Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Activate Your Licenses

SUMMARY In this topic, we describe how to activate license on different Juniper Networks products.

You're now set to activate the purchased license.

Activate Licenses

To activate license, perform the following steps:

  1. Log in to the Juniper Agile Licensing Portal.

  2. Navigate to the My Entitlements section on the landing page.

  3. Click the Activate.

  4. In the Product Activation screen, select the Software Version and the quantity to activate. You can add any useful information in the Notes field.

  5. Click Activate. Once complete, the screen will display as shown below:

To activate license, perform the following steps:

  1. Issue the set system license keys key name statement.

  2. The name parameter includes the license ID and the license key. For example:

    To add multiple license keys in the Junos OS CLI, issue the set system license keys key name statement for each license key to add. For example:

    3. The set system license keys key name statement supported on vSRX and cSRX.

  3. Issue the commit command.

  4. Verify that the added license key.

    For example:

    Alternatively, you can issue the show system license command from operational mode.

    Reboot the device after adding license on the SRX300, SRX320, SRX320-POE, SRX340, SRX345, SRX380, SRX550, and SRX550-M devices. Rebooting the device sets system resources to support session capacity of the license.

Activate Junos OS Licenses

In case of Junos OS upgrade, you might need the new license keys. See the 2 to generate license keys. If you have any problem in generating license keys, contact Juniper Customer Care.

  1. Gather your activation codes.

    Activation Code: The 17-digit alphanumeric activation code is sent through email in response to your order and is used to generate license capacity / feature activation key(s) for your Juniper Networks software. The activation code is used to generate your license activation key—it is not the license activation key itself.

  2. Generate license keys and activation key(s).

    Upon initial setup, a base activation key might be required to activate the software. If further capacity or feature(s) were purchased and are being added to the software, each capacity increment and feature needs to be added via another activation key.Generate license activation keys using the Juniper Agile Licensing Portal. At the top of the portal, enter your activation code, and click Activate. Then follow the instructions on screen. Juniper provides license activation keys in one of two ways:

    • Download: You can download activation keys from the Juniper Agile Licensing Portal.

    • Email: You receive an email that contains the license activation key(s).

  3. Add license

    To add and manage licenses, see Managing Licenses.

Activate Contrail Insights Licenses

This topic describes how to obtain the appropriate product keys and software required for your Juniper® Contrail® Insights product.

  1. Create a user account.

    To download your software, you need an approved user account with Juniper Networks. If you do not already have one, you can create an account through the User Registration Portal.

  2. Forward your fulfillment e-mail to the Juniper account activation team.

    Locate the fulfillment e-mail(s) that you received and forward it to mailto:appformix-key-request@juniper.net. (These e-mails verify that you purchased the product.) Identify the subject as “AppFormix Product Keys Needed.” Add the following information to the e-mail:

    • Company name

    • Primary contact name

    • Full company address

    • Contact e-mail address

    • Contact phone number

    You will receive an e-mail confirmation acknowledging your activation request. The Juniper product activation team will complete the activation request within two business days.

  3. Retrieve your software serial number.

    The software serial number is a unique 14-digit number that Juniper uses to identify your Juniper Networks software installation (or purchased capacity). You can find this number in the Software Serial Number Certificate attached to the e-mail sent when you ordered your Juniper Networks Service. Store the Software Serial Number in a safe place, as it will be necessary to identify your installation when engaging Juniper for support.

  4. Download your Software.

    Find your product software on the Juniper Software Downloads page. You will need to sign in with your Juniper user account and provide your Software Serial Number.

  5. Install your Software.

    Install your software according to the instructions in the software documentation at Contrail Insights. Make sure to enter the license key as instructed during installation.

Need Help?

For additional assistance, you may contact Juniper Networks by opening a case online through the Juniper Customer Support Center (CSC) Service Request Manager.

Activate CSO and Juniper Sky Enterprise Licenses

This topic describes how to activate Juniper Contrail Service Orchestration and Juniper Sky Enterprise.

Note: These instructions are written for the customer who will be using the product. If you are a partner, reseller, or distributor who is setting up Contrail Service Orchestration and Juniper Sky Enterprise for an end customer, please fill in the details about the customer.

  1. Create a user account.

    If you don’t already have a Juniper user account, go to the User Registration Portal to create one. (For detailed instructions, see KB 9946: Create a New User Login Account with Juniper Networks.)

