This is not true, you can request authorization from the device to the SSM On-Prem. You don't have to be connected to the CSSM. It is not until recently that I have had issues requesting hseck9 authorizations. https://www.cisco.com/c/en/us/td/docs/...