Cisco NCS 1010 and NCS 1020 Datapath Configuration Guide, IOS XR Releases 25.x.x

PDF

Cisco NCS 1010 and NCS 1020 Datapath Configuration Guide, IOS XR Releases 25.x.x

Configure smart licensing on Cisco NCS 1010

Updated: June 17, 2026

Want to summarize with AI?

Log in

This procedure explains how to configure smart licensing on the Cisco NCS 1010 platform to enable automated license management and compliance.

Follow these steps to configure smart licensing in Cisco NCS 1010.

Procedure

1.

Configure the domain name server for the smart license server.

Example:

RP/0/RP0/CPU0:ios#configure 
Sat Dec 15 15:25:14.385 IST
RP/0/RP0/CPU0:ios(config)#domain name-server 198.51.100.1
2.

Set up the CiscoTAC-1 profile and destination address for Smart Call Home, using the following commands:

call-home

service active

contact smart-licensing

profile CiscoTAC-1

active

destination address http {http|https}://{FQDN}/its/service/oddce/services/DDCEService

destination transport-method http

Note

FQDN must be either Cisco Smart Software Manager FQDN (tools.cisco.com) or Smart Licensing satellite server FQDN. You must configure the DNS server before setting-up the call-home destination address as FQDN. Use the domain name-server {DNS server IP} command to configure the DNS server on the device.

Example:


 RP/0/RP0/CPU0:ios#domain name-server 198.51.100.1
 RP/0/RP0/CPU0:ios#call-home
 RP/0/RP0/CPU0:ios#service active
 RP/0/RP0/CPU0:ios#contact smart-licensing
 RP/0/RP0/CPU0:ios#profile CiscoTAC-1
 RP/0/RP0/CPU0:ios#active
 RP/0/RP0/CPU0:ios#destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
 RP/0/RP0/CPU0:ios#destination transport-method http
Note
CiscoTAC-1 profile is the default profile for smart licensing and it must not be deleted.
3.

Configure the crypto ca Trust point profile, if CRL distribution point is not defined in the Satellite server certificate or if the device is not able to reach the host mentioned in the CRL distribution point.

Example:

RP/0/RP0/CPU0:ios(config)#crypto ca trustpoint Trustpool crl optional
4.

Create and copy the registration token ID using Cisco Smart Software Manager.

For more details about creating a token, see Generate a token in Cisco Smart Software Manager.
5.

In the privileged EXEC mode, register the token ID in Cisco NCS 1010, using the following command:

license smart register idtoken token-ID

The registration may fail if the token is invalid or there is communication failure between the device and the portal. If there is a communication failure, there is a wait time of 24 hours before the device attempts to register again. To force the registration, use the license smart register idtoken token-ID force command.

When your device is taken off the inventory, shipped elsewhere for redeployment, or returned to Cisco for replacement using the return merchandise authorization (RMA) process, you can use the license smart deregister command to cancel the registration on your device. All smart licensing entitlements and certificates on the platform are removed.

ID certificates are renewed automatically after six months. In case, the renewal fails, the product instance goes into unidentified state. You can manually renew the ID certificate using the license smart renew id command.

Authorization periods are renewed by the Smart Licensing system every 30 days. As long as the license is in an 'Authorized' or 'Out-of-Compliance' (OOC), the authorization period is renewed. Use the license smart renew auth command to make an on-demand manual update of your registration. Thus, instead of waiting 30 days for the next registration renewal cycle, you can issue this command to instantly find out the status of your license.

After 90 days, the authorization period expires and the status of the associated licenses display "AUTH EXPIRED". Use the license smart renew auth command to retry the authorization period renewal. If the retry is successful, a new authorization period begins.