    Important: When creating your account, do not select Guest User Access or Use your Cloud Marketplace or Cloud Service Provider credentials. If you choose either of these options, you will not be able to use the resulting user account to activate your licenses in the next step.

  2. Locate your license certificate.

    When you purchased your Juniper product, you should have received an e-mail containing information about your software license. Locate that e-mail and the attached certificate, which contains details you need to activate your product.

  3. Enter your activation code.

    Sign into the Juniper Agile Licensing Portal. At the top of the screen, enter the activation code (also sometimes called an authorization code) located in your license certificate, and click Activate.

  4. Activate your licenses.

    Choose one of the following options in the Product Activation screen:

    • Add devices to an existing account instance: Select this option if you are simply adding additional licenses to an existing Contrail Service Orchestration or Juniper Sky Enterprise account. Then, select your preexisting account.

    • Register a new account instance: Select this option if you are activating Contrail Service Orchestration or Juniper Sky Enterprise for the first time. Then, provide relevant account details.

    Note: When creating an account, you will be asked to select an account type (Enterprise or Service Provider). If you are a partner, distributor, or reseller filling in this form for a customer, specify your customer’s business type, not your own.

  5. Complete your request.

    Juniper will complete the request and e-mail you the details you need to activate your new product within two (2) business days.

Need Help?

For additional assistance, you may contact Juniper Networks by opening a case online through the Juniper Customer Support Center (CSC) Service Request Manager.

Activate Juniper ATP Appliance Licenses

This topic describes how to obtain the appropriate license keys and software required for your Juniper Networks Advanced Threat Prevention Appliance.

  1. Create a user account.

    To download your software, you need an approved user account with Juniper Networks. If you do not already have one, you can create an account through the User Registration Portal.

    Note: Compliance approval typically takes two hours following the creation of a new Juniper User Account.

  2. Retrieve your software serial number.

    The software serial number is a unique 14-digit number that Juniper uses to identify your Juniper Networks software installation (or purchased capacity). You can find this number in the Software Serial Number Certificate attached to the e-mail sent when you ordered your Juniper Networks Service. Store the Software Serial Number in a safe place, as it will be needed to identify your installation when engaging Juniper for support. Note that this number is different than the license key described in Step 3.

  3. Request your license key.

    Open an admin service request (case) using our Service Request Manager on the Juniper Customer Support Center (CSC) and enter the following information to facilitate your request. You may also call Customer Care via telephone if you prefer:

    • Subject Line: Juniper ATPA Software License Request

    • Description:

      • Sales order number

      • Software product SKU

      • UUID (for assistance finding your UUID, see kb.juniper.net\kb32301)

      • Serial Number/SSRN (enter the software serial number provided in your license fulfillment e-mail). If available, please attach the software serial number certificate (PDF) to the admin service request.

        Once your service request is processed, your license key will be sent to you.

  4. Download your software.

    If you need to download your software, you can find it on the Juniper Software Downloads page. You will need to sign in with your Juniper user account and provide your Software Serial Number.

    Note: If you receive an account privileges error, please contact Customer Care to have your account upgraded. Be prepared to provide your Software Serial Number as proof of purchase.

  5. Install your software.

    Install your software according to the instructions in the software documentation at JATP400 Advanced Threat Prevention Appliance and JATP700 Advanced Threat Prevention Appliance. Make sure to enter the license key as instructed during installation.

Need Help?

For additional assistance, you may contact Juniper Networks by opening a case online through the Juniper Customer Support Center (CSC) Service Request Manager.

Activate Juniper Cloud Workload Protection Licenses

This topic describes how to obtain the appropriate license keys and software required for your Juniper Networks Cloud Workload Protection software.

  1. Create a user account.

    To access your software, you need an approved user account with Juniper Networks. If you do not already have one, you can create an account through the User Registration Portal.

    Note: Compliance approval typically takes two hours following the creation of a new Juniper User Account.

  2. Retrieve your software serial number.

    The software serial number is a unique 14-digit number that Juniper uses to identify your Juniper Networks software installation (or purchased capacity). You can find this number in the Software Serial Number Certificate attached to the e-mail sent when you ordered your Juniper Networks Service. Store the Software Serial Number in a safe place, as you'll need it later to identify your installation when engaging Juniper for support.

