Pak license

For the best experience on our site, be sure to turn on Javascript in your browser. If you are looking to offer fishing and sailing charters, become a certified instructor or provide guide services commercially, then the Operator of Uninspected Passenger Vessels Captain's License OUPV is for you. This license is the most popular license and is commonly referred to as a Six-pack because it allows the holder to take up to six paying passengers and crew out on the water.

Although the boating experience for each version of the Six-pack license varies slightly, the basic minimum requirements include:. Upon their review and approval, you will be issued your license. A boating license or boating education certificate is proof that you have completed a boater safety certificate. Written By: Chris - 21 February, In this article, I'll explain the license structure in detail. The calculation at the database level leads to an additional performance gain through the use of the HANA database.

However, in order to enjoy the higher performance, the HANA license is required. So if you want to read report data with high performance , you must buy a HANA license. If you also want to write plan with high performance, you also have to buy a PAK license. In the Convert to Smart Entitlements dialog box, select your Virtual Account from the drop-down list, select the check box next to the stock keeping unit SKU , and then click Submit.

Note : If more than one product activation keys PAKs are associated with the device, then you can select some or all licenses to be converted in the Convert to Smart Entitlements dialog box.

When the system displays the License Request Status dialog box with the message about successful conversion, note down the Transaction ID , and then click Close. Note : Once you convert the fulfilled product activation key PAK to a Smart License, the device that the traditional license was assigned to disappears from the list of devices.

Note : If you experience an issue with converting to Smart License, refer to the Troubleshooting section of this article. Skip to content Skip to search Skip to footer. When you apply the resulting activation key to an ASA, it toggles on the VPN features to the maximum allowed, but the actual number of unique users across all ASAs sharing the license should not exceed the license limit.

For more information, see:. Cisco AnyConnect Ordering Guide. However, if you start the AnyConnect client first from a standalone client, for example and then log into the clientless SSL VPN portal, then 2 sessions are used. The DES license cannot be disabled. To prevent the use of DES when you want to only use strong encryption, be sure to configure any relevant commands to use only strong encryption. Some applications might use multiple sessions for a connection. For example, if you configure a phone with a primary and backup Cisco Unified Communications Manager, there are 2 TLS proxy connections.

To view the limits of your model, enter the tls-proxy maximum-sessions? The TLS proxy limit takes precedence over the license limit; if you set the TLS proxy limit to be less than the license, then you cannot use all of the sessions in your license.

K8 and K9 refer to whether the license is restricted for export: K8 is unrestricted, and K9 is restricted. If you clear the configuration using the clear configure all command, for example , then the TLS proxy limit is set to the default for your model; if this default is lower than the license limit, then you see an error message to use the tls-proxy maximum-sessions command to raise the limit again in ASDM, use the TLS Proxy pane.

Because the configuration synchronization restores the TLS proxy limit set on the primary unit, you can ignore the warning. You might also use SRTP encryption sessions for your connections:. For example:.

For failover, you need the IPS signature subscription on both units; this subscription is not shared in failover, because it is not an ASA license.

However, because of the IPS signature subscription requirements, you must buy a separate IPS module license for each unit in failover. AnyConnect licenses are shared and no longer require a shared server or participant license. A shared license lets you purchase a large number of AnyConnect Premium sessions and share the sessions as needed among a group of ASAs by configuring one of the ASAs as a shared licensing server, and the rest as shared licensing participants.

With some exceptions, failover and cluster units do not require the same license on each unit. For earlier versions, see the licensing document for your version. Failover units do not require the same license on each unit. If you have licenses on both units, they combine into a single running failover cluster license. There are some exceptions to this rule.

See the following table for precise licensing requirements for failover. Each unit must have the same encryption license. Other models— Base License. In multiple context mode, each unit must have the the same AnyConnect Apex license. Each unit must have the same IPS module license. See the following guidelines:. You need the IPS signature subscription on both units; this subscription is not shared in failover, because it is not an ASA license.

However, because of the IPS signature subscription requirements, you must buy a separate IPS module license for each unit in. A valid permanent key is required; in rare instances, your PAK authentication key can be removed. Cluster units do not require the same license on each unit. Typically, you buy a license only for the control unit; data units inherit the control unit license.

If you have licenses on multiple units, they combine into a single running ASA cluster license. There are exceptions to this rule. See the following table for precise licensing requirements for clustering.

For failover pairs or ASA clusters, the licenses on each unit are combined into a single running cluster license. If you buy separate licenses for each unit, then the combined license uses the following rules:. If all licenses in use are time-based, then the licenses count down simultaneously. One unit can use 18 contexts and the other unit can use 12 contexts, for example, for a total of Because the platform limit is 5, the combined license allows a maximum of 4 contexts.

Therefore, you can configure up to 4 contexts on the primary unit; each secondary unit will also have 4 contexts through configuration replication. Because the platform limit is 5, the licenses will be combined for a total of 5 contexts. Therefore, you can configure up to 5 contexts on the primary unit; each secondary unit will also have 5 contexts through configuration replication. For time-based licenses that are enabled or disabled and do not have numerical tiers , the duration is the combined duration of all licenses.

For example, if you have 48 weeks left on the Botnet Traffic Filter license on two units, then the combined duration is 96 weeks. If the units lose communication for more than 30 days, then each unit reverts to the license installed locally. During the day grace period, the combined running license continues to be used by all units.

If you do not restore communication during the day period, then for time-based licenses, time is subtracted from all unit licenses, if installed. They are treated as separate licenses and do not benefit from the combined license. The time elapsed includes the day grace period.

