KB 521701 - Cisco NX-OS Smart Licensing (Offline Registration using Trust-Request and ACK File)

KB 521701 - Cisco NX-OS Smart Licensing (Offline Registration using Trust-Request and ACK File)

This article explains how to register a Cisco Nexus switch (NX-OS) with Cisco Smart Licensing in offline mode (air-gapped or no internet).
It covers generating a Trust-Request file, uploading it to Cisco Smart Software Manager (CSSM), retrieving the ACK (trust response) file, and importing it back to the switch.
You’ll also learn how to transfer these files using SCP or TFTP or USB.

Applies To

  • Cisco Nexus 9000 Series Switches

  • NX-OS 9.x and above

  • Environments with no internet access from the switch

  • Cisco Smart Software Manager (CSSM) offline registration

Background: What is a Trust-Request?

When your switch cannot directly communicate with Cisco CSSM (due to firewall or isolated network), you must use offline Smart Licensing.

Trust-Request File

A Trust-Request is a file generated by the switch containing:

  • The switch’s Product Instance ID

  • Serial number and PID (UDI)

  • License and entitlement metadata

You upload this file to Cisco CSSM, which verifies and returns a Trust-Response (ACK) file confirming the switch’s identity and registration.

Once imported back, the switch becomes “trusted” by Cisco Smart Licensing and can continue license usage and reporting even without live connectivity.

How the Offline Smart Licensing Workflow Works

Step

Description

1

Generate Trust-Request on the switch

2

Copy the file to a workstation (via SCP or TFTP)

3

Upload the file to Cisco CSSM

4

Download the ACK/Response file from CSSM

5

Import the ACK file back to the switch

6

Verify the Smart Licensing trust status

Step-by-Step Procedure

1. Enable Smart Licensing


Check the status:

  1. switch# show license all

Output should show:

  1. Smart Licensing using Policy: ENABLED
  2. Transport: Off

2. Generate the Trust-Request File

Generate the trust request and save it to internal storage (bootflash) or USB.

  1. switch# license smart save trust-request bootflash:trust_request.txt

If USB is connected:

  1. switch# license smart save trust-request usb1:trust_request.txt

Verify the file:

  1. switch# dir bootflash:

 

3. Transfer the Trust File to a Workstation

You can use SCP or TFTP depending on your environment.

Option A: Using SCP

Enable SCP feature:

  • switch# configure terminal
  • switch(config)# feature scp-server
  • switch(config)# end

    • Then copy the file from your workstation:

    1. scp admin@<switch-ip>:bootflash:trust_request.txt .

    Option B: Using TFTP

    Enable the TFTP server feature on the switch:

    1. switch# configure terminal
    2. switch(config)# feature tftp-server
    3. switch(config)# end

    Confirm:

    1. switch# show feature | include tftp
    2. tftp-server 1 enabled

    Now, from a workstation with a TFTP client:

    1. tftp <switch-ip> get trust_request.txt

    4. Upload the File to Cisco CSSM

    On a workstation with internet access:

    1. Log in to Cisco Smart Software Manager (CSSM).

     

    1. Navigate to:

      Reports → Usage Data Files → Upload Usage Data

    2. Upload trust_request.txt.

    3. CSSM will process and generate a Trust Response / ACK file (e.g., ACK_trust_request_T1PHGXLFSW01.txt).

    Download this file to your local system.

    5. Copy the ACK File Back to the Switch

    Using SCP

    scp ACK_trust_request_T10PHGXINLFSW01.txt admin@<switch-ip>:bootflash:

    Using TFTP

    1. switch# copy tftp:bootflash:
    2. Enter source filename: ACK_trust_request_T10PGXIFSW01.txt
    3. Enter hostname for the tftp server: <tftp-server-ip>

    6. Import the ACK File into the Switch

    1. switch# license smart import bootflash:ACK_trust_request_T10PXINLSW01.txt

    Expected output:

    1. Done smart import.

     

    7. Verify Smart License Registration

    1. switch# show license all

    Look for:

    1. Trust Code installed: <date/time>
    2. Active: PID: N9K-C916TC-FX2, SN: FDO290GA
    3. Smart Licensing using Policy: ENABLED

    This confirms your switch is now trusted and registered with Cisco Smart Licensing.

