Smart Account & Smart Licensing Partner Update

Download as pdf or txt
Download as pdf or txt
You are on page 1of 116

Smart Account & Smart

Licensing Partner
Update
Mila Kovacević, Regional Operations Manager
Aleksandar Pavlović, Cyber Security Sales Specialist
Radenko Čitaković, System Enginner
Aleksandar Vulović, System Enginner

#CLUS
Agenda

• Smart Account Overview


• Smart Account Administration
• Smart Licensing
• Smart Licensing in Specific Technology

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 2
Smart Account Overview
What is this thing Called a
Smart Account?
CISCO SOFTWARE CENTRAL – primary location for Partners
and Customers, all things “software”:
http://software.cisco.com

DOBRODOŠLICA

Create a Smart Account
Proactive Creation
Allows for the Partner or Customer to set up a Smart Account Outside of an order, either to receive future orders or to organize
existing licenses

Add New or Existing Licenses


over time

Software. Begin Smart Account Customer Approval of Licenses Available for


cisco.com Creation Process New Account Customer Use

‘Just in Time’ Creation


Allows for a Partner to Create (or Select) a Smart Account for Use while Placing an Order or After Delivery to Customer
Customer Approval of
New Account
SKU 1
SKU 2
SKU 3

Commerce Create BoM Create New Account if Licenses Available for


(CCW) Needed Customer Use
-or-
Send Customer Claim Customer Claims Licenses and Places them in an
Order existing or New Smart Account
9
#CLUS BRKARC-1100
BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public
Partner rep. Customer
creates SA for OR creates SA on
own company their own

SA creation for the


Customer, by
Partner

BY DEFAULT
the domain Account Identifier
Being a partner and is set to the email domain of
creating Customer SA the person specified AS THE
you SHOULD HOLD Account Creator

Customer name
Recommended:
Disti NOT to place the order to Reseller
Holding Account when purchasing,
ONLY OWN Holding Account
Partner can manage
Customer SA *
MSP as service, not
mandatory, but Customer
has to grant the access to
SA, preferably VA

Good to have at least 2 Admin


Cannot create new Virtual Accounts or perform user management activities

Limited to assigned Virtual Accounts

Similar to a Smart Account User, but is limited to the Virtual Account


Smart Account Types
Customer Partner
Smart Account Holding Account

• Where licenses are deposited and managed • Partner or reseller store smart enabled products
• Can be managed by customer directly or temporarily, before depositing them into an end
customer smart account.
authorized party – MSP as a service- • Note: It is recommended that partners deposit
if partner has a price they can make it, Cisco has no
licenses directly into the customer account
issue with it *
because Licenses can only be consumed in the
• SA has: Approver, Administrator, User(s) Customer Smart Account
• DISTI*
Preporučljivo je da 1 klijent ima 1 SA, jer u okviru SA može biti koliko god Virtual Account-a (1 je „default“), koji omogućava organizaciju prema:
- poslovnim organizacijama, tehnologijama, arhitekturama….
Naravno, može biti izuzetaka da 1 klijent ima više SA, ali je transfer inventara izmedju njih skoro nemoguć: 1. ikea.com 2. japan.ikea.com 3. germany.ikea.com
Small Business Customer Smart Account

Medium Business Customer Smart Account VA tags


jLicenses
can only
be
moved
from VA
to VA *
Managing Licenses – Before Smart Software Licensing
Ikea Company
Corporate Headquarters, Stockholm Ikea Berlin Division
has 20 unused ISR licenses 10 registered
Ikea Oslo Division 10 unregistered
needs 21 ISR licenses

TODAY’S MOST COMMON SCENARIOS:

1. Corporate has limited or no visibility to each location:


• Purchase 21 licenses for Oslo -- 2 days to 2 weeks
• Unused Licenses in Berlin
• Wasted $
2. If Corporate has visibility:
• Ship devices to Oslo (2 days – 2 weeks) or…
• Re-host registered licenses one-by-one, (20+ clicks)
• Unregistered licenses? Must have PAK…
• No PAK? Call GLO with proof of purchase…
• No proof of purchase…
• Buy at least 1 or all 21 licenses, (2 days to 2 weeks)

Depending on the license types:


• Quote and Order, up to 9 tools
• Deliver and Activate, up to 5 tools
Managing Licenses – With Smart Software Licensing
Ikea Company
Corporate Headquarters, Stockholm Ikea Berlin Division
has 20 unused ISR licenses 10 registered
Ikea Oslo Division 10 unregistered
needs 21 ISR licenses

Company Administrator in Stockholm can:

View and manage all devices, all licenses


• Immediately transfer licenses from Berlin to Oslo
• Need 1 license? Use now, pay later
• Only takes minutes in one system
• Works the same for all Cisco Smart
Software Licensed products

Implications for the Customer and Partner:


• Proactively make the best use of assets
• Increase productivity and save $
• Eliminate calls to Cisco Support

