Hello, I've read the product doc and discussions on this forum, yet every time I have tried to upgrade an ASA from DES (K8) to 3DES/AES (K9) I end up with a K9 license that has downgraded my other licensed features and have to call TAC to get the proper key.

So, I'm looking for the actual procedure to upgrade an ASA from K8 to K9 without losing the features I purchased.

I know about the www/cisco.com/go/license link, and the https://tools.cisco.com/SWIFT/Licensing/PrivateRegistrationServlet link. First thing these ask for is a PAK number - what is that and where can it be found? The web page says "Enter the Product Authorization Key (PAK) below exactly as it appears on the label that accompanied the Cisco Information Packet." I have never seen an information packet with a PAK number.

So, the only other option is to follow the link for 3DES license for ASA - which results in a K9 but downgraded license - every time!

Maybe I'm missing something obvious but I haven't gotten past this point, any ideas?

Thanks