VM Auth Key Expiry

Where Can I Use This?	What Do I Need?
Cloud NGFW on Azure (Managed by Panorama)	Panorama 11.2 or later Panorama Azure Plugin version 5.2.3 or later Access to the Panorama CLI

When the VM-auth key used to register your Cloud NGFW for Azure resource with Panorama® expires, the resource can no longer authenticate with Panorama, causing it to display Unhealthy or Degraded status in the Azure portal. Force-creating a new auth key and providing a fresh registration string restores connectivity and returns the resource to a healthy state.

1. Verify that your Panorama Azure Plugin version is 5.2.3 or later.

   You can check the installed version in Panorama under PanoramaPlugins.
2. Log in to the Panorama CLI and run the following command to force-create a new VM auth key for the Cloud Device Group:

   request plugins azure cngfw-force-create-vm-auth-key name cloud-device-group-name

   Replace cloud-device-group-name with the name of your Cloud Device Group.
3. Generate a new registration string and update your CNGFW for Azure resource in the Azure portal.

   Your Cloud NGFW on Azure resource returns to a Healthy state in the Azure portal.