Activate a License for Prisma SD-WAN Multitenant and Single Tenant FedRAMP High Through Common Services

1. Select Get Started with Prisma SD-WAN in your email.
2. Provide your work email address, Create your password, and Continue.

   The service uses this email address for the user account assigned to the tenant that you use for this license. This tenant, and any others created by this email address, will have the Multitenant Superuser role.

   • If you have a Palo Alto Networks Customer Support FedRAMP account, then enter the email address you used when you registered for that account.
   • If you do not have a Palo Alto Networks Customer Support FedRAMP account, then Create a New Account.
3. You are automatically directed to Common ServicesSubscription & Add-ons, where you Claim the subscription for your product.

4. Choose the Customer Support FedRAMP account number that you want to use to claim the license.
5. Create New tenant that you want to use for this license.

6. Claim and continue.
7. You are automatically directed to Tenant Management to the parent tenant where the license was claimed.
8. Edit Tenant to give the tenant a name of your choice, such as ParentTenant in the examples that follow. You can also add a business vertical and a support contact.

9. Add a New Tenant if you’re creating a multitenant hierarchy, such as ChildTenantEast and ChildTenantWest in the examples that follow. You can also add a business vertical and a support contact.

10. Select the tenant where you want to add your licensed product:

    • In a single tenant environment, Add Licensed Product on the parent tenant.

    • For Managed Security Service Providers (MSSPs) and distributed enterprises, it is required that you activate Prisma SD-WAN at the top-most, root-level, parent tenant and in all tenants up the hierarchy for a child Prisma SD-WANtenant. This enables the root to do ION device management for the child tenants.
      Consider the example hierarchy using tenants called ParentTenant, ChildTenantEast, and ChildTenantNorthEast. Add Licensed Product of Prisma SD-WAN on all of them if you want to see the Prisma SD-WAN Summary Dashboard for ChildTenantNorthEast from the intermediate tenant of ChildTenantEast.
      • You can create and activate a Prisma SD-WAN tenant in the Multitenant Portal without ordering a new license.
      • You only need to order a new license for Prisma SD-WAN if you need to order additional IONs, vIONs, or add-on licenses for this new tenant.
11. Select the Contract for the product in the Gov Region where you want to deploy your product.

    There is no cross-region aggregation. Make sure that all your tenants are in the same region for monitoring purposes.

    Starting in January 2023, when you select the Singapore or Australia region to deploy your product, all the tenant data (such as configuration, telemetry logs, system logs, and stats) is now provisioned and stored in the selected region. The new behavior is available only for new licenses and new tenant activations in both single-tenant and multitenant hierarchies. The previous behavior was that only stats were stored in the selected region but the tenant, configuration, and logs were provisioned in the US or EU regions.
12. Activate Now.The status will display as Provisioning while activation is in progress and then will display as Up after the activation is successful. You now have a tenant provisioned with an instance of the product that you purchased. The tenant has one user — the Customer Support account that you used when you began this process.
13. (Optional) add user access and assign roles.
14. To complete the product setup, you must access the products you purchased and perform any required post-installation configuration. For information about your products, see:

    • Prisma SD-WAN Administrator’s Guide
15. (Optional) In a multitenant hierarchy, monitor your tenants with the Prisma SD-WAN Summary Dashboard.