Register the VM-Series Firewall (Software NGFW Credits)

Table of Contents

Use Strata Cloud Manager for Panorama Managed VM-Series

Provision Panorama

Register the VM-Series Firewall (Software NGFW Credits)

Where Can I Use This?	What Do I Need?
VM-Series deployment	VM-Series 10.x or above Panorama running PAN-OS 10.1.x or above versions Customer Support Portal (CSP) account with one of the following user roles: Super User, Standard User, Limited User, Threat Researcher, AutoFocus Trial Role, Group Super User, Group Standard User, Group Limited User, Group Threat Researcher, Authorized Support Center (ASC) User, and ASC Full Service User. Superuser access to the VM-Series firewall

Where Can I Use This?

What Do I Need?

VM-Series deployment

VM-Series 10.x or above
Panorama running PAN-OS 10.1.x or above versions
Customer Support Portal (CSP) account with one of the following user roles:
- Super User, Standard User, Limited User, Threat Researcher, AutoFocus Trial Role, Group Super User, Group Standard User, Group Limited User, Group Threat Researcher, Authorized Support Center (ASC) User, and ASC Full Service User.
- Superuser access to the VM-Series firewall

Registration requires access to the Palo Alto Networks customer support portal (the CSP) and a support account. Create one if necessary.

During activation, an administrator activates a credit pool and the credits are deposited. When anyone creates a deployment profile, an auth code is created. Complete one of the following procedures to initiate registration.

Device can access CSP
Device cannot access the CSP

Use the following steps if the firewall is able to connect to the CSP:
1. Log in to the CSP with your account credentials.
2. Select ProductsAssetsSoftware NFGW Credits.
  
  Locate your credit pool and view Details.
3. View Current Deployment Profiles and choose (or create) a profile.
  You will use the auth code from this profile for licensing any firewall you create with it. An auth code for a flexible firewall license begins with the letter D.
4. Log in to the VM-Series firewall web interface.
5. Verify the Palo Alto Networks update server configuration.
  Select DeviceSetupServices.
  Confirm that Update Server is set to updates.paloaltonetworks.com.
  Confirm that Verify Update Server Identity is selected.
6. Select DeviceLicenses.
  Select the Activate feature using authorization code link.
  Enter the VM-Series authorization code from the deployment profile.
  Click OK to confirm the license upgrade. The firewall contacts the Palo Alto Networks update server and consumes the tokens required for your firewall based on the VM-Series model.
7. Confirm that the Dashboard displays a valid serial number and that the PA-VM license displays in the DeviceLicenses tab.
8. Verify your firewall is registered on the CSP:
  Select ProductsAssetsSoftware NFGW Credits
  Auth code column, View Devices and locate the serial number for your deployment.
  In the credit pool, Credits Consumed, Firewalls Deployed, and vCPUs consumed should be incremented to reflect your deployment.
Use the following steps if the firewall is not able to connect to the CSP:
This workflow adds your firewall to the support database. Because the firewall can’t connect to the license server, you must manually pass the licenses from the CSP to the firewall.
1. Log in to the CSP with your account credentials.
2. Select the new profile and Select the vertical ellipsis (More Options) and Register Firewall.
  
  This opens the device registration form. Enter the information for your firewall and Submit:
  
  This associates the firewall with the profile and its auth code and assigns a serial number.
3. Click View Devices to see associated firewalls in Software NGFW Devices.
  In the License column, download each license key to a location from which you can safely transfer the files to the firewall.
4. Log in to the firewall and select DeviceLicenses.
  License keys must be installed through the web interface. The firewall does not support license key installation through SCP or FTP.
  
  Click Manually Upload License.
  Confirm that the Dashboard displays a valid serial number and that the PA-VM license displays in the DeviceLicenses tab.