Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] How does the firewall download subscription keys from the entitlement server?



Article ID: KB3731 KB Last Updated: 19 Apr 2013Version: 10.0
This article provides information on how the firewall downloads subscription keys from the entitlement server.

  • Entitlement server

  • Deep Inspection / DI

  • Anti-Virus  / AV

  • UF

Note: For information on the difference between a subscription and a license, refer to KB9740 - What is the difference between a subscription and a license for the Juniper Firewall products?



In ScreenOS 5.0.0 or later, the firewall can download the subscription key from the entitlement server. These subscription keys include Trend Micro AV, Kaspersky AV, Deep Inspection, URL or Web Filtering, and Anti-Spam. Before downloading these subscription keys, the following parameters are required:

To download the key via the WebUI:

Go to Configuration > Update > ScreenOS/Keys and click Retrieve Subscriptions Now:

retrieve subscription

To download the key via the CLI:

Use the exec license-key update command:

ns5gt-> exec license-key update
License key was retrieved successfully.
Received identical license key.

When either of these two commands is invoked, the firewall contacts the entitlement server. The entitlement server looks at the serial number and checks the contracts that are associated with this device. A new subscription key is generated, based on the contract for that device.  This new generated key is then pushed to the firewall device.

A reboot of the device is required to activate the subscription keys on it.

Note: For information on loading a license key, refer to KB5485 - How do I load or upgrade my license key via the WebUI or the Command Line Interface (CLI)?

To download the key via NSM

Logon to NSM and from the Main toolbar, click Devices > Entitlement > Get Entitlement from Entitlement Server. Select the checkbox of the required device for entitlement and then click OK

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search