Note: Visibility to all license data ensures easier renewals and upgrades
for Partners, Customers and Cisco.
What Data Can You Get from your Smart Account?
License Information Order Information
• What assets do you • How did you acquire your
currently own? assets?
• What Cisco products are • What region were they
they for? purchased for?
• What are the terms
associated with the
assets?
Usage Information
• What Devices are currently
leveraging your assets?
• How many do you have left?
#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
PLATFORM, not a portal with
ability to secure, manage and use HW, SW, Subscription & Services at one place
NE ZABORAVITE DA NASTAVITE SA
EDUKACIJOM I PRAKSOM NAKON
DANASNJEG DRUZENJA
Sa tim u vezi:
- Kreirajte SA za svoju kompaniju, ukoliko već niste
- Kreirajte SA za korisnike, što vise
- Pošaljite mi tokom naredne nedelje spisak svih novih SA
- Ukoliko želite još sesija javite nam
- Pišite mi na [email protected] ukoliko vam treba dodatni materijal ili imate pitanja,
a kontaktitajte [email protected] 24/7 ukoliko se pojave izazovi
Smart Account Administration
Are you an Employee of the End Customer?

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
Editing the Account Domain Identifier

Hint:
The domain
identifier will
populate with
details from your
profile – it may
be edited.

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
Activation Email

An Activation Email will be


sent to the 1st Customer
Administrator of the Account.

If the Domain has been


modified it must be approved
by Cisco Operations before the Once
Process may be Completed Approved

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
Smart Account already exists?

Manage Downloads Software License


and Upgrade Tools
Products

Ordering and EULA Smart Account


Tools Management

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Smart Account – Requesting Access

Enter Domain Identifier to notify Administrators

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
Adding New Users
Software.cisco.com -> Manage Smart Account -> Users

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
Adding New User Groups
Software.cisco.com -> Manage Smart Account -> User Groups

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Assigning Users to a User Group
Software.cisco.com -> Manage Smart Account -> User Groups
2

3
1 Add New Users

2 Upload User Lists

3 Delete Users

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
Assigning User Groups to an External Smart Account
Software.cisco.com -> Manage Smart Account -> User Groups

1
1 Add New External
Group to Access
Account
2
2 Request External
Group to Manage
Smart Account

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
Using Your Smart Account
to Deliver
(and find)
your new purchases
Customer

Partner
CCW Ordering Scenarios
PAK Based Licenses Smart Licenses
Smart Account assignment is optional but recommended since PAKs Smart Account assignment is mandatory to submit the order. The Smart
will automatically be available in LRP and visible at the enterprise-wide Licenses will be automatically activated and available in SSM.
level.
Detailed Smart Account assignment scenarios will be covered later in
The best practice is to assign the End Customer Smart Account at the this deck, but the initial order can be assigned to either the Customer
time of order for the PAKs to be automatically available in LRP. Smart Account or the Holding Smart Account and re-assigned to the
Customer Smart Account post order.
You can also can assign the End Customer Smart Account after order
submission.

Otherwise, PAKs can be assigned to the Smart Account post order in


LRP so Customers can benefit from enterprise-wide access control and
visibility.

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
Assigning Smart Accounts in CCW
• Follow the normal configuration, quoting and ordering process.

• You can assign Smart Account at the stage of Quoting and Ordering.

Configure Quote Order Post Order

Smart Accounts can be assigned at In CCW Order, all Smart Licenses must be
Quoting stage. Assigning a Smart assigned to a Smart Account – either Customer
Account in CCW Quote is optional (for or Holding - to submit the order. Customer
both Smart licenses and Classic, PAK- Smart Account Assignment for Classic, PAK-
based licenses). based licenses is recommended.

If the initial Smart Account order was assigned to a


Order should be assigned to the End Customer Smart Partner Holding Smart Account, you need to
Account of the company owning the items, not a transfer order from the Partner Holding Account
Partner Owned Customer Smart Account. to a Customer Smart Account so the Customer
can consume the Smart Licenses.

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
Assigning Smart Accounts in CCW
• Public and Private Virtual Accounts

In order to protect Customer sensitive/ confidential information, Virtual Accounts can be set as Private or
Public at the time of Virtual Account creation in Cisco Software Central.

Only Public Virtual Accounts are searchable in CCW, while Private Virtual Accounts are not visible in
search results (but you can assign products to a Private Virtual Account by typing in the exact Virtual
Account Name).

✓ When assigning a Smart Account to a CCW Quote or Order, you can search for a
Smart Account and for a Virtual Account.

✓ First you need to search for a Customer Smart Account and select it before
searching for a Virtual Account.

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
Assigning Smart Accounts to a CCW Quote
• How to Assign Smart Accounts in Quote
1 • In the pop-up window, select Smart account Type: Customer Smart Account or Holding Smart Account.
2
• If you select Customer Smart Account, you can cascade this assignment down to all current and future items on the Quote, or
assign the Smart Account only to currently unassigned items.

Here, you need to select the


Customer Smart Account first,
2 and then you can select a Virtual
Account as well.

• Please note that if you select Holding Smart Account you will be able to assign only one Holding Smart Account
to the entire quote.
#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
Assigning Smart Accounts to a CCW Quote
How to Assign Smart Accounts in Quote
Search for and select an existing Smart Account.
1 Search is enabled by “Domain Identifier” or “Email ID” with Domain Identifier as the default option.

2 Domain ID search is enabled by Customer or Holding Domain ID and Account Name. Smart Account search results
will display as you type, showing Account Domain identifier, Account Name and Status

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
Assigning Smart Accounts to a CCW Quote
Assign a Virtual Account to a Quote
1 After selecting the Smart Account, you can search for the Virtual Account by Name. The search results will be
shown in the drop-down menu.
2 When you find the correct Virtual Account, select it and click Assign.

