>
    Strata Copilot
    Update the HSF Offline License Profile
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma AIRS
    3. Administration
    4. Prisma AIRS as a Firewall - Hyperscale Security Fabric
    5. Offline Licensing for an ESXi HSF Cluster
    6. Update the HSF Offline License Profile
    Download PDF
    Prisma AIRS

    Update the HSF Offline License Profile

    Table of Contents

    Update the HSF Offline License Profile

    Update an existing offline license profile to apply capacity changes, subscription updates, or vCPU adjustments to your HSF cluster.
    Where Can I Use This?What Do I Need?
    • Prisma AIRS
    • Software NGFW Credits
    • HSF subscription license
    • Software Firewall License plugin installed on Panorama
    • Software Firewall Orchestration plugin installed on Panorama
    • Customer Support Portal deployment profile with Air Gap licensing enabled
    • Panorama Air-Gap License JSON file
    Use this procedure to update an offline license profile after you change the number of vCPUs, increase the node count, or add subscriptions in the Customer Support Portal. You update the deployment profile in Customer Support Portal first, download a new Air-Gap License JSON file, and then apply the changes in both the Software Firewall License plugin and the Software Firewall Orchestration plugin on Panorama.
    1. Update the deployment profile in Customer Support Portal.
      1. Log in to the Customer Support Portal and open the deployment profile associated with the license profile you want to update.
      2. Make your changes — for example, update the number of vCPUs, increase the number of firewalls, or add a subscription — in the deployment profile.
      3. Download the updated Panorama Air-Gap License JSON file.
    2. Update the license profile in the Software Firewall License plugin.
      1. In Panorama, select PanoramaPluginsSW Firewall LicenseOffline License.
      2. Select the offline license profile used by your HSF cluster.
      3. Click Edit.
      4. Click Browse and select the updated Air-Gap License JSON file you downloaded in the previous step.
      5. Click OK and commit the change to Panorama.
    3. Update the desired firewall or vCPU count in the orchestration plugin.
      1. In Panorama, select PanoramaPluginsSWFW OrchestrationDeployments.
      2. Open the HSF deployment and update the vCPU count to match the new value from your Customer Support Portal profile.
      3. Commit the changes to Panorama, then click Update Deployment to apply the changes to the cluster.
        If you modify a subscription in the Customer Support Portal, execute request license fetch <authcode> on individual nodes to retrieve the updated licenses.

    © 2026 Palo Alto Networks, Inc. All rights reserved.