>
    Strata Copilot
    Device Associations in Strata Cloud Manager
    Focus
    Download PDF
    Focus
    1. Home
    2. Strata Cloud Manager
    3. Strata Cloud Manager Activation & Onboarding
    4. Device Associations in Strata Cloud Manager
    Download PDF
    Strata Cloud Manager

    Device Associations in Strata Cloud Manager

    Table of Contents

    Device Associations in Strata Cloud Manager

    Learn about Device Associations and how to get started organizing devices and associating them with licenses and tenants in Strata Cloud Manager.
    Where Can I Use This?What Do I Need?
    • NGFWs, including those funded by Software NGFW Credits
    		One of these:
    If you began using Strata Cloud Manager before these licensing tiers were introduced, your licenses remain supported.
    Part of Strata Cloud Manager and Common Services, Device Associations provides a centralized management view of all devices in your deployment. It enables you to organize devices into tenant service group (TSGs) (logical containers for organizing devices) and makes it easy to associate supported products with your devices.
    You can use Device Associations with the following products:
    1. In Device Associations (SettingsDevice Associations), you can view a list of all of the tenant service groups (TSGs) associated with your customer support account.
    2. Select a TSG to view any firewalls or Panorama appliances associated with it. If you don't see any, you can Add Devices from your customer support account.
    3. Add Device whenever you need to associate new devices with your TSG.
    4. After you've added a firewall or Panorama appliance, you can Associate Products to begin using the device with products that you have activated. The app must be compatible with the hardware model of your device, otherwise the device will not appear during app association.

    Device Associations (Associate Devices with a Tenant)

    Learn about associating your devices with a tenant.
    Before you can begin using a firewall or Panorama appliance with licensed products that you have activated, you must first associate it with the tenant in which you have activated a compatible product.
    1. Navigate to Device Associations using the Activation Console or Strata Cloud Manager.
      1. (Optional) Log in to the Activation Console using your Palo Alto Networks CSP credentials and select Common ServicesDevice Associations.
      2. (Optional) Log into Strata Cloud Manager and select SettingsDevice Associations.
    2. Add the firewall or Panorama appliance to your tenant.
      1. Select Add Device.
        Your Customer Support Account is automatically selected based on the activated products in the tenant you are in. If you have not activated any products that support Device Associations, Add Device will be greyed out.
      2. Select one or more firewalls or Panorama appliances.
        You can use a serial number to search for a specific device.
      3. Save.
    3. Continue to associate products with devices.

    Device Associations (Associate Devices with a Product)

    Learn about associating your devices with a product.
    After activating the license for a supported product, you use Device Associations to specify the firewalls or Panorama appliances that you want to use with the product.
    1. Activate your product license.
      How you do this depends on the license you are activating. Please see the specific product documentation for more details. You can also see the license compatibility with Strata Cloud Manager here.
    2. Navigate to Device Associations using the Activation Console or Strata Cloud Manager.
      1. (Optional) Log in to the Activation Console using your Palo Alto Networks CSP credentials and select Common ServicesDevice Associations.
      2. (Optional) Log into Strata Cloud Manager and select SettingsDevice Associations.
    3. Associate products with firewalls or Panorama appliances.
      1. Select Associate Products.
      2. In the Products selection column, select the product you want to associate.
      3. If applicable, select the type of license.
        Some products have licenses for specific validity terms and device models. Only the devices compatible with the license type you selected will appear for association.
      4. Select devices.
      5. Save or Apply Licenses.
    4. Verify that the association was successful.
      If the association failed, copy the error ID and follow the steps to open a support case. When opening the support case, be sure to include the error ID, device serial number, TSG ID, and the name of the product that failed association.
    5. Return to the documentation for the product you are associating for further onboarding steps.

    Device Associations (Remove Device Associations)

    Remove Device Associations if you are retiring or returning a device, or associating it with another tenant.
    You may want to remove device associations if, for example, you are retiring or returning a firewall or Panorama appliance, or if you want to associate it with another tenant service group (TSG).
    If you are trying to convert a trial license to production, convert the license instead of disassociating.
    1. Navigate to Device Associations using the Activation Console or Strata Cloud Manager.
      1. (Optional) Log in to the Activation Console using your Palo Alto Networks CSP credentials and select Common ServicesDevice Associations.
      2. (Optional) Log into Strata Cloud Manager and select SettingsDevice Associations.
    2. Remove product associations.
      If you want to remove a firewall or Panorama appliance from your TSG, you must first remove any associated products.
      1. Select the firewalls or Panorama appliances whose products you want to disassociate.
      2. Select Remove AssociationsRemove product association.
      3. Select the products you want to remove and Remove Associations.
    3. Remove a tenant association.
      You can remove tenant associations only from devices that have no app associations. If the device is associated with an app, remove the app association before proceeding.
      1. Select the firewalls or Panorama appliances that you want to remove from your tenant.
      2. Select Remove AssociationsRemove tenant association.
      3. Confirm that you want to proceed and Remove.
    4. If you are removing a firewall or Panorama appliance to add it to a new TSG, associate it with the new TSG.

    © 2026 Palo Alto Networks, Inc. All rights reserved.