Private Virtual Accounts will not be


displayed within the search field.
1 However, if you know the exact name of
your private Virtual Account, you can type in
the exact Virtual Account Name and assign
software licensing to that Virtual Account.

3 Or Alternatively, Request a new Smart Account


#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
J u l y 2 0 1 8

Assigning Smart Accounts to a CCW Quote


Search by Customer Email

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
Assigning Smart Accounts to a CCW Quote
How to Assign Smart Accounts in Quote
You can also add a Partner Holding Account, in addition to the Customer Smart Account, to be associated with
the order.
1 Click on Associate Partner Holding Account with Quote. Default Holding Accounts must be assigned at the
header level.

2 You can use the pencil icon to edit the Customer Smart Account/ Holding Account, and the
trash icon to remove a Customer Smart Account/ Holding Account.

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
Assigning Smart Accounts to a CCW Quote
• How to Assign Smart Accounts in Quote

• You can choose to assign a Customer Smart Account to a specific Quote line, at the line-level.
1
Click Assign Now.

2 • Search for the Customer Smart Account. Then you can also search for the Virtual Account.
3
• Clicking Assign will return to the Smart Account Header options.
2

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
J u l y 2 0 1 8

New capability: Allowing Customers to Claim Order after Booking

When claim user wants to forward the claim to another user

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 53
J u l y 2 0 1 8

New capability: Allowing Customers to Claim Order after Booking

When an order is not assigned to a SA

When an order is assigned to SA and not


assigned to VA

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 54
When are Licenses Available in Smart Accounts?
Assuming the order was placed successfully without any holds and the Smart Accounts have been created:

Assigned to Holding Account Assigned to End Customer Smart Account


In order booked status and onward: In order shipped status:
• Order will show up in the Partner Holding Account shortly after the • Licenses will show up in the End Customer Smart Account 24-48
Order gets into Booked status, and you can re-assign to Customer hours after the Order had moved into Shipped status
Smart Account for Smart Licenses.
• For Smart Account Optional orders you can assign a Smart Account
up until the order is fulfilled, otherwise assign to Smart Account in
LRP
.

If the order was assigned to an incorrect Customer Smart


Account, raise a case with Cisco to modify SA assignment

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 55
Smart Licensing
Products, Agents and a Backend
SL
Router
SL
Switch
cisco.com
Firewall SL

Router
Unified SL
Communications

Switch Software Cisco


Smart
SL Software
Router
Manager
Firewall SL
Switch
SL Firewall
SL
Cisco Smart
Unified
SL Software Manager
Communications Unified satellite
Communications (Optional)

Products Smart Licensing Authorized Backend


Agent

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 57
Deploying Smart License enabled Products
How it works … 1

Router Place Order


2 Cisco® Commerce
Direct Deployment

Switch
Activate
and Use Cisco Smart Annuity Platform
Firewall Software Manager
Software
Entitlement
Video Usage
Distribution
HTTPs Proxy
Unified Communications Server

Router Cisco Smart Software Manager


Mediated Deployment

Offline
Switch How many in
use

Firewall Smart Software


Manager satellite 3

Video Monthly Manage


Inventory Licenses How many
Update owned

Unified Communications

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
Reference these documents for more information on
using the satellite option:

Methods of Communication •


Data Sheet
Overview
FAQ
Satellite on Cisco.com


User Guide
Install Guide

The Cisco Product is configured to use Smart Licensing at install/provisioning time. Direct cloud access is the default option.

Options
1 Direct cloud access (default)
Cisco product sends usage information directly over the internet. No HTTPs
additional components are needed.

Available Today!
Cisco Cisco.com Usage Info
Product

2 Access through an HTTP proxy


Cisco Products send usage information over the internet via a Proxy Server. Any
off-the-shelf Proxy will work. HTTPs
Security Policy
Ease of use

Cisco Proxy Cisco.com Usage Info


Product

File
3 Access Through An On-Premise License Management Transfer

Cisco products send usage information to a locally installed satellite. Periodically,


+ exchange information with Cisco to keep satellite sync. This synchronization can
4 occur automatically in connected environments or manually in disconnected Cisco
HTTPs
Cisco.com Usage Info
environments. Cisco
Product Satellite

Now arriving on Platforms


5 Full Offline Access – License Reservation Request License

Use copy/paste information between product and Cisco.com to manually check in Copy / Paste
and out licenses. Functionally equivalent to current node locking, but with Smart License Response
Cisco Cisco.com Usage Info
License tracking. Product

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59
Cisco Smart Software Manager
Self-manage Cisco licenses, based on consumption needs, in one interface Smart Account

Satellite(s)

Virtual Track issues


Accounts

Track licenses

• View your license and product inventories


• Understand license and product landscape Transfer Licenses

• Receive timely issue messaging


• Easily troubleshoot product and license inventories
#CLUS BRKUCC-2725 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
Smart Licensing User Workflow
Have more licenses
Device/Product than being used
started

