In order to register as an SecurID customer or partner on SecurID Link to gain access to the SecurID Community Case Portal and to restricted product content, you must provide either a Site ID, Serial Number, Contract Number, or License Key for one of the products associated with your account. This document provides instructions on finding this information for various SecurID product.
If you have SecurID Access Manager, SecurID Keon, or SecurID ClearTrust products, the license serial number is located on a paper license shipped with the product. Contract your System Administrator to obtain this information.
Vpn Access Manager Serial Key
The serial number can be found on a label on the top of the appliance, as shown below. Please also refer to your Order Confirmation email to obtain other information required when your call SecurID Support. The email will include your serial number, contract number or site ID.
You can assign permissions to more user accounts than installed licenses. All the accounts are given access on a first-come, first-served basis. When the license quota is reached, no more accounts will be given access until other accounts are disconnected from all Synology SSL VPN, WebVPN, and SSTP services.
A. We have taken in to account feedback from customers over many years requesting a simplified licensing model. As such, the new license model eliminates all of the add-on licenses complexity while also allowing for co-existence of license types. The new model provides shared licensing across all options without the need to have hardware in place to enforce licenses and eliminates the requirement to purchase AnyConnect licenses on a per ASA basis (assisting with HW migrations). Moreover, the new model has built-in pandemic support. Please note that all term licenses include support and software entitlement, so purchasing these licenses grants you access to the current software releases.
The VPN-only Licenses are designed for VPN only environments that have a large number of potential end users but very infrequent use (for example university with 10,000 students but with only 100 active users at any one time). With either the Plus Perpetual or VPN-only licenses, you must separately purchase support services or you will not be eligible to access software or tech support.
A. The AnyConnect Plus and Apex model is based on total authorized users that will make use of any AnyConnect service, not simultaneous connections (either on a per-ASA or shared basis) and not total active remote access users. As such, a user can connect with as many devices as he / she wants as long as the you have available hardware capacity and have not exceeded your purchased authorized user count. It is your responsibility to purchase additional authorized user licenses if their usage needs increase. If you currently support 30K simultaneous user connections but have 50K users who need AnyConnect services, you would be required to buy a 50K license. If you have 100K users who need AnyConnect services, you would be required to buy a 100K license. For unattended environments where there are not really individual users on the other side of a connection, each unattended device is considered a unique user.
A. There are no restrictions on ASA versions for the Plus/Apex licenses. Any ASA capable of supporting AnyConnect supports the new license model. Certain features, that is per application VPN requires newer ASA versions/HW. The licenses are compatible with both original and current ASA models. PAK registration is specific to the ASA 5500/5500-X and does not happen for the ASAv, Firepower or Cisco ISR / ASR / CSR 1000V VPN head-ends, however the contract registration still needs to be completed in order to enable software download access and receive tech support.
A. The AnyConnect Plus or Apex users license count needs to service the total unique users utilizing AnyConnect, Third party IKEv2 access, or clientless services (be they active on the network or not).
A. License requirements are determined by head-end used and the services available in that head end. For example, AnyConnect Plus is required for VPN service to Cisco IOS head-ends though you could also use AnyConnect Apex. To use AnyConnect's posture capabilities with ISE 1.3 you must order AnyConnect Apex as well as ISE Apex. For other use cases including Network Access Manager, Cisco Cloud Web Security (CWS), and so on. you must have AnyConnect Plus but again they could also use AnyConnect Apex. CiscoIOS head-ends must also have a Security License before AnyConnect services can be used. AnyConnect is compatible with ISR G2, CSR 1000V and ASR 1000 platforms. Available features varies by platform. Please note that the physical Product Activation Key (PAK) registration on the Cisco licensing portal is only applicable to the ASA. For ASAv and Cisco IOS head-ends as well as non-VPN use cases, please store the PAK in a safe place as proof or purchase. You still need to complete Contract registration for SW Center access and TAC support.
A. Yes. But please note that ASAv, which utilizes Cisco Smart Licensing, does not require any AnyConnect license to be physically applied to the actual platform. The same licenses must still be purchased and you must still link the Contract number to your Cisco.com ID for SW Center access and tech support.
