Activate an Add-on Enterprise License Agreement Through Common Services
Table of Contents
Activate an Add-on Enterprise License Agreement Through Common Services
Common Services
Learn how to activate an add-on Enterprise License Agreement
(ELA) on a tenant through
Common Services
.Where Can I Use
This? | What Do I Need? |
|---|---|
|
The add-on for ELA is a consumption model for large enterprises to assign
subscriptions in bulk to assets purchased from Palo Alto Networks.
ELA offers the flexibility to enable any of the following licenses that are supported
for a tenant or TSG:
You can start the ELA activation process in either the hub or Customer Support Portal
as described in the sections below.
Activate ELA AIOps for NGFW Premium Through Common Services
AIOps for NGFW Premium
Through Common Services
Learn how to activate a premium add-on Enterprise License Agreement (ELA) of
AIOps for NGFW Premium
on a tenant through Common Services
. - Use one of the following activation methods.
- Log into the hub and activate from :
- Log into the Customer Support Portal and activate from :
- You are automatically directed to , where you activate the subscription for your product.
- Select the sameTenantthat you used forCortex Data Lake, so that you can associate ELA for AIOps on the same tenant where you want AIOps to be applied.
- TheCustomer Support Accountis grayed out, but is auto-populated with the same CSP that you used forCortex Data Lake.
- TheRegionis grayed out, but is auto-populated with the same region that you used forCortex Data Lake.
- The UI shows if you haveCortex Data Lakeavailable in this tenant where you can apply ELA for AIOps.
- Agreeto the terms and conditions, andActivate.
- displays the status of the activation, such asinitializingorcomplete.
- After the status iscomplete, you must go to the tab to select the devices and apply ELA for AIOps on them: Device Associations.If the status is notcomplete, you cannot apply ELA for AIOps on the devices yet.
- After the status iscomplete, you can launch AIOps from one of the following options.
- Launch from email.
- Launch from the hub tile.
- Launch from .
- Get started with AIOps for NGFW.
- (Optional) Manage identity and access. Assign role of Superuser .The CSP-level access is not sufficient.
Activate ELA for IoT Security Through Common Services
Common Services
Learn how to activate an add-on Enterprise License Agreement (ELA) for IoT Security
on a tenant through
Common Services
. - Start the ELA activation process from either the hub or Customer Support Portal.Hub: Log in to the hub and, from the tenant view, click at the top of the page.
orCustomer Support Portal: Log in to your customer support portal account, select , and then clickELA-IoT Activation.
Whether you start in the hub or Customer Support Portal, both actions load a magic link that opens the Activate IoT Security page on the hub. - Activate the IoT Security ELA for a tenant service group.
- Choose an existing tenant service group (TSG) tenant or create a new one. A TSG essentially associates firewalls with applications such as IoT Security.
- Choose the firewall deployment region.
- Create a new IoT Security tenant URL by entering a unique subdomain to complete <subdomain>.iot.paloaltonetworks.com.This is the URL where you'll log in to your IoT Security portal.If you want to convert an existing IoT Security tenant from using one or more IoT Security licenses to an IoT Security Enterprise License Agreement, contact your Palo Alto Networks sales representative.
- Agreeto the terms and conditions and thenActivate.
- Go to the tab to add firewalls to the TSG tenant, associate them with the IoT Security app, and then apply the Enterprise IoT Security ELA to them: Device Associations.
- In the Customer Support Portal, select and view the entries in the License column for your firewalls to confirm that IoT Security is now applied to them.
- Continue setting up IoT Security to work with your firewalls.To log in to your IoT Security portal, return to Common Services on the hub and select theIoT Securitylink on either the Tenant Management page or the Device Associations page.For IoT Security (Enterprise IoT Security Plus, Industrial IoT Security, or Medical IoT Security), see Onboard IoT Security.For Enterprise IoT Security, see Onboard Enterprise IoT Security.
- (Optional) Manage identity and access to IoT Security.To create an IoT Security user with owner privileges plus the ability to generate one-time passwords (OTPs) and pre-shared keys (PSKs), add a user account in the Customer Support Portal and assign a Superuser role in the relevant tenant service group (TSG) in Identity & Access (this is described in the following steps.) To create an IoT Security user with all owner privileges except the ability to generate OTPs and PSKs, add the new user account in Identity & Access and assign a Superuser role in Identity & Access. To create an IoT Security user with read-only privileges, add a user account in Identity & Access and assign a View Only user role in Identity & Access.
- (Optional) Add a user account in the Customer Support Portal. New users only need to be added to the Customer Support Portal accounts if they need access to operate onboarding or offboarding tasks, such as generating OTPs and PSKs. To create a new user in the Customer Support Portal:
- Log in to the Customer Support Portal with superuser permissions, which allow you to create new user accounts.
- Select , enter the required information, and thenSubmit.
A new user account is created and added to the account as a member. An email notification is sent to the new user with login credentials. - Log in to the hub, navigate to .
- Users added in the Customer Support Portal are separate from users added in Identity & Access.
- To assign a role to the user you created, select the user,Assign Roles, chooseIoT Securityin Apps & Services, choose one of the options in Role, and thenAssign Role.