CSSM On-Prem and EZ-Register

Overview
Partner Training

Shashank Gopal, Neelima, Parakala, and Tem Mohamed

Mass Scale Infrastructure Group
July 20, 2022
 1 Recap of Smart Licensing Training – June 29

2 CSSM On-Prem Overview

AGENDA
3 EZ-Register Overview

4 Smart Licensing Training Videos

5 Helpful Resources
© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
Recap of Smart Licensing
Overview– June 29

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
What is Smart Licensing ?
• Smart Licensing is a flexible software licensing model that simplifies the way you activate
and manage licenses across your organization.
• The Smart Licensing model makes it easier to procure, deploy, and manage your Cisco
software licenses.

Commerce Smart CISCO

CCW Account Product
Hello, I am Device-one, I belong to
I have purchased 2 additional Company_ABC and I am using 1x
“Advanced” Licenses for Advanced License
Company_ABC

Hello, you are Device-one,

belonging to Company_ABC and
the tech department, you are ’In-
Compliance’
Company_ABC

I own: + 2
I am using: + 1
© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 4
 PAK = Product Authorization
Key

Smart Licensing Advantages

Software,
Easy Registration services, and
devices at one
Pool of
Complete Visibility No easy-to-use
Licenses
PAKs portal
License Pooling
License Portability
Company Specific
Share
Licenses
Unlocked across devices
Licenses can be Add users
of same
Cost Reduction Transferred across and licenses
organization
Virtual accounts as needed
Compliance Reporting

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5
Smart Licensing Supported Platforms
Access (NCS 5xx) Edge (ASR 9000) Whitebox

NCS 560-4 / XR
NCS 560-7 / XR
IOSXR SW on 3rd
Party Hardware
NCS 540 / XR

9904 9006 9906 9010 9910 9912 9922

NCS 540 BB Series / XR

Core (NCS 5500) Core (8000)

NCS-5516-SYS
NCS 5502 / NCS- 5508-SYS
55A1/ 55A2
NCS-5504-SYS

Cisco 8202

Cisco 8201 Cisco 8808 Cisco 8812 Cisco 8818

NCS-5501-SYS NCS-5501-SE-SYS
© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6
 Registration to CSSM/On-Prem License
Management
Have licenses
Activation Registration
Device / Product Registration with your In-Compliance
Smart Account Smart Account
Start Device/
platform Continual reporting to
Obtain Registration Register the Feature usage Smart Software
Token from Software with the reported to Cisco Manager or On-Prem
Cisco Smart Token from Cisco Smart Software
Software Smart Software Manager/ On-
Manager/On-Prem Manager/On-Prem Prem
Smart (Customer Smart
Software Account identified)
Licensing
Enabled by Out-of-
Default
Token Usage Compliance
Need more licenses
CSSM/On-Prem Software CSSM/On-Prem

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7

7
Smart Licensing Deployment Options
1. Direct cloud access through HTTPs

2. Direct cloud access through an HTTPs Proxy

3. Mediated access through an on-premises

collector-connected

4. Mediated access through an on-premises

collector-disconnected

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8
Smart Licensing Configuration Workflow

1. Purchase devices and licenses from https://apps.cisco.com/Commerce/home

2. Install CSSM On-Prem or Direct cloud access
3. Configure Smart Call Home on device
4. Configure Flexible Consumption Model (FCM)
5. Create a token in CSSM On-Prem
6. Register Smart Licensing on Device with the token
7. Manage Licenses in CSSM On-Prem

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9
 Smart Licensing Training Videos

Topic Content Link to Presentation and Video

• How Smart Licensing Works

• Smart Account/Virtual Account Overview
https://salesconnect.cisco.com/#/content-
• Smart Licensing Deployment Options
Smart Licensing Overview detail/c68c3e95-26da-465f-ada6-
• Smart Licensing Registration
11605af2fe74
• Product Licensing States
• Smart Account/Virtual Account Demo
• CSSM On-Prem Overview
• CSSM On-Prem Deployment https://salesconnect.cisco.com/#/content-
CSSM On-Prem Overview • Registration to CSSM On-Prem detail/e6b118fc-364a-4913-a196-
• Synchronization with CSSM bcff9d1749d3
• Product License Reporting
• Smart Licensing Registration Process
https://salesconnect.cisco.com/#/content-
• Registration Configuration Workflow
EZ-Register Overview detail/626b1438-5692-4f42-9632-
• EZ-Register Overview
93e042fb0698
• EZ-Register Demo

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10
CSSM On-Prem Overview

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
What is Smart Software Manager (SSM) On-Prem?

