Cisco NX-OS Smart Licensing (Offline Registration using Trust-Request and ACK File)

Cisco NX-OS Smart Licensing (Offline Registration using Trust-Request and ACK File)

This article explains how to register a Cisco Nexus switch (NX-OS) with Cisco Smart Licensing in offline mode (air-gapped or no internet).
It covers generating a Trust-Request file, uploading it to Cisco Smart Software Manager (CSSM), retrieving the ACK (trust response) file, and importing it back to the switch.
You’ll also learn how to transfer these files using SCP or TFTP or USB.

Applies To

  • Cisco Nexus 9000 Series Switches

  • NX-OS 9.x and above

  • Environments with no internet access from the switch

  • Cisco Smart Software Manager (CSSM) offline registration

Background: What is a Trust-Request?

When your switch cannot directly communicate with Cisco CSSM (due to firewall or isolated network), you must use offline Smart Licensing.

Trust-Request File

A Trust-Request is a file generated by the switch containing:

  • The switch’s Product Instance ID

  • Serial number and PID (UDI)

  • License and entitlement metadata

You upload this file to Cisco CSSM, which verifies and returns a Trust-Response (ACK) file confirming the switch’s identity and registration.

Once imported back, the switch becomes “trusted” by Cisco Smart Licensing and can continue license usage and reporting even without live connectivity.

How the Offline Smart Licensing Workflow Works

Step

Description

1

Generate Trust-Request on the switch

2

Copy the file to a workstation (via SCP or TFTP)

3

Upload the file to Cisco CSSM

4

Download the ACK/Response file from CSSM

5

Import the ACK file back to the switch

6

Verify the Smart Licensing trust status

Step-by-Step Procedure

1. Enable Smart Licensing


Check the status:

  1. switch# show license all

Output should show:

  1. Smart Licensing using Policy: ENABLED
  2. Transport: Off

2. Generate the Trust-Request File

Generate the trust request and save it to internal storage (bootflash) or USB.

  1. switch# license smart save trust-request bootflash:trust_request.txt

If USB is connected:

  1. switch# license smart save trust-request usb1:trust_request.txt

Verify the file:

  1. switch# dir bootflash:

 

3. Transfer the Trust File to a Workstation

You can use SCP or TFTP depending on your environment.

Option A: Using SCP

Enable SCP feature:

  • switch# configure terminal
  • switch(config)# feature scp-server
  • switch(config)# end

    • Then copy the file from your workstation:

    1. scp admin@<switch-ip>:bootflash:trust_request.txt .

    Option B: Using TFTP

    Enable the TFTP server feature on the switch:

    1. switch# configure terminal
    2. switch(config)# feature tftp-server
    3. switch(config)# end

    Confirm:

    1. switch# show feature | include tftp
    2. tftp-server 1 enabled

    Now, from a workstation with a TFTP client:

    1. tftp <switch-ip> get trust_request.txt

    4. Upload the File to Cisco CSSM

    On a workstation with internet access:

    1. Log in to Cisco Smart Software Manager (CSSM).

     

    1. Navigate to:

      Reports → Usage Data Files → Upload Usage Data

    2. Upload trust_request.txt.

    3. CSSM will process and generate a Trust Response / ACK file (e.g., ACK_trust_request_T1PHGXLFSW01.txt).

    Download this file to your local system.

    5. Copy the ACK File Back to the Switch

    Using SCP

    scp ACK_trust_request_T10PHGXINLFSW01.txt admin@<switch-ip>:bootflash:

    Using TFTP

    1. switch# copy tftp:bootflash:
    2. Enter source filename: ACK_trust_request_T10PGXIFSW01.txt
    3. Enter hostname for the tftp server: <tftp-server-ip>

    6. Import the ACK File into the Switch

    1. switch# license smart import bootflash:ACK_trust_request_T10PXINLSW01.txt

    Expected output:

    1. Done smart import.

     

    7. Verify Smart License Registration

    1. switch# show license all

    Look for:

    1. Trust Code installed: <date/time>
    2. Active: PID: N9K-C916TC-FX2, SN: FDO290GA
    3. Smart Licensing using Policy: ENABLED

    This confirms your switch is now trusted and registered with Cisco Smart Licensing.

    Optional: Save License Usage (RUM File)

    To manually save license usage (useful for periodic offline reporting):

    switch# license smart save usage all bootflash:all_rum.txt

    If you get Failure: save status: The requested item was not found, ensure your switch is registered and trusted (see show license all output).

    Common Issues & Fixes

    Error Message

    Possible Cause

    Resolution

    Failure: save status: The requested item was not found

    License trust not yet established

    Import ACK again

    subsystem request failed on channel 0

    SCP feature disabled

    Enable SCP: feature scp-server

    No trust code installed

    ACK file not imported correctly

    Verify ACK file path and re-import

    TFTP transfer timeout

    Network or firewall issue

    Check UDP 69 access and same subnet

    Verification Commands

    Command

    Purpose

    show license all

    Displays overall licensing state

    show license usage

    Shows feature licenses consumed

    show license tech support

    Provides detailed debug info

    dir bootflash:

    Verify trust and ACK files presence

    References

    • Cisco Smart Licensing Using Policy Overview

    • Cisco NX-OS Smart Licensing Configuration Guide

      • Related Articles

      • Collecting TAC-PAC Logs from Cisco NX-OS and Copying via SCP

        1. Generating a TAC-PAC Log Bundle The TAC-PAC (tac-pac snapshot logs) command collects comprehensive diagnostic information from an NX-OS switch. This is commonly requested by Cisco TAC for troubleshooting. Command: tac-pac snapshot logs ...

      • How to Troubleshoot and Fix "bootflash" Directory Issues in Cisco Nexus Switches

        Purpose This article explains how to troubleshoot and resolve "bootflash" directory issues in Cisco Nexus switches. This method applies to both lab environments (GNS3/EVE-NG) and real production switches. Common Symptoms bootflash: No such file or ...

      • What is Boot Process in Linux OS.

        Boot Process in Linux OS. Have you ever wondered what happens behind the scenes from the time you press the power button until the Linux login prompt appears? Press the power button on your system, and after few moments you see the Linux login ...

      • How to Diagnose Fan Module Failure on Cisco Catalyst & NX-OS Switches?

        1.Overview This document provides a systematic guide to diagnosing fan module failures on Cisco Catalyst switches running IOS/XE and Cisco Nexus switches running NX-OS. Fan failures can lead to overheating and switch shutdown if not addressed ...

      • Enabling Microburst Monitoring on Cisco Nexus Switches

        Summary This article explains how to enable and verify microburst detection on Cisco Nexus 9000 series switches. Microbursts are short spikes of traffic that can momentarily exceed interface buffer capacity, leading to output discards even when ...