Cisco Firepower 2100 Series Getting Started Manual page 62

Configure Licensing
• Strong Encryption (3DES/AES)
• AnyConnect—AnyConnect Plus, AnyConnect Apex, or AnyConnect VPN Only.
The ASA includes 3DES capability by default for management access only, so you can connect to the License
Authority and also use ASDM immediately. You can also use SSH and SCP if you later configure SSH access
on the ASA. Other features that require strong encryption (such as VPN) must have the Strong Encryption
license enabled, which requires you to first register to the License Authority.
Note If you attempt to configure any features that can use strong encryption before you have the license—even if
you only configure weak encryption—then your HTTPS connection will be dropped on that interface, and
you cannot reconnect. The exception to this rule is if you are connected to a management-only interface, such
as Management 1/1. SSH is not affected. If you lose your HTTPS connection, you can connect to the console
port to reconfigure the ASA, connect to a management-only interface, or connect to an interface not configured
for a strong encryption feature.
When you request the registration token for the ASA from your Smart Software Licensing account, check the
Allow export-controlled functionality on the products registered with this token check box so that the
full Strong Encryption license is applied (your account must be qualified for its use). The Strong Encryption
license is automatically enabled for qualified customers when you apply the registration token on the chassis,
so no additional action is required.
Before you begin
• Have a master account on the
If you do not yet have an account, click the link to
lets you create a master account for your organization.
• Your Cisco Smart Software Licensing account must qualify for the Strong Encryption (3DES/AES)
license to use some features (enabled using the export-compliance flag).
Procedure
Step 1 Make sure your Smart Licensing account contains the available licenses you need, including at a minimum
the Standard license.
When you bought your device from Cisco or a reseller, your licenses should have been linked to your Smart
Software License account. However, if you need to add licenses yourself, use the Find Products and Solutions
search field on the
Figure 15: License Search
Cisco Firepower 2100 Getting Started Guide
60
Cisco Smart Software
Cisco Commerce Workspace. Search for the following license PIDs:
ASA Deployment in Appliance Mode
Manager.
set up a new account. The Smart Software Manager