Cisco Cisco Email Security Appliance X1070 Troubleshooting Guide

Page of 3
IEA Release 6.3 License Keys
Document ID: 118517
Contributed by Cisco TAC Engineers.
Oct 10, 2014
Contents
Introduction
To Use a Static IP Address for Licensekey Updates
To Install the Keys Manually
Introduction
The IronPort Encryption Appliance (IEA) Release 6.3 or later checks for new keys once daily. If it finds new
keys, it will update the license file accordingly. This process is an outbound call on port 80 from the IEA to
http://downloads−static.ironport.com (by default).
To verify the status of the keys on the IEA GUI, go to Home > Monitor Server.  You will see the License
Information presented.
The license key downloads will happen daily, as long as they are scheduled. It is set to run once a day. To see
the schedule go to Administration > Scheduled Tasks.  You can run the task using the Run Now button.
To Use a Static IP Address for Licensekey Updates
If you need to use a static IP from the IEA for updates, two files need to be modified to use
http://downloads−static.ironport.com (204.15.82.8).
Change the link in the pxeconf.xml.
Edit the line:
<entry desc="$msg.svc.scheduler.licenseremind.url.desc"
label="$msg.svc.scheduler.licenseremind.url.label" name="Url" required="1"
value="http://downloads.ironport.com/asyncos/fkey"/>
Change the "http://downloads.ironport.com/asyncos/fkey" to
"http://downloads−static.ironport.com/asyncos/fkey".
1. 
Edit the postx.license file located in /usr/local/postx/server_6.3/conf/lm directory.
Change the "http://downloads.ironport.com/asyncos/fkey"
to "http://downloads−static.ironport.com/asyncos/fkey".
2. 
To Install the Keys Manually
ssh to the appliance and 'su −' to root (hit 'x' from the admin menu to drop to the shell; note this is a
hidden option in 6.3).
•