claim PAKS from Cisco

http://www.cisco.com/go/license

smart account -> virtual account

PAKs or TOKENS view is default

Get licenses -> From a new PAK -> Next

Usually you need the serial number from the device. If updating ASA always use the serial from the primary ASA.