A Smart Software Manager On-Prem is…

• A component of Cisco Smart Licensing and works in conjunction
with the cloud-based Cisco Smart Software Manager (SSM)

A Smart Software Manager On-Prem is ideal for…

• Customers who have strict security requirements and do not want
their products to communicate with the central licensing database
on Smart Software Manager over a direct Internet connection

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12
 SSM On-Prem – Deployment Model Overview
Smart Software Manager
On-Prem

Service Providers Cisco Partners Large Enterprises

Supports multiple Scales up to 300,000 Provides online or offline Similar User Interface to Security built-in
Local Accounts products and 500 Local connectivity Cisco SSM to increase resiliency and
Accounts trustworthiness.

To get a more detailed description of Smart Software Manager On-Prem solutions in the User Guide
© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13
https://www.cisco.com/go/smartlicensing
Key Features in SSM On-Prem
Multi-tenancy: Manage multiple Local Accounts in a single management portal
• Support for Multiple Local Accounts
• Multiple levels of RBAC (Admin, Operator, User)

Data Privacy:
• Restrict Product information (hostname, ip, etc.) from being sent to Cisco
• Auditable data exchange between SSM On-Prem and Cisco
• Local User Authentication Control: LDAP, Active Directory
• Local User Accounts limit need for users to have a Cisco CCOid or access to Cisco Smart Account

Networking Support
• IPv4 and IPv6 support
• Multi-NIC: multiple interfaces for traffic separation between network management and product instance registrations.
• Proxy support: Allow for SSM On-Prem to have a proxy between itself and Cisco
• Firewall Zones: Ability to configure interfaces for Internal (access) or External (no access)

System Alerts and Notifications

• Email and Syslog support: Account events can be configured to be sent to a syslog server

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 14
Key Features in SSM On-Prem
New License Features
• License AppHA: Allows for the reporting of a single license usage for both standby and active Applications
• License Hierarchy: Enable borrowing of a higher-tier license to be fulfilled when a lower tier license is not
available

API Support
• Resource and Owner credentials grant supported
• 5 major API groups for over 15 unique APIs

Longer Sync Intervals

• Native 365-day Synchronization Schedule
• Allow SSM On-Prem to functions as long as it synchronizes with Cisco once a year.

Improved Scalability
• 500+ accounts
• 300,000 Product Instances (25000 per Local Account)

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 15
On-Prem Local Account Overview
• Flexible Account Setup models
• A Local Accounts map to a Cisco Smart Account/Virtual Account
• Single Smart Account mapping to Multiple On-Prem Accounts
• Multiple Smart Account mapping to Multiple On-Prem Accounts
Cisco
Smart Account

Virtual Account

SSM On-Prem Local Account

Local Virtual Account (DEFAULT)
• Datacenter assets
• Headquarters staff assets

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16
On-Prem Admin / User Portals

Licensing Portal Administration Portal

Enables internal administrative functions
Similar functionality to software.cisco.com including user control, account management,
registration, synchronization, and much more

Supports additional functionality including

Users can manage their local accounts, users,
external authentication, syslog and proxy
product instances, devices and licenses
support

Users can create new local accounts, request

access to local accounts and manage local Restricted to only authorized users
accounts and local virtual accounts

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17
On-Prem User Roles (RBAC)
Administration Portal Roles Licensing Portal Roles
System Admins
Have all of the abilities as the System Similar to CSSM Smart Account and Virtual Account roles
Operator plus they can approve and but at the local level within the SSM On-Prem.
delete local accounts and complete all
system configurations
Local Account Admins

Local Account Users

System Operators System Users
Have full admin access to all Has No permission on
the local accounts, can
perform local Account
the Admin portal. Local Virtual Account Admins
registration/synchronization, Access to Local
& can not change system Accounts based on
configurations Licensing Portal Roles Local Virtual Account Users