You have a week Botnet Traffic Filter license installed on two units. The combined running license allows a total duration of weeks. The time-based license behavior depends on when communication is restored:. In this case, communication is restored after 4 weeks. After 30 days—The time elapsed is subtracted from both units. In this case, communication is restored after 6 weeks.

Because failover pairs do not require the same license on both units, you can apply new licenses to each unit without any downtime. If you apply a permanent license that requires a reload, then you can fail over to the other unit while you reload. If both units require reloading, then you can reload them separately so that you have no downtime. You can purchase some models with No Payload Encryption.

For export to some countries, payload encryption cannot be enabled on the Cisco ASA series. You can use one time-based license per feature at a time. For identical licenses, the time limit is combined when you install multiple time-based licenses. For non-identical licenses for example, a session AnyConnect Premium license and a session license , the ASA automatically activates the next time-based license it finds for the feature. Activating a permanent license does not affect time-based licenses.

The secondary unit has the same running license as the primary unit; in the case of the shared licensing server, they require a server license. The backup server requires a participant license.

The backup server can be in a separate failover pair of two backup servers. Starting with Version 8. Typically, you buy a license only for the primary unit; the secondary unit inherits the primary license when it becomes active.

In the case where you also have a separate license on the secondary unit for example, if you purchased matching licenses for pre The shared license is used only after the sessions from the locally installed license time-based or permanent are used up.

On the shared licensing server, the permanent AnyConnect Premium license is not used; you can however use a time-based license at the same time as the shared licensing server license. In this case, the time-based license sessions are available for local AnyConnect Premium sessions only; they cannot be added to the shared licensing pool for use by participants. In multiple context mode, apply the activation key in the system execution space. Your activation key remains compatible if you upgrade to the latest version from any previous version.

However, you might have issues if you want to maintain downgrade capability:. Downgrading to Version 8. However if you activate feature licenses that were introduced in 8. If you have an incompatible license key, then see the following guidelines:. If you previously entered an activation key in an earlier version, then the ASA uses that key without any of the new licenses you activated in Version 8. If you have a new system and do not have an earlier activation key, then you need to request a new activation key compatible with the earlier version.

If you have more than one time-based activation key active, when you downgrade, only the most recently activated time-based key can be active. Any other keys are made inactive. If the last time-based license is for a feature introduced in 8. Reenter the permanent key or a valid time-based key. If you have mismatched licenses on a failover pair, then downgrading will disable failover. Even if the keys are matching, the license used will no longer be a combined license.

If you have one time-based license installed, but it is for a feature introduced in 8. You need to reenter the permanent key to disable the time-based license. The activation key is not stored in your configuration file; it is stored as a hidden file in flash memory. The activation key is tied to the serial number of the device.

Feature licenses cannot be transferred between devices except in the case of a hardware failure. If you have to replace your device due to a hardware failure, and it is covered by Cisco TAC, contact the Cisco Licensing Team to have your existing license transferred to the new serial number. The serial number used for licensing is the one seen in the show version output.

This serial number is different from the chassis serial number printed on the outside of your hardware. The chassis serial number is used for technical support, but not for licensing. Once purchased, you cannot return a license for a refund or for an upgraded license. On a single unit, you cannot add two separate licenses for the same feature together; for example, if you purchase a session SSL VPN license, and later purchase a session license, you cannot use 75 sessions; you can use a maximum of 50 sessions.

You may be able to purchase a larger license at an upgrade price, for example from 25 sessions to 75 sessions; this kind of upgrade should be distinguished from adding two separate licenses together. Although you can activate all license types, some features are incompatible with each other. By default, if you install the AnyConnect Essentials license if it is available for your model , it is used instead of the above licenses. You can disable the AnyConnect Essentials license in the configuration to restore use of the other licenses using the webvpn , and then the no anyconnect-essentials command.

This section describes how to obtain an activation key and how to active it. You can also deactivate a key. You can then enter the activation key on the ASA. You need a separate Product Authorization Key for each feature license. The PAKs are combined to give you a single activation key.

You may have received all of your license PAKs in the box with your device. When you purchase 1 or more licenses for the device, you manage them in the Cisco Smart Software Manager:. If you do not yet have an account, set up a new account. The Smart Software Manager lets you create a master account for your organization.

The PAK email can take several days in some cases. See the quick start guide for your model for more information. Obtain the serial number for your ASA by entering the following command. The serial number used for licensing is different from the chassis serial number printed on the outside of your hardware. To obtain the activation key, go to the following licensing website:.

Enter the following information, when prompted:. Product Authorization Key if you have multiple keys, enter one of the keys first. You have to enter each key as a separate process. An activation key is automatically generated and sent to the e-mail address that you provide. This key includes all features you have registered so far for permanent licenses.

For time-based licenses, each license has a separate activation key. After you enter all of the Product Authorization Keys, the final activation key provided includes all of the permanent features you registered.

Install the activation key according to Activate or Deactivate Keys. Your Send To email address and End User name are auto-filled; enter additional email addresses if needed. Check the I Agree check box, and click Submit. Apply the activation key according to Activate or Deactivate Keys. This section describes how to enter a new activation key, and how to activate and deactivate time-based keys.

If you are already in multiple context mode, enter the activation key in the system execution space. Some permanent licenses require you to reload the ASA after you activate them. The following table lists the licenses that require reloading. License Action Requiring Reload. The key is a five-element hexadecimal string with one space between each element.

The leading 0x specifier is optional; all values are assumed to be hexadecimal. You can install one permanent key, and multiple time-based keys.