Before I start this topic, do you aware what the different between K8 image and K9 Image? In short, K stands for Crypto, K8 is DES (Base Encryption) and K9 is 3DES (Stronger Encryption).
In the term of ordering process, K9 require more process on documentation and government approval, usually distributor or re-seller will not stock this version. While K8 does not require such a process, distributors or re-sellers usually stock this version.
How to convert Cisco ASA K8 to K9?
A lot people concern the step to convert K8 to K9 after they purchase Cisco ASA K8 version firewall. You just need a license key and insert into your ASA firewall. Just a few steps.
- Go to www.Cisco.com/go/license, login with your CCO ID. click “Get Other Licenses” and Click “IPS,Crypto, Other…”
- Next, select product family, select “Security Products” and select “Cisco ASA 3DES/AES License”
- Following, insert the Serial Number
- After putting a serial number, you will prompt the details and you may add additional email to receive this license key. Remember to agree the term and condition and click submit.
- Summary will appear, showing you the license request had to send to your email already.
- Next, check your email, the licence key is sent together with the step by step how to activate Cisco ASA Firewall K8 to K9.
To install the Cisco Adaptive Security Appliance Activation Key (Make sure the device is already connected to Internet)
Step 1. From the command-line interface (CLI), enter configuration mode using the “conf t” command.
Step 2. Type the “activation-key” command, and then, when prompted, enter the new activation key listed above.
Step 3. For some new license settings to take effect, a system reboot may be required. Write Mem and Reload the device.
As per my experience. The Serial Number stated in the physical machine might now same as the serial number within the system. Use show version and get the right serial and generate again the activation key if you fail to activate it.
Once done activation, you will receive a message like below.
“Both Running and Flash permanent activation key was updated with the requested key”. Than reboot your firewall.
Now you have successfully converted Cisco ASA K8 to K9’s image. Your firewall is in K9, 3DEC Crypto’s image.
