online: assumes there is an Internet connection and is done via Full Synchronization Now.. 2. On-Demand Manual: is done via Manual Synchronization > Full Synchronization
Ensure that FQDN is resolved by the DNS server configured on the FCM.
Tip: SSM rechability can be checked on the FCM CLI from the local-mgmt level
FPR4110# connect local-mgmt FPR4110(local-mgmt)# ping CiscoSat7.cscotaclab.com
PING CiscoSat7.cscotaclab.com (10.48.23.171) from 10.62.148.38 eth0: 56(84) bytes of data.
64 bytes from 10.48.23.171: icmp_seq=1 ttl=53 time=47.9 ms
64 bytes from 10.48.23.171: icmp_seq=2 ttl=53 time=47.9 ms
Step 2. Log in to the SSM On-Prem 7 Licensing workspace and navigate to Smart Licensing > Inventory > General.
Step 3. Select New Token to generate a token.
Step 4. Enter description, expiration time for a token and select Create Token.
Step 5. Copy the token to the clipboard.
Step 6. Navigate to FCM System > Licensing > Smart License, paste the token and select Register.
The license status can be confirmed when you navigate to System > Licensing > Smart License or run the command show license techsupport on the FCM CLI:
FPR4110# show license techsupport
Smart Licensing Tech Support info
Smart Licensing Status
Smart Licensing is ENABLED
Smart Account: _satellite_server
Virtual Account: Default
Export-Controlled Functionality: ALLOWED
Initial Registration: SUCCEEDED on Feb 03 2020 20:50:39 CET
Last Renewal Attempt: None
Next Renewal Attempt: Aug 01 2020 21:50:39 CEST
Registration Expires: Nov 02 2020 09:37:25 CET
Status: AUTHORIZED on Feb 03 2020 20:50:44 CET
Last Communication Attempt: SUCCEEDED on Feb 03 2020 20:50:44 CET
Next Communication Attempt: Mar 04 2020 20:50:44 CET
Communication Deadline: May 03 2020 21:47:43 CEST [...]