In-Compliance
SL State=
Un-configured Device/Product Registration

Enter “SL Platform uses


Customer enters Customer gets a Register”
“SL Enable” or SL Registration ID feature & reports
command/GUI usage to CSSM
is Default Token from CSSM with ID Token

Customer Smart
SL State= Account identified Out-of
SL State= Compliance
Un-identified
Registered
Using more licenses
than entitled to

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
What’s involved in Configuring a Product for SL?
Configure the Cisco Product with which licenses to consume and the previously acquired Registration Token Product Specific Configuration Guides
(Optionally set other configuration commands such as locations of satellites or Proxys, privacy commands, etc) Found at: cisco.com/go/smartlicensing

CLI Based Product Example GUI Based Product Example (FMC, ISE, UCM, etc)
(Switches/Routers/ASA/etc)

Activate Smart
Licensing

[Only for Hybrid Products]

[Optional] Point Telemetry


at Alternative
Destination
(Default will be Option 1 to CSSM,
Alternative Options are 2-4: Proxy Server or
Local CSSM satellite)

Insert Authentication
token into Device

End to End Demo:


https://www.youtube.com/watch?v=-L-RVL5v7vA&index=4&list=PLqqyYVkAtGxZQ_YBzP8w9-X7IIad_V35s&t=120s #CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 62
Cisco® Smart Software Manager satellite
Secure on-premise management of license consumption provided free of charge.

Ideal for Customers whose Products are unable to reach Cisco.com directly

Cisco® Software Manager satellite (SSM satellite)


• Contains a subset of Smart Software Manager (SSM) portal, and
works similar to SSM for management of installed products.
• Cisco devices and software products are registered with
and report license consumption directly via SSM satellite
• Near real-time license usage information based on synchronization
schedules with Smart Account
• Provided at no additional cost

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
Cisco Smart Software Manager satellite
• Cisco Products communicate with SSM satellite the same way they do with
Smart Software Manager
• Information is exchanged in Text (YAML formatted)

Cisco Smart Software Manager


Cisco ASR
satellite

Cisco Smart Licensing JeOS


messages (Centos 5) Smart Call Home
Transport Gateway

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 64
SSM satellite Requirements
• The Free installation package is available in a number of formats
• ISO installable on ESXi 5.0+ server Minimum System Requirements
• Universal ISO based image in the near future
(Customer provided):

ISO • 200GB hard disk


Cisco Smart Software Manager • 8GB Memory
satellite • 4 vCPU
• Supports up to 4000 Product
Instances
(CentOS 7)

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
What is Cisco Smart Licensing – ID Tokens
Used to securely Register products to a Smart Account and Virtual Account
ID Tokens are “organizational identifier” used to establish ‘identity’ when
registering a Product

An ID Token: An ID Tokens is NOT:


• Can be used once – or reused multiple
times • Product specific
• Can be created and revoked at any time • Licenses or keys or PAKs
• Expires after a period of time (default is 30 • “one-time use”
days; Minimum of 1 day and a maximum • Stored on the Cisco Product
of 365 days) • Needed after the product is registered

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
Enable Smart Software Licensing

Select:
Inventory

Click:
New Token

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 67
Enable Smart Software Licensing

Provide:
ID Token Description

Decide:
Allow enablement of Export
Controlled functionality
(functionality varies by
product)

Note: Enabled by default if Export


Control is allowed for this Smart
Account

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 68
Enable Smart Software Licensing

Copy:
From “Actions”
drop-down, copy
the token.

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 69
Register Product with Smart Account

Paste the “ID Token”


created in your Smart
Account directly into
the CLI

csr1kv# license smart register idtoken <id token>

license smart register: Registration process is in progress. Please check the syslog for the
registration status and result

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
Enable Smart Software Licensing
Smart-Device#license smart register idtoken <paste>
Registration process is in progress. Use the 'show license status' command to
check the progress and result
Smart-Device#% Generating 2048 bit RSA keys, keys will be exportable...
*Oct 15 12:54:41.741: %RF_ISSU-3-INVALID_SESSION: RF ISSU client on domain (0)
does not have a valid registered session.
[OK] (elapsed time was 1 seconds)
*Oct 15 12:54:41.741: %SSH-5-DISABLED: SSH 1.99 has been disabled
*Oct 15 12:54:42.492: %SSH-5-ENABLED: SSH 1.99 has been enabled
*Oct 15 12:54:42.533: %PKI-4-NOCONFIGAUTOSAVE: Configuration was modified. Issue
"write memory" to save new IOS PKI configurationWait for IIC event to get
throughput higher than 100K
*Oct 15 12:54:49.966: %SMART_LIC-5-COMM_RESTORED: Communications with Cisco
licensing cloud restored
*Oct 15 12:54:50.030: %SMART_LIC-6-EXPORT_CONTROLLED: Usage of export controlled
features is Allowed
*Oct 15 12:54:50.030: %SMART_LIC-6-AGENT_REG_SUCCESS: Smart Agent for Licensing
Registration with Cisco licensing cloud successful
*Oct 15 12:54:50.030: %SMART_LIC-5-EVAL_START: Entering evaluation period Note:
*Oct 15 12:54:50.030: %VXE_THROUGHPUT-6-LEVEL: Throughput level has been set to In this example the
100 kbps
*Oct 15 12:54:56.614: %SMART_LIC-3-OUT_OF_COMPLIANCE: One or more entitlements
device is communicating
are out of compliance that no available
*Oct 15 12:54:56.614: %SMART_LIC-6-AUTH_RENEW_SUCCESS: Authorization renewal with licenses are in the
Cisco licensing cloud successful. State=OOC
Virtual Account

