If any feature is missing (e.g., IPsec VPN), the universalk9 image might require a or permanent license :
Let's slice the filename into its logical components: cat4500e-universalk9.spa.03.11.00.e.152-7.e.bin