Cisco Licensing team can help with getting time-based activation-key for the required time period.

You need to get your Product Activation Key (PAK) for the device. As long as anyconnect-essentials on your ASA is properly disabled, you are OK to proceed. While a new license key is installed, a warning shows that the Essentials key is not used when the new license is being installed. In order to make use of a new license, the anyconnect-essentials feature must be disabled on your ASA by issuing a no anyconnect-essentials under webvpn.

Note: The new An圜onnect Plus, Apex, or VPN Only license key no more uses the Essentials option. The detailed feature difference between the 2 licenses can be found in this licensing guide: The command to check if Apex license is enabled or disabled is debug menu license 23Īn圜onnect Plus license includes these VPN types:Īn圜onnect Apex license includes these VPN types: Essentials are disabled, as they are not compatible. So, if you enable Apex, the Premium would not be used, however, the license consumed would be in the form of Premium licenses.

As per the new licensing model, An圜onnect Apex corresponds to An圜onnect Premium and An圜onnect Plus corresponds to An圜onnect Essential. An圜onnect Apex is not compatible with old licenses. Background InformationĪn圜onnect Premium and An圜onnect Essential were used in old licensing models and are obsolete now. Time-based activation-key is used to activate features for a specific time period. This document describes how to configure and remove Time-based activation-key on Cisco Adaptive Security Appliance (ASA) for An圜onnect Premium Peers.

Cisco asa activation key command