>
    Strata Copilot
    Manage Firewall Licenses
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Panorama Web Interface
    4. Panorama > Device Deployment
    5. Manage Firewall Licenses
    Download PDF
    Next-Generation Firewall

    Manage Firewall Licenses

    Table of Contents

    Manage Firewall Licenses

    • Panorama > Device Deployment > Licenses
    Select PanoramaDevice DeploymentLicenses to perform the following tasks:
    • Update licenses of firewalls that don’t have direct internet access—Click Refresh.
    • Activate licenses on managed firewalls—Click Activate. See Activate Licenses.
    • (PAN-OS 12.1.8 and later releases) Upload .key license files for air gapped firewalls— Click Upload License, click Add File, click Browse to locate the .key file on your local system. Select the file, click Add, and click OK.
    • Deactivate all the licenses and subscriptions/entitlements installed on VM-Series firewalls—Click Deactivate VMs, select the firewalls (the list displays only firewalls running PAN-OS 7.0 or later releases), and click:
      • Continue—Deactivates the licenses and automatically registers the changes with the licensing server. The licenses are credited back to your account and are available for reuse.
      • Complete Manually—Generates a token file. Use this if Panorama does not have direct Internet access. To complete the deactivation process, you must log in to the Support portal, select Assets, click Deactivate License(s), upload the token file, and click Submit. After you complete the deactivation process.
    You can also view the current license status for managed firewalls. For firewalls that have direct internet access, Panorama automatically performs a daily check-in with the licensing server, retrieves license updates and renewals, and pushes them to the firewalls. The check-in is hard-coded to occur between 1 and 2 A.M.; you cannot change this schedule.
    Firewall License Information
    Device
    The firewall name.
    Virtual System
    Indicates whether the firewall does
    or does not
    support multiple virtual systems.
    Threat Prevention
    Indicates whether the license is active
    , inactive
    , or expired
    (along with the expiration date).
    URL
    Support
    GlobalProtect Gateway
    GlobalProtect Portal
    WildFire
    VM-Series Capacity
    Indicates whether this is
    or is not
    a VM-Series firewall.
    When you click Activate, the Activate License Deployment dialog opens with two tabs depending on your licensing method:

    Activate Licenses

    AUTH CODE
    Use this tab to activate licenses on firewalls that have a direct internet connection to the Palo Alto Networks licensing server. Select the firewalls, and in the AUTH CODE column, enter the authorization code that Palo Alto Networks provided for each firewall and click Activate.
    Panorama automatically performs a daily check-in with the licensing server, retrieves license updates and renewals, and pushes them to the firewalls. The check-in is hard-coded to occur between 1 and 2 A.M.; you cannot change this schedule.
    LICENSE KEY
    (PAN-OS 12.1.8 and later releases) Use this tab to activate the .key license files for air gapped firewalls (firewalls with no internet connectivity). Select the check boxes next to the licenses you want to activate and click Activate.
    The license key files must have a .key extension. If a file is corrupted or has an incorrect extension, Panorama displays an invalid file error.

    © 2026 Palo Alto Networks, Inc. All rights reserved.