  3. Request your licensed software.

    Open an admin case by going to support on https://www.juniper.net/ and then selecting Juniper Support Portal. Under cases, you can now open a case and enter the following information to facilitate your request. You may also call Customer Care via telephone if you prefer:

    • Subject Line: Juniper Cloud Workload Protection Software Request

    • Description:

      • Sales order number

      • Software product SKU

      • Serial Number/SSRN (enter the software serial number provided in your license fulfillment e-mail). If available, please attach the software serial number certificate (PDF) to the admin service request.

      • Email address for the master admin account – this can be the same as the Juniper user account or a different email address if preferred. Ensure that the incoming email from outside your organization is allowed.

    Temporary log in details are emailed automatically once your account is set up. Once your service request is processed, you'll receive an email with your account information. Your product is automatically licensed.

  4. Access Juniper Cloud Workload Protection portal.

    1. Go to Juniper Cloud Workload Protection.

    Note:

    If you have purchased the on-prem version of the software, you'll still need to login initially to the SaaS portal in order to download the full software.

    2. Enter your log in details. Use the log in information you received in the email to sign into your account for the first time.

    Click Login to continue. Upon successful authentication, you'll be directed to the Juniper Cloud Workload Protection dashboard.

  5. Navigate to the Installation tab.
  6. Use Agent installation option for both the SaaS and on-prem options. The Portal installation option is only accessible if you purchase on-prem option. Follow the instructions on the screen to download and install agents.

Generate Voucher Certificate

The Juniper Agile Licensing (JAL) Portal generates voucher certificate for your network device. This voucher certificate validates that a device with serial number belongs to the correct owner.

Generate Voucher Certificate for One Device

Let's generate voucher certificate for your network device using the JAL Portal.

  1. To onboard a device, open a Web browser and log in to JAL Portal.
  2. Click My Entitlements, find the S-ALL-S-DV-P SKU, and click Activate.
  3. On the Product Activation page, fill the following details:
    1. Select the Software Version.
    2. Enter the Device Serial Number. To find the device serial number, see Locating my Product Serial Number or Software Support Reference Number (SSRN).
    3. Select the Voucher Certificate expiration date.
    4. Enter Email ID to which you want to receive the confirmation mail.
    5. Upload the Pinned Domain Certificate or select the previously uploaded Pinned Domain. To find the pinned domain certificate, see Generate a Root CA Certificate with CLI.
    6. Read the agreement and select I Agree with Terms and Conditions.
    1. Click Activate.
  4. On the Activation Complete page, you can download or email the activation code using the Download and E-Mail options. Click I’m Done to activate the SKU.
  5. You have successfully onboarded your device. You can see the activated SKU in My Activations section.

Generate Voucher Certificates for Multiple Devices

Let's generate voucher certificates for multiple network devices using the JAL Portal.

  1. To onboard multiple devices, open a Web browser and log in to JAL Portal.
  2. Click Bulk Tool.
  3. On the Bulk License Activation Tools page click Bulk Activation Tool.
  4. On the Bulk Voucher Certificate Entitlement Activation page, click Download Excel File. A voucher certificate template file gets downloaded.
  5. Open the voucher certificate template file and enter the activation code, serial number, software version, and expiration date.
    1. To find the activate code, navigate to My Entitlements and find the S-ALL-S-DV-P SKU.
    2. To find the device serial number, see Locating my Product Serial Number or Software Support Reference Number (SSRN).
    3. You can choose a date up to when you want the SZTP to be active.
  6. Save the voucher certificate template.
  7. Upload the saved voucher certificate template file.
  8. Upload the Pinned Domain Certificate or select the previously uploaded Pinned Domain. To find the pinned domain certificate, see Generate a Root CA Certificate with CLI.
  9. Enter Email ID to which you want to receive the confirmation mail.
  10. Read the agreement and select I Agree with Terms and Conditions.
  11. Click Upload File.
  12. After the voucher certificate template file is uploaded, you receive two mails.
    1. First mail informs about the submission of SKUs for activation.
    1. Second mail to confirm the activation of the SKUs, you can find the activation code in the attached file.
  13. You have successfully onboarded your device. You can see the activated SKU in My Activations section.

Monitor Your Licenses

SUMMARY This topic helps you to manage your licenses.

Overview

After you activate and add the license, you can view, save and delete the licenses.

View License

To verify Junos OS license management, perform the following tasks:

View Installed Licenses

Purpose

Verify that the expected licenses are installed and active on the device.

Action

From the CLI, enter the show system license command.

