Prerequisites for Universal Permanent License Reservation

If you have not already done so, create your Smart Account.

For more information, refer to Create a smart account and add licenses.

Work with your account representative to obtain approval for Universal Permanent License Reservation for your Firewall products.

Purchase standard licenses and service subscriptions for your products, sufficient to cover all devices and features you will deploy.

For descriptions of standard Firewall licenses and service subscriptions, refer to License types and restrictions.

Arrange for export-controlled strong cryptographic functionality, if required and if your organization is eligible, and confirm that your account is enabled to use it. Your account representative can assist you with this.

Confirm with your account representative that the Universal Permanent License is ready for use and reflected in your Smart Account.

Make sure NTP is configured on the Cloud-Delivered Firewall Management Center and managed devices. Time must be synchronized for registration to succeed.

If you are deploying Firewall Threat Defense on a Firepower 4100/9300 chassis, you must configure NTP on the Firepower chassis using the same NTP server for the chassis as for the Cloud-Delivered Firewall Management Center.

If you are currently using standard Smart Licensing on your Cloud-Delivered Firewall Management Center, de-register the Cloud-Delivered Firewall Management Center to release the licenses back to your account. For information, refer to Deregister the Cloud-Delivered Firewall Management Center.

(Recommended) Add managed devices to your Cloud-Delivered Firewall Management Center. For instructions, refer to Register with a new management center. (You can add managed devices at any time, but adding them now simplifes this process.) You will need to enable the evaluation license in order to do this (under Administration > Licenses > Smart Licenses). Evaluation licensing does not require a connection to the License Authority.