Prerequisites

Before you can begin implementing a Universal Permanent License Reservation, you must complete the following:

  • If you have not already done so, create your Smart Account.

    For more information, see Create a smart account and add licenses.

  • Work with your account representative to obtain approval for Universal Permanent License Reservation for your Firepower products.

  • Purchase standard licenses and service subscriptions for your products, sufficient to cover all devices and features you will deploy.

    For descriptions of standard Firepower licenses and service subscriptions, see License types and restrictions.

  • Arrange for export-controlled strong cryptographic functionality, if required and if your organization is eligible, and confirm that your account is enabled to use it. Your account representative can assist you with this.

  • Confirm with your account representative that the Universal Permanent License is ready for use and reflected in your Smart Account.

  • Make sure NTP is configured on the Firepower Management Center and managed devices. Time must be synchronized for registration to succeed. For more information, see the online help in FMC.

    If you are deploying FTD on a Firepower 4100/9300 chassis, you must configure NTP on the Firepower chassis using the same NTP server for the chassis as for the Firepower Management Center.

  • If you are currently using standard Smart Licensing on your Secure Firewall Management Center, de-register the Secure Firewall Management Center to release the licenses back to your account. For information, see Deregister the Cloud-Delivered Firewall Management Center.

  • (Recommended) Add managed devices to your Secure Firewall Management Center. For instructions, see Register with a new management center. (You can add managed devices at any time, but adding them now simplifes this process.) You will need to enable the evaluation license in order to do this (under System > Licenses > Smart Licenses). Evaluation licensing does not require a connection to the License Authority.

  • (Recommended) If you will deploy a Secure Firewall Management Center pair in a high availability configuration, configure that before you assign licenses. (FMCs in a high availability configuration require the same number of licenses as a single FMC.) If you have already deployed licenses to the secondary appliance, de-register licensing from that appliance.