Symptom
Licensing agent failure code is not very descriptive when there's already a license reservation in the CSSM that was previously done offline and the new attempt is requested with a token:
show lic tech support:
Communication Statistics:
=======================
Communication Level Allowed: INDIRECT
Overall State: Insufficient trust for direct communication
Trust Establishment:
Attempts: Total=7, Success=0, Fail=7 Ongoing Failure: Overall=7 Communication=0
Last Response: FAILED on Jan 27 01:06:09 2023 UTC
Failure Reason: Request coming with lower trust id value. <<<<<<<<<<<<<<<<<<<<<<
Last Success Time:
Last Failure Time: Jan 27 01:06:09 2023 UTC
We would expect to see a Failure Code similar to: "Duplicated entry in CSSM" or "Instance already reserved in CSSM".
Conditions
+ Router running Smart Licensing Using Policy.
+ Previous Offline registration via the Authorize License-Enforced Features in CSSM.
+ New registration of the same Chassis ID with a token using the Online method.
Workaround
+ Download the Authorization Code file from CSSM associated to the chassis ID.
+ Transfer the file to the router.
+ Manually Install the Authorization file.
Router# license smart import bootflash:AuthorizationCode_file.txt
+ Make sure it was installed ok:
Router# show lic authorization
+ Generate the return code by doing:
Router# license smart authorization return local offline bootflash:AuthorizationCode_file.txt
+ Obtain the last return code with:
Router# show lic authorization
+ For the entry of your chassis ID, click on Actions > Remove in CSSM > Product Instances
+ Put the Return Code in the box and click Remove Reservation.
+ Again, for the entry of your chassis ID, click on Actions > Remove, and click Remove Product Instance.
+ Register the Trust Establishment with a token.
For more information, please visit:
Configure HSECK9 License on cEdge SD-WAN XE
https://www.cisco.com/c/en/us/support/docs/routers/xe-sd-wan-routers/218142-configure-hseck9-license-on-cedge-sd-wan.html#anc46
Further Problem Description
This error would show up in both router running IOS-XE and SDWAN XE.