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18
 On-Prem - Setup/Registration

Kickstart Network User Request Approve Account On-Prem Manage

Installation Configuration New Account Request Operational Account

or Register an
System
Account to Cisco
Configuration Request Product
SSM
Access to An Registration
Existing
User Creation/ Account
Authorization ✓ Admin to approve
Periodic Sync
Account
✓ Downloads ISO ✓ Customer ✓ User logs in ✓ Admin needs the
from cisco.com configures VM and selects following info:
and installs with IP address, Request o Cisco Smart Account
DNS, NTP Account o Cisco Virtual Account
o Cisco UserID and
password
First-time User Login is Licensing Admin
“admin/CiscoAdmin!2345” Workspace Workspace
© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19
Cisco SSM On-Prem – 5 step installation

Support for physical or

virtual deployment of
Cisco SSM On-Prem
License Server

Enter IP Change Finalize Register

Install ISO Installation
address Credentials Account
200 GB Hard Disk
Enter IP and Shell/GUI PWD, Finalize Enter NTP and
8GB Memory Subnet/Prefix, Language, Host installation and Register Local
4 vCPUs and DNS Common Name bring up On-Prem Account with
100000 products server Cisco
© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20
EZ-Register Overview

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21
What is Cisco EZ-Register?

• Cisco EZ-Register is a simplified automated mechanism to register multiple

Mass Scale Infrastructure Group (MIG) networking devices with Cisco
Smart Software Manager (CSSM)

• Cisco EZ-Register utilizes an input file that is configured by the network

administrator

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22
Steps Prior to Using Cisco EZ-Register (1/2)

1. Boot Router(s)

2. Download On-Prem ISO image here

3. Install CSSM On-Prem (click here for instructions)

4. Setup Python environment

5. Install all dependencies (netmiko, requests, json, xlrd, xlwt,

time) using the standard python package manager pip
© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23
Steps Prior to Using Cisco EZ-Register (2/2)
6. Create Client Credentials in CSSM On-Prem
CSSM On-Prem -> Admin Workspace -> API Toolkit -> Client Credentials Grant

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24
Cisco EZ-Register Process for CSSM On Prem

1. Configure Input file

2. Execute EZ-Register Script

3. Verify Successful Completion

Note: Details for each step in following slides

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25
 1. Configure Input file (1/2)

Download input file template using this link and enter details
Device’s Unique Device Login CSSM New Encryption
Identity for the
Device Login
Credentials CSSM Smart CSSM Virtual Flexible CSSM New
Token Expire Functionality for
Network
Credentials Account Name Consumptio Token Products
Password Account Name After No. of Registered with
Username n Model Description
Days this New Token

Token Token
Token
Hostname Username Password Smart Account Expiration Virtual Account
Export FCM
Description
(Days) Controlled
Enter Enter Allowed/
Enter Device Enter Virtual Enter Token
Device Device Enter Smart Account Name Yes/No Enter 1-365 Not
Hostname Account Name Description
Username Password Allowed
Example InternalTestDemoAccount8.cisco.co Not
10.30.111.171 cisco cisco123 DEV_SP_SL_VORTEX Yes SL Script Test 30
m Allowed
First 9 input file fields; Remaining 4 fields on next slide;

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26
1. Configure Input file (2/2)
Download input file template using this link and enter details
CSSM On-Prem -> Admin CSSM On-Prem -> Admin Provide the VRF
CSSM On-Prem Server Workspace -> API Toolkit -> Workspace -> API Toolkit -> Client Instance Name on
IP Address Client Credentials Grant -> Copy Credentials Grant -> Copy Client which CSSM
Client ID and Paste here Secret and Paste here communicates

On-Prem IP Address On-Prem Client ID On-Prem Client Secret VRF

Enter On-Prem IP Address Enter On-Prem Client ID Enter On-Prem Client Secret VRF Instance Name
oC65tQ1MgNWqkBbb3oxhu- 1vBEv57qfdf50T-
Example 10.30.111.188 T0nGIjixQ_UUtdlaXJ-s_-a8Mk- pSA6oSuIwPUa7a65nONzs7RoILA2 MGMT
m7smPhq7C6QBFYP ey9O1bOjKdm4duM4Vb_xt

Last 4 input fields; First 9 fields in the previous slide

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27
2. Execute EZ-Register Script
Execute this python script by providing input file location as command line argument
./ez_register_onprem.py ~/ez_register_inputfiles/ez_register_onprem.xlsx

How the script works ?