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 71
Enable Smart Software Licensing

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 72
Enable Smart Software Licensing

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 73
Enable Smart Software Licensing
Smart-Device#license smart renew auth Note:
Authorization process is in progress. Use the 'show license status' Force an authorization renewal
command to check the progress and result
Smart-Device#
*Oct 15 13:03:54.199: %VXE_THROUGHPUT-6-LEVEL: Throughput level has been set to 50000 kbps
*Oct 15 13:03:54.199: %SMART_LIC-6-AUTH_RENEW_SUCCESS: Authorization renewal with Cisco licensing cloud
successful. State=authorized
Smart-Device#
Note:
Smart-Device#show license status
Smart Licensing is ENABLED Device updates state

Registration:
Status: REGISTERED
Smart Account: Canada Motors Inc.
Virtual Account: Cisco-TAC
Export-Controlled Functionality: Allowed
Initial Registration: SUCCEEDED on Oct 15 12:54:49 2017 UTC
Last Renewal Attempt: None
Next Renewal Attempt: Apr 12 12:54:49 2017 UTC
Registration Expires: Oct 14 12:48:59 2017 UTC
License Authorization:
Status: AUTHORIZED on Oct 15 13:03:54 2017 UTC
Last Communication Attempt: SUCCEEDED on Oct 15 13:03:54 2017 UTC
Next Communication Attempt: Nov 14 13:03:53 2017 UTC
Communication Deadline: Jan 13 12:58:06 2017 UTC

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 74
Enable Smart Software Licensing

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 75
How To get Old Licenses into a Smart Account
Options
Existing Licensing Tools

Device Led Conversion


Option 1: LRP Supports License Migration into
Smart Accounts by selecting
PAKs/Licenses/Devices and Assigning them to an
Account

Cons: Must have visibility to the licenses already,


cant support Honor Based Licenses
Status: Available since FY15
Manual
Process Smart Account Assignment Process
Option 3: As devices connect to a Smart Account once Smart
Agent is available, they upload all previously used licenses,
included Honor Based. Option 2: Take lists of Serial Numbers from Customer or Partner
Data (CSV or Excel), and associate all licenses tied to those
Cons: Requires Software Upgrade products to a specified Smart Account.
Status: Available in June 2017 but only on select products
Currently: ISR 4000, ASR 1000 Cons: Does not support Honor Based Licenses
Shipping Soon: Nexus 2k, 7k, 9k, Cat 3k, ASR 900 Status: Currently in Pilot © 2018 Cisco and/or its affiliates. All rights reserved.
#CLUS BRKARC-1100 Cisco Public 76
Adding Licenses to a Smart Account in LRP

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 77
Smart Licensing Enabled Products

#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 78
#CLUS BRKARC-1100 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 79
Smart Licenses in Specific
Technology
Smart Licensing in CUCM 12.x and above
➢ Smart Licensing as the default and only mode of license management

➢ No requirement or support for Prime License Manager (PLM) for CUCM


12.0
➢ No change in CUCM Licensing Model

➢ Flexible deployment options to balance ease of management and security

➢ Self Serve migration support to convert traditional entitlements to Smart


Licensing Entitlements

#CLUS BRKUCC-2725 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 81
Cisco Smart Software Licensing Management
CUCM License Compliance and Enforcement
• Evaluation
• CUCM 12.0 runs in full capacity during the 90 day Evaluation Period
• CUCM 12.0 will disallow MACD (enforcement mode) if the Cluster is not registered to CSSM during the
evaluation period (90 days)

• Registered and Authorized


• CUCM 12.0 is in compliance for License Usage

• Out of Compliance
• CUCM 12.0 Licenses exceed the CUCM Licenses available in CSSM (virtual account)
• After 90 days, MACD will be disallowed (enforcement mode)

• Authorization Expired
• Authorization has expired (CUCM has not communicated with CSSM or satellite for 90 days)
• CUCM will start an additional Overage Period of 90 days. If OOC, overage period is adjusted
• CUCM 12.0 will disallow MACD (enforcement mode) after expiry of Overage period.
#CLUS BRKUCC-2725 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 82
Migrating Classic Licenses to Smart with active SWSS

• Migration to a Smart-License enabled version available only with an active


SWSS contract
• Can be performed on CSSM or LRP (License Registration Portal)
• Self serve conversion from 9.x, 10.x, 11.x 12.x

#CLUS BRKUCC-2725 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 83
Migrating Classic Licenses to Smart with active SWSS

• Migration Models:
• PAK based – For already fulfilled, partially
fulfilled and unfulfilled PAKs.
• Device based –To convert the PLM based
licenses to smart Entitlements
• Customers need to first assign their
classic PAK or PLM to the Smart Account
and Virtual Account
• Pre 9.x  12.x conversion is not
supported via self-serve in LRP or CSSM.
This is done via GLO

#CLUS BRKUCC-2725 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 84
EN SL Licensing Adoption