A. This is normal. These parts expand to allow you to register your AnyConnect Plus or Apex license to all of your ASA serial numbers. This expansion SKU is not applicable to the newer banding-based Plus (L-AC-PLS-LIC=) or Apex (L-AC-APX-LIC=) SKUs or the VPN Only SKUs (L-AC-VPNO-xxxx=). See the AnyConnect Ordering Guide for details on license registration per SKU type.
A. The Product Activation Key (PAK) must be treated like cash. If you lose your product activation key before using it, the only other method we can use to locate it is with the Sales Order #. If you have previously used this PAK to register an ASA, the PAK can be located in the Cisco.com license portal for the user who performed the license registration. Cisco can look up this information based on a serial number used for a prior registration.
A. The Plus/Apex model requires a Product Activation Key (PAK) to enable an ASA and entitle support/SW access. As such, it is not possible to deliver the ASA license before the Product Activation Key is generated. please visit: Cisco Software Central. Then go to Traditional Licensing and select: Get Other Licenses -> Demo and Evaluation -> Security Products -> AnyConnect Plus/Apex (ASA) Demo License to obtain a one-month temporary ASA license. Please note that licenses cannot be used the second you receive eDelivery notification. It can take up to 24 hours for your license PAK to become active on the License portal.
A. You most likely accidentally pasted in a trailing space after your serial number. Please remove any additional spaces after your serial number and resubmit your request. The other cause of this is that you clicked the Add Device button which is intended to add more than one Serial Number at initial registration, but you did not actually add any other Serial Numbers. For this situation, please click the Delete Device button and submit again without the blank space which is there to add an additional serial number.
A. When you purchase any term Plus or Apex license (or SWSS for Plus perpetual or VPN Only), a contract number will be generated for your purchase, this usually takes at least a few days from the time the license PAK is electronically delivered. Please speak with your reseller if you have not received this contract number from them. The contract number needs to be attached to your Cisco.com ID in order to enable SW Center access and the ability to open a TAC case. We recommend that you link your contract to their Cisco.com ID by mailing web-help-sr@cisco.com with the Contract # and their Cisco.com ID. It is very important that your customer profile address information matches the address information on the contract prior to attempting to link a contract or sending an email. The contract number is not the same as your Product Activation Key (PAK).
A. You are not required to adopt AnyConnect 4.x as part of moving to the new licensing. However, AnyConnect 3.x is already End-Of-Life (no additional fixes will be provided). If you do not upgrade to an AnyConnect Plus or Apex licenses, you will not have access to newer AnyConnect versions. The Plus or Apex licensing does not require you to upgrade your AnyConnect software at the same time.
A. Cisco offers 4-week Apex evaluation licenses that incorporate all Plus license functionality. To obtain an evaluation license, please visit: Cisco Software Central. Then go to Traditional Licensing and select: Get Other Licenses -> Demo and Evaluation -> Security Products -> AnyConnect Plus/Apex (ASA) Demo License. Please note that the license unlocks the ASA functions, but does not grant access to the AnyConnect Windows/Mac OS X/Linux software. Mobile versions of AnyConnect can be accesed via the Application store for the specific OS and can be trialed in conjunction with an evaluation license.
A fixed license key always follows the format of 4 groups of 4 characters. This is an older and less flexible method of activating your Access Server to unlock more connections. You cannot change the licensed amount of an existing fixed license key after purchase and activation, and you can only activate the key once on an Access Server. It is also the only licensing method that works on a server that has no Internet access at all, as there is an offline activation method available for this type of software license. Fixed license keys can look like this:
In the event that an online activation is impossible, either due to very strict firewalls that you have no control over, or because of the fact that the Access Server installation is located in a purely local network without any Internet access, then an offline activation may be done instead. There are two possibilities. You can either do the offline activation yourself using a second (temporary) Access Server installation that does have a connection to the Internet, or you can relay the required hardware information file to us through our support ticket system, together with the license key you want to activate, and let us do the offline activation for you. After the offline activation procedure you will end up with an activated xxxx-xxxx-xxxx-xxxx.lic file which must be placed back on your server for the license key activation procedure to be completed. 2ff7e9595c
Comments