>
    Strata Copilot
    Activate the AI Access Security License
    Focus
    Download PDF
    Focus
    1. Home
    2. AI Access Security
    3. Activate the AI Access Security License
    Download PDF
    AI Access Security

    Activate the AI Access Security License

    Table of Contents

    Activate the AI Access Security License

    Activate the AI Access Security for new and existing users.
    Important
    Palo Alto Networks is rolling out a new, unified activation experience in stages. For supported SASE products, you might see the new activation console now, or you maybe directed to use the Hub for activation until the update reaches your tenant.
    Where Can I Use This?What Do I Need?
    • NGFW (Managed by Panorama or Strata Cloud Manager)
    • Prisma Access (Managed by Panorama or Strata Cloud Manager)
    • Strata Logging Service license
    And one of the following:
    • AI Access Security license
    • CASB-PA license
    • CASB-X license
    If you have a Prisma Browser Standalone License, you don't need to perform any additional setup prerequisites, activation, and license renewal procedures since AI Access Security capabilities are natively part of Prisma Browser.
    Activate your AI Access Security license to enable your organization to safely adopt generative AI (GenAI) applications by your employees. AI Access Security activation is performed using a link provided by Palo Alto Networks after purchase of the AI Access Security license. These procedures assume you already have all the required license auth codes and links required for activation.
    After you purchase your AI Access Security license, you must activate the license using a link sent to you by Palo Alto Networks. AI Access Security is included when you activate a CASB-PA or CASB-X license. No further action is required to activate the AI Access Security after you activate a CASB-PA or CASB-X license.

    Activate the AI Access Security License (New Deployments)

    Activate the AI Access Security for a new NGFW (Managed by Panorama) or NGFW (Managed by Strata Cloud Manager) user.
    1. Install and perform the initial configuration for your NGFW.
      This includes activating all the required support licenses.
    2. Set up management for your NGFW or Prisma Access tenant.
    3. Set up Enterprise Data Loss Prevention (E-DLP).
    4. Click the Login to Activate link in the email provided to you by Palo Alto Networks when you purchase the AI Access Security subscription.
    5. Enter your Palo Alto Networks Customer Support Portal (CSP) Email Address. This email address must match the email address that received the link to activate AI Access Security.
    6. In the Manage Subscriptions page, choose the product you want to activate and Activate.
    7. On the activation page, specify the tenant, region and Activate Now to begin activating AI Access Security.
    8. You can either View Details of the subscription or Launch your AI Access Security instance.
    9. Verify that your Data Loss Prevention instance is selected if you have Enterprise Data Loss Prevention (E-DLP) active on your tenant.
      Your Enterprise DLP instance is selected by default if active already on your tenant.
      Skip this step if you don't have Enterprise DLP already active. Enterprise DLP is not required to enable AI Access Security. If Enterprise DLP instance is not already active then one is created as part of the license activation. Review what happens to Enterprise DLP if you don't renew your AI Access Security license.
    10. (NGFW only) Associate the AI Access Security license with your NGFW.
      Associating the AI Access Security license is required to activate the license for your NGFW.
      1. In the Strata Cloud Manager menu, select System SettingsDevice Associations.
        The Strata Cloud Manager menu is located in the bottom-left corner of Strata Cloud Manager.
      2. Associate Apps.
      3. In the Licensed Products, select Data Security.
      4. Select the NGFW for which you want to activate AI Access Security.
      5. Save.
    11. Verify you successfully activated AI Access Security.
      1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
      2. Select ProductsAssets.
      3. Select NGFW or Prisma Access tenant based on the enforcement point for which you activated AI Access Security.
      4. Use the filters to locate your NGFW or Prisma Access tenant.
      5. Expand the list of active licenses or click Licenses & Subscriptions.
      6. Verify that the AI Access Security license is active.
    12. Get Started with AI Access Security.

    Activate the AI Access Security License (Existing Deployments)

    Activate the AI Access Security for existing NGFW or Prisma Access users managed by either a Panorama® management server or Strata Cloud Manager.
    This procedure assumes you only need to activate the AI Access Security license and that all prerequisite licenses are active and have successfully set up your NGFW, Prisma Access, Panorama® management server, and Strata Cloud Manager as needed.
    1. Click the Login to Activate link in the email provided to you by Palo Alto Networks when you purchase the AI Access Security subscription.
    2. Enter your Palo Alto Networks Customer Support Portal (CSP) Email Address. This email address must match the email address that received the link to activate AI Access Security.
    3. In the Manage Subscriptions page, choose the product you want to activate and Activate.
    4. On the activation page, specify the tenant, region and Activate Now to begin activating AI Access Security.
    5. After the activation is complete, you can either View Details of the subscription or Launch your AI Access Security instance.
    6. Verify that your Data Loss Prevention instance is selected if you have Enterprise Data Loss Prevention (E-DLP) active on your tenant.
      Your Enterprise DLP instance is selected by default if active already on your tenant.
      Skip this step if you don't have Enterprise DLP already active. Enterprise DLP is not required to enable AI Access Security. If Enterprise DLP instance is not already active then one is created as part of the license activation. Review what happens to Enterprise DLP if you don't renew your AI Access Security license.
    7. (NGFW only) Associate the AI Access Security license with your NGFW.
      Associating the AI Access Security license is required to activate the license for your NGFW.
      1. In the Strata Cloud Manager menu, select System SettingsDevice Associations.
        The Strata Cloud Manager menu is located in the bottom-left corner of Strata Cloud Manager.
      2. Associate Apps.
      3. In the Licensed Products, select Data Security.
      4. Select the NGFW for which you want to activate AI Access Security.
      5. Save.
    8. Verify you successfully activated AI Access Security.
      1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
      2. Select ProductsAssets.
      3. Select NGFW or Prisma Access tenant based on the enforcement point for which you activated AI Access Security.
      4. Use the filters to locate your NGFW or Prisma Access tenant.
      5. Expand the list of active licenses or click Licenses & Subscriptions.
      6. Verify that the AI Access Security license is active.
    9. Get Started with AI Access Security.

    © 2026 Palo Alto Networks, Inc. All rights reserved.