Activate a License for Prisma SD-WAN Through

Common Services

Log in with your email address.
If you have a Palo Alto Networks Customer Support account, then enter the email address you used when you registered for that account and select
Next
.
If you do not have a Palo Alto Networks Customer Support account, then
Create a New Account
Password
Next
.
The service uses this email address for the user account assigned to the tenant that you use for this license. This tenant, and any others created by this email address, will have the
Multitenant Superuser
role.
Choose the
Customer Support Account
number that you want to use to claim the license.

Allocate the subscription to the recipients of your choice.
For Managed Security Service Providers (MSSPs) and distributed enterprises, you can allocate the subscription directly on any tenant in the hierarchy. What is a tenant? For an SD-WAN tenant, allocating the license at the child-level automatically provisions it at the top-most, root-level, parent SD-WAN tenant as well. This enables the parent tenant to do ION device management for the child tenants.
After activation, you can build out your tenant hierarchy as needed. You can create your tenant hierarchy to reflect your existing organizational structure. You can also consider identity and access inheritance when creating the hierarchy, in addition to tenant hierarchy limits.
However, any tenants that you create between the child tenant and the top-most, root-level, parent tenant do not get automatically provisioned with the license. That is a one-time process that happens only at activation.
Create a new tenant from
All Tenants +
.

Name the tenant and select
Done
.

(
Optional
) For Managed Security Service Providers (MSSPs) and distributed enterprises, create a new child tenant by selecting
+
from the parent tenant that you previously created.

(
Optional
) Name the child tenant and select
Done
.

Select the
Region
nearest to the storage location of the data logs.
There is no cross-region aggregation. Make sure that all your tenants are in the same region for monitoring purposes.
Agree to the Terms and Conditions
.
Activate Now
. The products and add-ons that you are activating (such as Prisma SD-WAN or Cortex Data Lake) are now provisioned. As the subscriptions are activating, the progress status will display. When the process is complete, the tenant status displays as
Up
. You now have a tenant provisioned with instances of the products that you purchased. The tenant has one user — the account that you used when you began this process.
To complete the product setup, you must access the products you purchased and perform any required post-installation configuration. For information about your products, see:
Prisma SD-WAN Administrator’s Guide
Open APIs
Cortex Data Lake Getting Started Guide
(
Optional
) In a multitenant hierarchy, monitor your tenants with the Prisma SD-WAN Summary Dashboard.
(
Optional
) add user access and assign roles.
For Managed Security Service Provider (MSSP) and distributed enterprise admins who build out the tenant hierarchy after activation, make sure to activate the Prisma SD-WAN licenses on all the child tenants. This allows you to allocate Prisma SD-WAN devices from the root tenant to any child tenant in the hierarchy.
Use one of the various ways to access
Subscriptions & Add-ons
.
Search or scroll to find the subscription that you want to modify, and select
Actions
Activate Cloud Tenant

You are automatically directed to the activation UI to activate the license on the child tenant.
Select the
child tenant
as the recipient.
Select the
region
.
Agree to the
Terms and Conditions
, and
Activate
.
You are automatically directed to
Tenant Management
. As the subscriptions are activating, the progress status will display. When the process is complete, the tenant status displays as Up. You now have a child tenant provisioned with instances of the products that you purchased.
Repeat for all child tenants in the hierarchy.