    Optional: Save License Usage (RUM File)

    To manually save license usage (useful for periodic offline reporting):

    switch# license smart save usage all bootflash:all_rum.txt

    If you get Failure: save status: The requested item was not found, ensure your switch is registered and trusted (see show license all output).

    Common Issues & Fixes

    Error Message

    Possible Cause

    Resolution

    Failure: save status: The requested item was not found

    License trust not yet established

    Import ACK again

    subsystem request failed on channel 0

    SCP feature disabled

    Enable SCP: feature scp-server

    No trust code installed

    ACK file not imported correctly

    Verify ACK file path and re-import

    TFTP transfer timeout

    Network or firewall issue

    Check UDP 69 access and same subnet

    Verification Commands

    Command

    Purpose

    show license all

    Displays overall licensing state

    show license usage

    Shows feature licenses consumed

    show license tech support

    Provides detailed debug info

    dir bootflash:

    Verify trust and ACK files presence

    References

    • Cisco Smart Licensing Using Policy Overview

    • Cisco NX-OS Smart Licensing Configuration Guide

      • Recent Articles

      • KB-630208 | How to use Find and Locate to search for files in Linux

        Purpose To provide Linux administrators and Field Engineers with guidance on using the find and locate utilities to efficiently search for files and directories within a Linux filesystem based on criteria such as name, type, size, timestamps, ...

      • KB-630164 | How to use rsync to Synchronize Files

        Purpose To provide a clear and practical procedure for using the rsync utility to synchronize files and directories between local systems and remote hosts, including push and pull operations, while preserving file attributes and optimizing data ...

      • KB-630107 | How to create a Linux swap file

        Purpose To provide Field Engineers and Linux administrators with a standardized procedure for creating, configuring, and validating a Linux swap file. This procedure helps ensure sufficient virtual memory is available when physical RAM is exhausted ...

      • MSI All-in-One (AIO) PC – Physical Damage Policy for Warranty Claims

        MSI All-in-One (AIO) PC – Physical Damage Policy for Warranty Claims MSI's standard warranty does not cover physical or accidental damage to an All-in-One (AIO) PC. If the damage is determined to be caused by external factors rather than a ...

      • KB 134833 - Troubleshooting NVSM Alert NV-CPU-XX – Unrecoverable CPU Internal Error

        Purpose This document provides a general troubleshooting procedure for the NVIDIA System Management (NVSM) alert NV-CPU-XX, which indicates that a CPU has reported an internal error. The article outlines how to verify whether the alert represents an ...

      • Popular Articles

      • CP Plus Camera and NVR Configuration

        NVR Configuration The CP Plus Pro Series of NVRs have been meticulously designed for providing you with upgraded performance and higher recording quality in your IP video surveillance solution. The robust processor that has been inculcated in this ...

      • KB 775235 - Kerberos Authentication – Overview

        What is Kerberos? Kerberos is a secure authentication method used in our Active Directory (AD) environment (mbuzztech.com). It allows users to: Access multiple systems without re-entering passwords (Single Sign-On – SSO) Log in once Where We Use It ...

      • How to Remove and Reinstall NVIDIA Drivers on Ubuntu

        This article provides step by step guide to completely remove existing NVIDIA drivers and reinstall specific version of the NVIDIA driver on the Ubuntu system Prerequisites Administrative (sudo) access to the Ubuntu system. Internet access to ...

      • KB 692001 - Personal Computers and Servers - Classification and Point of Contact

        We can classify the computers that MBUZZ handles based on their form-factor as below: Tower Workstations, Desktops, Gaming PCs and SFF (Small form factor) PCs fall under this category. These are computers people would use on a desk and rarely move. ...

      • KB 298031 - M.2 SSD Tier List

        The sequential read and write speeds, which are usually the most advertised number, are not a proper benchmark of real-world performance or the quality of an SSD. This article categorizes and tiers SSDs based on factors like the type of NAND flash, ...