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
F Y 1 9 L i c e n s i n g P l a n o f Re c o rd
Q4 FY18 (Q1FY19) Q2 Q3
PRODUCTS
Smart Licensing Only –16.9 train Smart Licensing Only (16.10.1) Smart Licensing Only (16.11.1)
• All switches, CAT9K, CAT3K • New Wireless Controllers • Industrial switch board ESS 3000
• New Industrial Router 1100 – LA • Routing platforms (ISR/ASR/CSR) • Industrial Switch IE 3000
• IOS-XE SD WAN-limited products, see • IOS-XE SD WAN-limited products, see • IOS-XE SD WAN-limited products, see
table table table
• DNA Center License Manager (1.2.5) • DNA Center License Manager (1.2.8)
Connected, and SLR/PLR-API-based and Connected, and SLR/PLR-API-based to
factory-installed to CSSM CSSM, factory-install automation, manual
bulk workflow for air-gapped SLR/PLR
reservations

C A PA B I L I T I E S
Smart Licensing Capabilities Smart Licensing Capabilities Smart Licensing Capabilities
• SL- Connected • WebUI License Management • ITAM Standards for on-prem SSM
licensing server
• SLR manual or automated reservation
• ISO 19770 CSSM + on-prem SSM
• Factory-installed SLR
licensing server
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
Roadmap for Smart Licensing on products:
Smart Licensing Smart Licensing only planned
Product SLR/PLR planned
(Y/N) (release date)

C2960-X/XR No N/A N/A


C3650 Yes 16.9.1 SLR only
C3850 Yes 16.9.1 SLR only
C4500E (Sup8/9 – E & LE) No N/A N/A
C6807 (Sup 2T & 6T) No N/A N/A
C6880/6840 No N/A N/A
C9300 Yes 16.9.1 SLR only
C9400 Yes 16.9.1 SLR only
C9500 Yes 16.9.1 SLR only
C3560-CX No N/A N/A
C4500X No N/A N/A

Note: Smart Accounts will become mandatory as each product 16.9.1 July
family is Smart Licensing-enabled 16.10.1 November
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
16.11.1 March
S a l e s Tr a i n i n g
Roadmap for Smart Licensing Product Adoption
IOS-XE Polaris IOS-XE SD WAN
Smart Licensing Smart Licensing only SLR/PLR planned SD WAN
Product
(Y/N) planned for (date): (release date) cEdge / vEdge
ASR1K series Yes, PAK + SL 16.10 16.8 SLR+PLR 19.1
ISR4K series Yes, PAK + SL 16.10 16.8 SLR+PLR 19.1
C1K series Yes, PAK + SL 16.10 16.8 SLR+PLR 19.1
CSR1Kv Yes, PAK + SL 16.11.1 16.8 SLR+PLR 19.1
Industrial IoT Router 1100 (Sparrow) Yes 16.9.1 16.9.1 SLR only 19.1
– Limited Availability
Industrial IoT IE-3200-E-only Yes 16.11.1 16.11.1 SLR+PLR N/A
(1st release 16.10, no licensing) Intro of Advantage Intro of Advantage
Industrial IoT ESS-3300-E-only Yes 16.11.1 16.11.1 SLR+PLR N/A
(1st release 16.10, no licensing) Intro of Advantage Intro of Advantage
19.1 Viptela release March 16.9.1 July
19.2 Viptela release July 16.10.1 November
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
16.11.1 March
Global
S a l e s Tr a i n i n g
Routing + SD WAN, IOS-XE SD WAN Releases
Integration Roadmap
IOS-XE SD WAN
Product July 2018 November Post November
ASR1001-X, ASR1002-X, ASR 1001-HX, ASR 1002 –HX Yes
ISR43xx, ISR4221 Yes
ISRv (ENCS) 5412 Yes
C1111-8P LTEEA/LA, C1117-4PLTEEA/LA, C1111-8P Yes
CSR1Kv Yes
C1111-4PLTEEA, C1111-4PLTELA, C1116-4PLTEEA, C1117- Yes
4PMLTEEA, C1111-4P, C1116-4P, C1117-4P, C1117-4PM, C1101-4P,
ENCS (5104,5406,5408)
ISR-4451, ISR-4431, ASR1006-X, ASR1009-X Yes
19.1 Viptela release March

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19.2 Viptela release G
July
lobal
S a l e s Tr a i n i n g
Automation

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
Automated Licensing Management

L I C E N S E R E G I S T R AT I O N LICENSE CONSUMPTION LICENSE REPORTING

Provisioning Config Management Telemetry

Day 0 Automation Day 0 / 1 Configuration Day N - Reporting

DNA Center DNA Center DNAC


APIs and data models APIs and data models Data via APIs and reports

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
Automating Licensing with Management Tools

Kinetic, DNA, IND/FND vManage Direct

Rest APIs YANG Data Models / APIs

YANG Data Models / CLI


DNA Center vManage

Policy Automation Analytics Policy Automation Analytics

CLI YANG Data Models

Intent-based Intent-based Intent-based


Network Infrastructure Network Infrastructure Network Infrastructure

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
DNA Center, License Manager

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
Smart Software Licensing
Current & Future State
• Smart License-Only is mandatory for IOS-XE based Catalyst Switches (July’18 16.9.1)
• Eventually, all products will only support Smart Software Licensing