Return
Create/ Success/Fail
Register Confirm
Configur Enable ure to
Read Retrieve Log onto Device Success/
e Smart FCM if Output File
Input File Registrati Device using
Licensing Specified Failure (ez_register_
on Token Token
onprem_out
put.xlsx)

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28
3. Verify Successful Completion
Registration status of the devices are provided in the output file

Hostname Username SL Registration Status

10.30.111.171 cisco success

10.30.111.170 cisco failed

• If registration fails, review detailed logs by entering “show logging” on the device
• Verify the license status, configuration and connectivity of the failed devices
• Execute the script again with the same input file or failed device details in the new
input file

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29
Smart Licensing
Training Videos

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30
 Smart Licensing Training Videos

Topic Content Link to Presentation and Video

• How Smart Licensing Works

• Smart Account/Virtual Account Overview
https://salesconnect.cisco.com/#/content-
• Smart Licensing Deployment Options
Smart Licensing Overview detail/c68c3e95-26da-465f-ada6-
• Smart Licensing Registration
11605af2fe74
• Product Licensing States
• Smart Account/Virtual Account Demo
• CSSM On-Prem Overview
• CSSM On-Prem Deployment https://salesconnect.cisco.com/#/content-
CSSM On-Prem Overview • Registration to CSSM On-Prem detail/e6b118fc-364a-4913-a196-
• Synchronization with CSSM bcff9d1749d3
• Product License Reporting
• Smart Licensing Registration Process
https://salesconnect.cisco.com/#/content-
• Registration Configuration Workflow
EZ-Register Overview detail/626b1438-5692-4f42-9632-
• EZ-Register Overview
93e042fb0698
• EZ-Register Demo

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31
 Call to Action
• Watch our deep dive training videos to learn more

• Enable Customers to Register Devices

• Benefits of Smart Licensing

• Smart Licensing offers Cisco Smart Software Manager (CSSM), a centralized portal that enables you to manage all your Cisco
software licenses from one centralized website
• Smart Licensing provides different direct and mediated access options, to establish a connection between Cisco routers and
CSSM/CSSM On-Prem
• View and Manage the licenses being used across your organization

• Create a TAC/GLO case if you require assistance

• Instructions in helpful resources section
© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32
 Helpful Resources

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33
Resources for Smart Licensing

Websites and Learning Materials Training

• To learn more about Smart Licensing, go to: • YouTube Training Videos:
https://www.youtube.com/channel/UCABaWsiDScw_w6kvPcDIjHw
– www.cisco.com/go/smartlicensing
• Training Videos and Demos: https://community.cisco.com/t5/smart-
– Cisco Smart Licensing White Paper
licensing-enterprise/software-on-demand-training-resources-for-
– Smart Licensing Overview for MIG Routing customers/ta-p/3639797
• To learn more about Cisco Smart Accounts, go to:
www.cisco.com/go/smartaccounts
• To learn more about CSSM OnPrem, go to:
www.cisco.com/go/smartsatellite
• To set up/manage a Smart Account or manage Smart Licenses, go to:
https://software.cisco.com

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34
 Case Management for Licensing Support (1/2)

1. Log in to Support Case Manager (SCM):

http://www.cisco.com/go/scm

2. Select a topic that closely aligns to your

issue/problem. By hovering over the topic, you can
read a brief description.

3. Click Open Case

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 35
Case Management for Licensing Support (2/2)
4. After clicking Open Case, you will be asked to complete
a questionnaire detailing the nature of the problem.
The Problem Description must include detailed
explanation of issue.
After completing the questionnaire, click Submit Case.
5.
Clicking Submit Case will generate a case number.
Please refer this case number in all your communication
with Cisco.

© 2022 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 36