Configure Specific License Reservation in FMC

Introduction

This document describes the steps for configuring Specific License Reservation (SLR) in FMC.

Prerequisites

Requirements

Cisco recommends that you have knowledge of these topics:

• Firepower Threat Defense (FTD)
• Firepower Management Center (FMC)

Components Used

• Firepower Management Center Virtual 7.4.1
• Firepower Threat Defense Virtual 7.2.5

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

Prepare FMC for SLR

• If you are currently using regular Smart Licensing, de-register the FMC before you implement Specific License Reservation.

Note: All Smart Licenses that are currently deployed to the FMC must be returned to the pool of available licenses in your account, and you can re-use them when you implement Specific License Reservation. This operation does not impact the traffic processed by FTD.

• Specific License Reservation uses the same licenses as regular Smart Licensing.

• (Recommended) If you deploy theFMCpair in a high availability configuration, you must:

  • Configure high availability before you assign licenses. If you already assigned licenses to devices on the secondaryFMC, be sure to unassign them.

    • Ensure to unassign license on the primary and secondary FMC before proceeding with specific license reservation.

Verify Smart Account Readiness to Deploy Specific License Reservation

Warning: Do not continue with this process until any problems are corrected.

Configure

Enable Specific Licensing on FMC via CLI

• Log into the FMC CLIadmin account. Enter the expertcommand to access the Linux shell.

• Execute the command to access the Specific License Reservation options: sudo manage_slr.pl

• Enable Specific License Reservation by selecting option 2. Select option 1 to verify SLR status.

• Select option 0 to exit the manage_slr utility. Type exit to exit the Linux shell.
• Refresh the FMC Web Page. Verify that you can access the Specific License Reservation page in the FMC web interface by navigating to System > Licenses > Specific Licenses.

Enter the Specific License Reservation Authorization Code into theFMC

• Generate the reservation request code by navigating to System > Licenses > Specific Licenses. Click Generate and make a note of the Reservation Request Code.

• Generate the reservation authorization code. Navigate to the Smart Software Manager.
• Navigate to Inventory > Licenses > License Reservation, Enter the code that you generated from the FMC into the Reservation Request Code box. Click Next.

• Select Reserve a specific license. Scroll down and enter the number of each platform and feature license needed for your deployment under Quantity To Reserve. Click Next.

• Click Generate Authorization Code. Download the Authorization Code in preparation for entering it into theFMC.

• Enter the authorization code in the FMC. In theFMC, click Browse  to upload the text file with the authorization code that you generated from the Smart Software Manager.

• ClickInstall.

• Verify that the Specific License Reservation  page shows the Usage Authorization status as authorized.

• Click the Reserved License tab to verify the licenses selected while generating the Authorization Code.

Assign Specific Licenses to Managed Devices

• Choose System > Licenses > Specific Licenses. Click Edit Licenses.
• Assign licenses to devices as needed, click Apply.

• Click the Assigned Licenses tab and verify that your licenses are correctly installed on each device.

Manage Specific License Reservation

• In the FMC, obtain the unique product instance identifier of this FMC, navigate to System > Licenses > Specific Licenses. 
• Make a note of the Product Instance  value.

• In the Smart Software Manager, identify the FMC to update. Navigate to the Smart Software Manager.
• Navigate to Inventory > Product Instances, Look for a product instance that hasFP  in theType  column and a generic SKU (not a hostname) in theName  column.

• Click the Name. On the page that shows the correct UUID, choose Actions > Update Reserved Licenses.

• Update the reserved licenses as needed. Click Generate Authorization Code  and download the Authorization Code  in preparation for entering it into theFMC.

• Leave theUpdate Reservation  page open. You can return to it later in this procedure.

• Update the Specific Licenses in the FMC. ChooseSystem > Licenses > Specific Licenses, clickEdit SLR  and browseto upload the newly generated authorization code.

• After successful installation of the authorization code, make a note of theConfirmation Code.
• Enter the confirmation code  in the Smart Software Manager on the Update Reservation page that is intentionally left open.

• In the FMC, verify that your licenses are reserved as you expect them.

Deactivate and Return the Specific License Reservation

If you no longer need a specific license, you must return it to your Smart Account. If you want to register your Smart Licensing account, you must disable the Specific License Reservation.

This procedure releases all license entitlements associated with the FMC back to your virtual account. After you de-register, no updates or changes on licensed features are allowed.

Warning: If you do not follow all of the steps in this procedure, the license remains in an in-use state and cannot be re-used.

• In the FMC Web interface, select System > Licenses > Specific Licenses.

• Make a note of the Return Code.

• In the Smart Software Manager, identify the FMC to update, Navigate to the Smart Software Manager.
• Navigate to Inventory > Product Instances, Look for a product instance that hasFP in theType  column and a generic SKU (not a hostname) in theName  column.
• On the page that shows the correct UUID, choose Actions > Remove. 

• Enter the reservation return code that you generated from the FMC into the Remove Product Instance  dialog box.

• The specific reserved licenses are returned to the available pool in your Smart Account and this FMC is removed from the Smart Software Manager Product Instances list.

Disable the Specific License in the FMC Linux Shell

• Log into the FMC CLIadmin  account, Enter the expert  command to access the Linux shell.

• Execute the command to access the Specific License Reservation options: sudo manage_slr.pl

• Disable Specific License Reservation by selecting option 3. Select option 0 to exit.

• Enterexit  to exit the Linux shell.

• Enterexit  to exit the command line interface.

Related Information

• Cisco Secure Firewall Management Center Feature Licenses