RTU(1)

Device
User goes to CSSM User reviews
boots up Smart Agent
to get a licensing
reports usage to CSSM
Registration Token compliance on
CSSM
CSSM

User enters “SL


SL Default -> eval Register” on
mode (90 days) device with token

(1): Or PAK-based other type of device license

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
License Manager API-based SL Workflow

RTU(1)

Device
User goes to CSSM User reviews
boots up Smart Agent
to get a licensing
reports usage to CSSM
Registration Token compliance on
CSSM
CSSM
API API
User enters “SL
SL Default -> eval Register” on
mode (90 days) device with token

DNAC LM
(1): Or PAK-based other type of device license

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
DNAC License Manager
1 Introducing new action that allows bulk register devices

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
DNAC License Manager
2 Expressing Intent through “Settings” page to automate SL registration

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
DNAC License Manager
3 Supporting automated License Reservation for air-gapped networks

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
License Manager API-based SLR Workflow

• SLR with DNA-C and devices in staging area that has connectivity to CSSM

Select
License Generate Generate Apply
Select Select Virtual
Reservation Request Code Authorization code Authorization
Devices Account
Type – SLR / from Device from CSSM Code on Device
PLR

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
License Manager Detailed Roadmap
1.2.6 1.2.8 1.3x
• SLR Day0 workflow with factory installed • SLR manual workflow supporting air- • Multiple SA/VA (with Site profile)
authorization keys gapped network with no staging
o Bulk enablement environment • CAT3K - DLC support
o No APIs call needed
• Routing, eWlc, Cat9200 SL- only • ACA / CPP support
support
• Incorporating Polaris change audit feature,
• Configure CSSM URL in LM license history

• Dynamic licensing support

• Licensing support for wireless sensor

• Site profile-based setting

• Satellite phase-1 support


Documentation:
• DNAC Administrator Guide LM Chapter 1.2.5
• LM Troubleshooting wiki
© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
SYSLOG Detail

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Global
S a l e s Tr a i n i n g
 %SMART_LIC-3-EVAL_EXPIRED
✓ Sent once when the eval period expires
 %SMART_LIC-4-EVAL_WILL_EXPIRE_WARNING
✓ Send before expiration at
✓ 60 days before expiration
✓ 30 days before expiration

EVAL Syslogs ✓


Every week in the last 30 days
Every day in the last week
✓ Every hour in the last day
✓ Then weekly
 %SMART_LIC-3-EVAL_EXPIRED_WARNING
✓ Sent every week after the eval period expires
Note: This depends on the smart agent version. Older
versions send once per hour.

© 2018 Ciscoand/or
2018 Cisco and/oritsits affiliates.
affiliates. All All rights
rights reserved.
reserved. CiscoCisco Confidential
Confidential Global
S a l e s Tr a i n i n g
 %SMART_LIC-5-AUTHORIZATION_EXPIRED
✓ Sent when the authorization expires because all the
authorization renewal attempts for 90 days have had
communications failures.
✓ Sent once per week while in this state
 %SMART_LIC-3-AUTH_RENEW_FAILED
✓ Sent every time an authorization renewal fails because of
communications failures.
‘Authorization ✓ Retries on communications failures will be attempted

Expired’ o If the agent is in the authorized state


• retry every 23 hours
Note: Device has been registered, but has not connected
to Cisco within 90+ days to verify license use o If agent is in the OOC state
• Retry every 15 minutes for two hours then back off to once every
4 hours after.
o If agent is in the authorization expired state
• Retry once every hour.
 Sent once per week as along as the authorization
renewals keep failing

© 2018 Ciscoand/or
2018 Cisco and/oritsits affiliates.
affiliates. All All rights
rights reserved.
reserved. CiscoCisco Confidential
Confidential Global
S a l e s Tr a i n i n g
 %SMART_LIC-3-ID_CERT_EXPIRED_WARNING
✓ Send before expiration of the ID certificate (registration
period) at :
✓ 60 days before expiration
✓ 30 days before expiration
✓ Every week in the last 30 days
✓ Every day in the last week
✓ Every hour in the last day
‘CERT’ syslogs ✓ Then weekly
Note: Device has been registered, but requires a new  %SMART_LIC-3-ID_CERT_EXPIRED
CERT annually from Cisco
✓ Sent once when the ID cert (registration period) expires
 %SMART_LIC-3-ID_CERT_RENEW_FAILED
✓ Sent every time a renew is attempted and it fails.
✓ Retries on communications failures will be attempted:
o Every 15 minutes for the first 4 hours
o Every hour after that
✓ Sent Once per week while in this state
© 2018 Ciscoand/or
2018 Cisco and/oritsits affiliates.
affiliates. All All rights
rights reserved.
reserved. CiscoCisco Confidential
Confidential Global
S a l e s Tr a i n i n g
Out-of-Compliance  %SMART_LIC-3-OUT_OF_COMPLIANCE
(OOC), including ✓ Sent when we enter the OOC state.
Sent Once per week while in this state
Term Expiry ✓

