Symptom

After Migrating from Traditional Licenses using IOS-XE 16.6, 16.7, 16.8, 16.9 to Smart Licensing(16.12.X or 17.X), the router shows "No licenses in use", however the booted licenses like securityk9, appxk9 or throughput are active. Proving securityk9 is active: Router(config)#crypto ? RSA-key-pair RSA key pair ca Certification authority call Configure Crypto Call Admission Control dynamic-map Specify a dynamic crypto map template engine Enter a crypto engine configurable menu gdoi Configure GKM (Group Key Management, GDOI or G-IKEv2) Policy gkm Configure GKM (Group Key Management, GDOI or G-IKEv2) Policy identity Enter a crypto identity list ikev2 Configure IKEv2 Options ipsec Configure IPSEC policy isakmp Configure ISAKMP policy key Long term key operations keyring Key ring commands logging logging messages map Enter a crypto map mib Configure Crypto-related MIB Parameters pki Public Key components provisioning Secure Device Provisioning ssl Configure Crypto SSL Options tls-tunnel Configure Crypto TLS-Tunnel Options vpn Configure crypto vpn commands wui Crypto HTTP configuration interfaces xauth X-Auth parameters The license consumption will be seen as: License Usage ============= No licenses in use HSEC licenses becomes inactive and cannot be installed in any way.

Conditions

Upgrading from Traditional Licenses IOS-XE versions 16.6, 16.7, 16.8, 16.9 to Smart Licensing 16.12.X or 17.X IOS-XE versions. !Only PID C1111-8PWH is affected by this software defect!

Workaround

If by some reason any license is not booted up, reboot it, for example with "license boot level securityk9" or "license boot level appxk9" or "platform hardware throughput crypto 250000", save the config and reload the device and all license will become active. Only the HSEC cannot be reenabled even with an offline SLAC registration. "license feature hsec" and a reload even with SLAC installed will not activate it. It will remain in the following state: Router#show license summary License Usage: License Entitlement Tag Count Status ----------------------------------------------------------------------------- ISR_1100_8P_Hsec (ISR_1100_8P_Hsec) 0 NOT IN USE

Further Problem Description