When a license has expired, you will periodically see the following message type:
Jun 13 11:50:11 <Device hostname> license-check[<PID>]: LICENSE_EXPIRED_KEY_DELETED: License key "<license key serial>" has expired.
Example from Juniper lab
Jun 4 02:24:46 jtac-SRX5800-r037 license-check[10117]: LICENSE_EXPIRED_KEY_DELETED: License key "DemoLabJUNOS428160838" has expired.
Jun 6 10:32:21 jtac-SRX5800-r037 license-check[10117]: LICENSE_EXPIRED_KEY_DELETED: License key "DemoLabJUNOS428160838" has expired.
Jun 12 13:37:35 jtac-SRX5800-r037 license-check[10117]: LICENSE_EXPIRED_KEY_DELETED: License key "DemoLabJUNOS428160838" has expired.
Jun 13 07:12:49 jtac-SRX5800-r037 alarmd[47959]: LICENSE_EXPIRED_KEY_DELETED: License key "DemoLabJUNOS428160838" has expired.
Jun 13 11:39:55 jtac-SRX5800-r037 license-check[10117]: LICENSE_EXPIRED_KEY_DELETED: License key "DemoLabJUNOS428160838" has expired.
Jun 13 11:40:02 jtac-SRX5800-r037 license-check[10117]: LICENSE_EXPIRED_KEY_DELETED: License key "DemoLabJUNOS428160838" has expired.
This indicates that this license has been deleted from the running system configuration. You will most commonly see these messages after a commit or restart of the device.
Expired licenses are not automatically deleted from the device. they may be needed for reference, and we do not want to delete them in the event that the date on the box is temporarily incorrect.
These are informational messages only about expired licenses. To stop the messages, we will need to delete the expired keys from the license database.
First, check the current license output:
node1:--------------------------------------------------------------------------Current time: 2025-06-13 12:04:12 PDTTime Source: NTP CLOCK System booted: 2025-03-12 09:04:58 PDT (13w2d 02:59 ago)Last configured: 2025-05-22 14:25:41 PDT (3w0d 21:38 ago) by labroot12:04PM up 93 days, 2:59, 2 users, load averages: 0.17, 0.19, 0.17
{secondary:node1}
root@jtac-SRX5800-r037> show system license | no-more
License usage:
Licenses Licenses Licenses Expiry
Feature name used installed needed
idp-sig 0 1 0 2026-06-13 17:00:00 PDT
appid-sig 0 1 0 2026-06-13 17:00:00 PDT
wf_key_websense_ewf 0 1 0 2026-06-13 17:00:00 PDT
remote-access-ipsec-vpn-client 0 2 0 permanent
av-key-avira-engine 0 1 0 2026-06-13 17:00:00 PDT
remote-access-juniper-std 0 2 0 permanent
Licenses installed:
License identifier: DemoLabJUNOS428160838
License version: 4
Valid for device: JN1159C59AGA
Customer ID: Juniper Internal
Features:
idp-sig - IDP Signature
date-based, 2024-04-01 17:00:00 PDT - 2025-04-02 17:00:00 PDT
License identifier: DemolabJUNOS374421423
appid-sig - APPID Signature
date-based, 2025-06-12 17:00:00 PDT - 2026-06-13 17:00:00 PDT
wf_key_websense_ewf - Web Filtering EWF
av-key-avira-engine - Anti Virus with Avira Engine
root@jtac-SRX5800-r037>
We see that we do have current licenses as well as the expired one from the logs.
Next, we should output the keys as a backup in case the wrong license is accidentally deleted.
root@jtac-SRX5800-r037> show system license keys
DemoLabJUNOS428160838 aeaqia qmjjhd cmjvhf btkokb i5aqqb qcdxgw
ptwvbq ieu5lo nfygk4 rajfxh izlsnz qwybzi
iih5nd prfenr lo5sqj nfzpom dqfupj xzqd6s
yiqkp3 dpl5oi 4w7qn4 v42kvf mkzmlc aq
DemolabJUNOS374421423 aeaqia qmjjhd cmjvhf btkokb i5aqqg iciphr
zuekaj z46hgq ribb3t y42cfa fahrz4 onbcqm
cbfhk3 tjobsx eicjnz 2gk4to mfwaok cf43qa
aoqmaa c2zbyc ycxtzy vfnoay wvyz3v 7e6d6k
arf2c3 6hiuvw vvvboq kpxxu4 fi
Then we can delete the expired license.
root@jtac-SRX5800-r037> request system license delete DemoLabJUNOS428160838
Delete license DemoLabJUNOS428160838 ?
[yes,no] (no) yes
The messages should then no longer appear for the delete license.
If the wrong license is deleted:
root@jtac-SRX5800-r037> request system license delete DemolabJUNOS374421423
Delete license DemolabJUNOS374421423 ?
root@jtac-SRX5800-r037> show system license
Licenses installed: none
We can then re-add it from the keys backup we did above.
root@jtac-SRX5800-r037> request system license add terminal
[Type ^D at a new line to end input,
enter blank line between each license key]
DemolabJUNOS374421423: successfully added
add license complete (no errors)
After "request system license add terminal" press enter. then paste in the entire key from the Key serial number to the last line. Press enter again, and then press ctrl+d to apply and exit.
And now we have only the current license installed.
If the complete show system license output only shows expired licenses:
{primary:node0}root@jtac-SRX5800-r036> show system license License usage: Licenses Licenses Licenses Expiry Feature name used installed needed remote-access-ipsec-vpn-client 0 2 0 permanent remote-access-juniper-std 0 2 0 permanent
Licenses installed: License identifier: DemoLabJUNOS547985269 License version: 4 Valid for device: JN11C6E92AGA Customer ID: Juniper Internal Features: idp-sig - IDP Signature date-based, 2024-04-01 17:00:00 PDT - 2025-04-02 17:00:00 PDT
{primary:node0}root@jtac-SRX5800-r036>
You will need to reach out to your Juniper account or sales representative to purchase licenses. If the device should be under auto-renewal, verify if auto-update is configured and working, and also double check with your Juniper account team that the serial number is subscribed for auto-update.
Please see KB33091 to see how to verify the licenses in the Juniper portal. [juniper.net]
Please see KB14103 to verify license autoupdate is functioning. [juniper.net]
2025-06-13 : Article Created
2025-06-13 : Added links to supporting KBs.