© 2018 Ciscoand/or
2018 Cisco and/oritsits affiliates.
affiliates. All All rights
rights reserved.
reserved. CiscoCisco Confidential
Confidential Global
S a l e s Tr a i n i n g
 %%SMART_LIC-3-COMM_FAILED
✓ Sent every time there is a communications
Communication failure.
✓ Sent Once per week while in this state
failure re-tries  %SMART_LIC-5-COMM_RESTORED
✓ Sent on the next successful communication

© 2018 Ciscoand/or
2018 Cisco and/oritsits affiliates.
affiliates. All All rights
rights reserved.
reserved. CiscoCisco Confidential
Confidential Global
S a l e s Tr a i n i n g
• Smart Account is still required
Exceptions subject • Targeted to the most security
conscious customers
to Export Control • User may un-register product to
release licenses to their pool for
How does it work? hosting on another device

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public
To whom does it apply?
General Case

• Roughly, emerging market governments and military. Export Operations does a


“License Determination” at the time a customer sets up their Smart Account to
classify the Smart Account.

• The License Determination classification is used to allow or dis-allow


CSSM/Satellite to set the Export Flag to “allowed.” Default is always “not
allowed.”

• Supported today in Smart Licensing.


© 2018 Cisco and/or its affiliates. All rights reserved. Internal use Cisco Confidential 108
To whom does it apply?
Exception – Government Export Licenses

• Customers can request that Cisco obtain an exception from the US Dept. of
Commerce or other Sovereign Government to provide otherwise restricted
functionality. This exception is called an Export License. It grants an exception
for a specific set of functionality, on a specific product, in a specific quantity. It
must be enforced.

• Accommodating Government Export Licenses is the goal of Export Control


Phase Two.

© 2018 Cisco and/or its affiliates. All rights reserved. Internal use Cisco Confidential 109
The Short Term Work Around
1 2 3
Get Purchase the Schedule a
Authorized $0 Export 15 minute
SKUs ‘Installation
Meeting’

Contact the “Purchase” the Once an SO


NGFW appropriate $0 with completed
product Strong Crypto Export
management PID for the Compliance Repeat as
Mandatory 15 checks is Necessary for
team (ask- desired RMAs/changes/
firepower- platform (L- working-day waiting provided, the etc
pm) if you FPR2K/4K/9K- period Export team
have a TD-ENC-K9=). schedules a live
customer meeting to
interested in Order as many enable strong
using the licenses as encryption into
workaround FMC can the account
support
Remember to order these SKUs for public sector

L-FPR2K-TD-ENC-K9=

L-FPR4K-TD-ENC-K9=

L-FPR9K-TD-ENC-K9=Export Control

They are free of charge, only trigger Export Control process


© 2018 Cisco and/or its affiliates. All rights reserved. Internal use Cisco Confidential 111
Q&A
For More Information
Cisco® Smart Licensing
www.cisco.com/go/smartlicensing
(http://www.cisco.com/c/en/us/products/abt_sw.ht
ml)

Cisco® Smart Software Manager


www.cisco.com/go/smartsatellite
(http://www.cisco.com/web/ordering/smart-
software-manager/smart-software-manager-
satellite.html)

Cisco® Smart Accounts


www.cisco.com/go/smartaccounts
(http://www.cisco.com/web/ordering/smart-
software-manager/smart-accounts.html)

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 113
For More Information
• For more Information on Training
Smart Software Licensing Demos on Youtube
https://www.youtube.com/channel/UCABaWsiDScw_w6kvPcDIjHw
Training Resources for Customers
https://community.cisco.com/t5/licensing-enterprise-agreements/software-on-demand-training-resources-for-customers/ta-
p/3639797

• Smart Account & Smart Licensing Sessions on www.ciscolive.com

BRK-ARC1100 - Hey! Where’s All My Stuff? Using Smart Accounts to Organize Your Cisco Experience
BRKARC-2034 - Care and Feeding of Smart Licensing
BRKUCC-2725 - Transitioning to Smart Licensing: Cisco Unified Communications Manager and Cisco Unity Connection 12.x

#CLUS BRKARC-2034 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 114
Resources for Smart Licensing
Training Sales Connect - Collaboration
• Live Training: Register for you or your customer at: • https://www.cisco.com/c/dam/en/us/products/collateral/unified-
https://communities.cisco.com/docs/DOC-56985 communications/unified-communications-licensing/presentation-c97-
• YouTube Training Videos: 739389.pptx
https://www.youtube.com/channel/UCABaWsiDScw_w6kvPcDIjHw
• Training Videos and Demos: https://www.cisco.com/web/ordering/smart-
Discussion Forums
software-manager/index.html
• https://forums.cisco.com/OperationsExchange/s/Training-
Details?L1Category=Training&L2Category=CSE_End_Customer&L1Categor
yPath=training

Getting help Customer facing websites


• GLO Support: Fully supported by GLO 24x7: • Smart Account Home CCO Page: www.cisco.com/go/smartaccounts
[email protected] • Smart Licensing CCO Page: www.cisco.com/go/smartlicensing
• General Questions: [email protected] • Smart Licensing ‘Satellite’ CCO Page: www.cisco.com/go/smartsatellite
• Portal Issues: [email protected] • Best Practices and Usage Guides:
• Migration Issues: [email protected] https://forums.cisco.com/ecom/web/operations-exchange/sot
• Satellite Issues: [email protected]

#CLUS BRKUCC-2725 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 115
Thank you

#CLUS

You might also like