Provision the VM-Series Firewall on a Hyper-V Host with Hyper-V Manager

1. Download the VHDX file.

   Register your VM-Series firewall and obtain the VHDX file.

   1. Go to https://www.paloaltonetworks.com/services/support.
   2. Filter by PAN-OS for VM-Series Base Images and download the VHDX file. For example, PA-VM-HPV-7.1.0.vhdx.
2. Set up any vSwitch(es) that you will need.

   To create a vSwitch:

   1. From Hyper-V Manager, select the host and select ActionVirtual Switch Manager to open the Virtual Switch Manager window.
   2. Under Create virtual switch, select the type of vSwitch (external, internal, or private) to create and click Create Virtual Switch.
3. Install the firewall.

   1. On the Hyper-V Manager, select the host and select ActionNewVirtual Machine. Configure the following settings in the New Virtual Machine Wizard:

      1. Choose a Name and Location for the VM-Series firewall. The VM-Series firewall stores the VHDX file at the specified location.
      2. Choose Generation 1. This is the default option and the only version supported.
      3. For Startup Memory, assign the memory based on the VM-Series system requirements of your VM-Series model.
         Do not enable dynamic memory; the VM-Series firewall requires static memory allocation.

      4. Configure Networking. Select an external vSwitch to connect the management interface on the firewall.
      5. To connect the Virtual Hard Disk, select Use an existing virtual hard disk and browse to the VHDX file you downloaded earlier.
      6. Review the summary and click Finish.
   2. Assign virtual CPUs to the firewall.

      1. Select the VM you created and navigate to ActionSettings.
      2. Select Processor and enter the minimum number of CPUs based on the VM-Series system requirements of your VM-Series model.
      3. Click OK.
4. Connect at least one network adapter for the dataplane interface on the firewall.

   1. Select SettingsHardwareAdd Hardware and select the Hardware type for your network adapter.

      Legacy Network Adapter and SR-IOV are not supported. If selected, the VM-Series firewall will boot into maintenance mode.
   2. Click OK.
5. (Optional) Enable MAC address spoofing on Hyper-V if you are not using Layer 3 with hypervisor assigned MAC address.

   1. Double-click the dataplane virtual network adapter and click Advanced Settings.
   2. Click the Enable MAC address spoofing check box and click Apply.
6. Power on the firewall.

   Select the firewall from the list of Virtual Machines and navigate to ActionStart to power on the firewall.