APIC software mismatch error

Trying to bring up lab test set up with ASR1004(RP2) with software image asr1000rp2-adventerprisek9.03.16.04a.S.155-3.S4a-ext. in APIC-EM IWAN as BR, it is showing the below warnings.

 Device does not have required license

 Warning:

 Required licenses not enabled on device.

Enable the licenses for the platform in use.

Example:

•   AX (Application Experience K9) "appxk9" is needed for the ISR4K platforms   

•   Adventerprisek9 or Advipservicesk9 is needed for ASR 1K platforms

running version 1.2.1.686

Are you trying to use these  devices with this image for iWAN. If yes, you better take care of these warnings. If not, it's likely to fail in some of the CLIs that iWAN will push. E.g. CLIs that configure crypto IPSec profile on devices, and provision it under tunnels, Crypto IKEv2 profile etc.

The warnings are legitimate. iWAN do run certain validation checks on devices you try to bring into APIC-EM. Licensing related checks is just one of the items in that comprehensive checklist. The idea of having them as "Warning only" versus "must fix" is something that can deliberate at length. However, absence of such licenses would cause failures in various provisioning workflows downstream and hence we flag and ask user to take care of these warnings appropriately.

 Again, the licensing related warnings you are seeing have got nothing to do with the IOS image you have or the APIC-EM version you have. It has to do with actual licenses themselves, on your devices.

 A quick check would be to issue "sho license" command on the devices and make sure that the state of licenses being warned about is "Active, In Use". If not, you have to accept the EULA for corresponding license (from configuration mode, execute end user license agreement accept command). Additionally, if you want to move any license from "Eval Only" to "Permanent" use, there's "license move" command for that (from privileged exec mode of the device)

 Once you take care of licenses, and revalidate the devices, you should not see these warnings again.

Having said that, 1.2.1.686 is the EFT build for iWAN and we never had iWAN in 1.2.1.X official release of APIC-EM. 1.3.0.4383 is the latest (final) release candidate under comprehensive tests across different teams including iWAN and barring any surprises, official release of APIC-EM containing iWAN 1.3.0.X) should be out any day soon.

 We are going to ignore this version mismatch message for now and will proceed further, thank you for the inputs.