After running “exec license-key update”, the device outputs that the command failed.

When trying to update subscription keys, the following is displayed after executing the command “exec license-key update”:

The device was unable to reach the entitlement server to retrieve license keys
Failed command: exec license-key update.

You may have a connection problem where the device can’t connect to the entitlement server (e.g. DNS isn't setup, or the date and time aren't correct). If that is the case, please see KB3731 - How Does the Juniper Firewall Download Subscription Keys from the Entitlement Server? [juniper.net]

Or, you may simply not have any subscription keys available to use on the device. Subscription keys include:

• Antivirus
• Deep Inspection
• URL Filtering
• Antispam

If you haven’t purchased subscriptions for these services, then you may in fact be contacting the entitlement server just fine, but there aren’t any subscriptions available for the device; therefore, it returns and states that the update failed.

If you've purchased subscriptions, but haven't activated them, please see KB9861 - How to Activate and Install JUNOS License [juniper.net]

11-06-2025: Updated the link for archived article KB9731 [juniper.net] to active article KB9861 [juniper.net].