Sample Output
command-name
Meaning

The output shows a list of the license usage and a list of the licenses installed on the device. Verify the following information:

  • Each license is present. Licenses are listed in ascending alphanumeric order by license ID.

  • The state of each license is permanent.

    A state of invalid indicates that the license key is not a valid license key. Either it was entered incorrectly or it is not valid for the specific device.

  • The feature for each license is the expected feature. The features enabled are listed by license. An all-inclusive license has all features listed.

  • All configured features have the required licenses installed. The Licenses needed column must show that no licenses are required.

View License Usage

Purpose

Verify that the licenses fully cover the feature configuration on the device.

Action

From the CLI, enter the show system license usage command.

Sample Output
command-name
Meaning

The output shows any licenses installed on the device and how they are used. Verify the following information:

  • Any configured licenses appear in the output. The output lists features in ascending alphabetical order by license name. The number of licenses appears in the third column. Verify that you have installed the appropriate number of licenses.

  • The number of licenses used matches the number of configured features. If a licensed feature is configured, the feature is considered used. The sample output shows that the subscriber address pooling feature is configured.

  • A license is installed on the device for each configured feature. For every feature configured that does not have a license, one license is needed.

    For example, the sample output shows that the subscriber address feature is configured but that the license for the feature has not yet been installed. The license must be installed within the remaining grace period to be in compliance.

Save License

To save the licenses installed on a device:

From operational mode, do one of the following tasks

  • To save the installed license keys to a file or URL, enter the following command:

    For example, the following command saves the installed license keys to a file named license.config:

  • To output installed license keys to the terminal, enter the following command:

Delete License

Before deleting a license, ensure that the features enabled by the license will not be needed.

You can use the request system license delete operational command, or the delete or deactivate configuration command to delete a license:

Using the Operational Command to Delete Licenses

To delete licenses using the request system license delete command:

  1. Display the licenses available to be deleted.
  2. To delete a license key or keys from a device using the CLI operational mode, select one of the following methods:

    • Delete a single license by specifying the license ID. Using this option, you can delete only one license at a time.

    • Delete all license keys from the device.

    • Delete multiple license keys from the device. Specify the license identifier for each key and enclose the list of identifiers in brackets.

  3. Verify the license was deleted by entering the show system license command.

Using a Configuration Command to Delete Licenses

Starting in Junos OS Release 16.1, to remove licenses from the configuration, you can use either the delete or deactivate configuration command. The delete command deletes a statement or identifier, and all subordinate statements and identifiers contained within the specified statement path are deleted with it. The deactivate command adds the inactive: tag to a statement, effectively commenting out the statement or identifier from the configuration. Statements or identifiers marked as inactive do not take effect when you issue the commit command. To remove the inactive: tag from a statement, issue the activate command. Statements or identifiers that have been activated take effect when you next issue the commit command.

The following procedure uses the delete command, but you could use the deactivate command as well.

To delete one or all licenses using the delete command:

You can use the deactivate command instead of the delete command in this procedure.

  1. Display the licenses available to be deleted.

    Issue the run request system license delete license-identifier-list ? command from the configuration mode of the CLI.

    A list of licenses on the device is displayed:

  2. Delete the license or licenses you want.

    • To delete a single license, for example:

    • To delete all licenses, for example:

  3. Commit the configuration by entering the commit command.
  4. Verify the license was deleted by entering the show system license command.

System Log for License

Note:

After you add or delete a license, system might take up to one minute to synchronize license between master and backup. You must allow one minute interval before performing any actions such as switchover or reboot.

Junos OS generates alarms for capacity (scale) features such as bandwidth to indicate the license requirement if the feature usage on a device exceeds the added license. The alarm detail shows the current feature usage information.

You can see the list of alarms at System Log Explorer.

For example, see the below scenarios where alarms are generated for license requirement:

  • Scenario 1

    If a device is configured with a 100G bandwidth license and current usage is 200G bandwidth, the Junos OS generates an alarm as the bandwidth usage exceeded the added license.

    The alarm specifies that the current usage of 200G bandwidth requires a license.

  • Scenario 2

    If a device is configured with a 128K RIB license and uses 130K RIB, the Junos OS generates an alarm as the RIB feature scale exceeded the added licenses.

    The alarm specifies 130K RIB requires a license.

Example: Content Security License Activation Video

Use this video for a walkthrough of license activation and basic management using the J-Web. License Activation