http://www.cisco.com/go/license
smart account -> virtual account
PAKs or TOKENS view is default
Get licenses -> From a new PAK -> Next
Usually you need the serial number from the device. If updating ASA always use the serial from the primary ASA.
