>
    Strata Copilot
    Activate Advanced DNS Security Resolver
    Focus
    Download PDF
    Focus
    1. Home
    2. Advanced DNS Security Powered by Precision AI®
    3. Activation & Onboarding
    4. Activate Advanced DNS Security Resolver
    Download PDF
    Advanced DNS Security Powered by Precision AI®

    Activate Advanced DNS Security Resolver

    Table of Contents

    Activate Advanced DNS Security Resolver

    This describes the activation processes for the Advanced DNS Security Resolver,which provides two licensing options: a standalone license or part of an ELA.
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • Advanced DNS Security Resolver License
    Palo Alto Networks Advanced DNS Security Resolver provides two licensing options: a standalone license or part of an ELA (Enterprise License Agreement). Depending on the Advanced DNS Security Resolver license model you purchased, you must either proceed with the ELA Add-on activation, or, if you have a standard standalone license, you should have received a welcome email. Contained in this email is an Activate Subscription link that kicks off your activation process.
    For more information about license activation and management for Palo Alto Networks products, refer to:

    First time Advanced DNS Security Resolver Activation - One Customer Support Portal Account

    Learn how to activate your Advanced DNS Security Resolver service for the first time if you have only one Customer Support Portal account.
    If you have only one Customer Support Portal account, follow these steps for first time Advanced DNS Security Resolver activation.
    1. Because you have only one Customer Support Portal account associated with your username, the Customer Support Account is pre-populated.
    2. Allocate the product to the Recipient of your choice.
      1. The name provided matches your Customer Support Portal account for convenience. You can use the name provided or change it.
    3. Select a Region where you want to deploy your product.
    4. The web interface shows the available Advanced DNS Security Resolver licenses that can be assigned to a specified tenant. Confirm the value and select Done.
    5. Agree to the terms and conditions, and Activate.
      A single default tenant is auto-created behind the scenes, and the product is activated in the tenant.
      This tenant, and any others created by this Customer Support Portal account, will have the Superuser role.
    6. Advanced DNS Security Resolver activation is now complete for Strata Cloud Manager.
    7. (Optional) Manage your product from Strata Cloud Manager.
    8. (Optional) Manage identity and access.

    First time Advanced DNS Security Resolver Activation - Multiple Customer Support Portal Account

    Learn how to activate your Advanced DNS Security Resolver service for the first time if you have multiple Customer Support Portal accounts.
    If you have multiple Customer Support Portal accounts, follow these steps for first time Advanced DNS Security Resolver activation.
    1. If you have multiple Customer Support Portal accounts, choose the Customer Support Account number that you want to use.
    2. Allocate the product to the Recipient of your choice.
      You can allocate your entire license to one recipient or you can share it with multiple recipients in a tenant hierarchy. What is a tenant?
      1. If you need just one tenant, use or rename the tenant provided. The name provided matches your Customer Support Portal account for convenience.
      2. (Optional) This step applies if you are a managed security service provider (MSSP), a distributed enterprise customer, or need multiple tenants. After you create the first tenant, you can Allocate to subtenant and use or rename the tenant provided.
        A subscription gets allocated on a tenant or a sub-tenant. This step is for choosing a tenant where you want to allocate a license, not for building a complete tenant hierarchy. You can create only a tenant and subtenant here, and you can choose to allocate a license to that subtenant.
        After activation, you can build out your tenant hierarchy as needed through tenant management. You can create your tenant hierarchy to reflect your existing organizational structure. You can also consider identity and access inheritance when creating the hierarchy, in addition to tenant hierarchy limits.
      3. Select Done.
    3. Select a Region where you want to deploy your product.
    4. The web interface shows the available Advanced DNS Security Resolver licenses that can be assigned to a specified tenant. Confirm the value and select Done.
    5. Agree to the terms and conditions, and Activate.
      This tenant, and any others created by this Customer Support Portal account, will have the Superuser role.
    6. Advanced DNS Security Resolver activation is now complete for Strata Cloud Manager.
    7. (Optional) Manage your product from Strata Cloud Manager.
    8. (Optional) Manage identity and access.

    Return Visit Advanced DNS Security Resolver Activation

    Learn how to activate your Advanced DNS Security Resolver for repeat visits.
    Follow these steps if you have already completed first time activation, you have already created your tenant hierarchy through Identity & AccessTenants or tenant management, and you are returning to activate another product in your existing hierarchy.
    1. Choose the Customer Support Account number that you want to use to activate.
    2. Allocate the subscription to the Recipient tenant of your choice.
    3. Select a Region where you want to deploy your product.
    4. The web interface shows the available Advanced DNS Security Resolver licenses that can be assigned to a specified tenant. Confirm the value and select Done.
    5. Agree to the terms and conditions, and Activate.
    6. Advanced DNS Security Resolver activation is now complete for Strata Cloud Manager.
    7. (Optional) Manage your product from Strata Cloud Manager.
    8. (Optional) Manage identity and access.

    ELA Add-on Activation

    Learn how to activate your Advanced DNS Security Resolver service for use with an ELA (Enterprise License Agreement).
    The add-on for ELA (Enterprise License Agreement) is a consumption model for large enterprises to assign subscriptions in bulk to assets purchased from Palo Alto Networks. ELA based solutions offer the flexibility to enable any of the following licenses that are supported for a tenant or TSG:
    1. Start the ELA activation process from either the hub or Customer Support Portal.
      • Customer Support Portal: Log in to your Customer Support Portal account, select ProductsEnterprise AgreementsLicenses and then click ELA-ADNSR Activation.
      • Hub: Log into the hub and, from the tenant view, select ELA ActivationADNSR.
      Completion of either activation process loads a magic link that opens the Advanced DNS Security Resolver activation page on the hub.
    2. If you have multiple Customer Support Portal accounts, choose the Customer Support Account number that you want to use.
    3. Allocate the product to the Recipient of your choice.
      The tenant where Advanced DNS Security Resolver is to be activated (the recipient) must be configured to use Strata Logging Service.
      You must migrate to the newer SLS service before the Advanced DNS Security Resolver can be enabled for the specified tenant, if you are currently using any of the following legacy products:
      • Cortex Data Lake
      • AIOps for NGFW
      • AIOps for NGFW Free
      Additionally if you have any unactivated magic links, pending inflight or expired quotes, these can interfere with the activation process. You must resolve any such outstanding examples by requesting their removal or completing the request. Failure to do so will produce an error indicating service incompatibilities.
      Please contact your Authorized Support Center or sales representative for more information on migrating from CDL to SLS.
      1. The name provided matches your Customer Support Portal account for convenience. You can use the name provided or change it.
    4. Select a Region where you want to deploy your product. Your Advanced DNS Security Resolver data and incidents reside in geographic locations based on where the enforcement point that forwarded the traffic to Advanced DNS Security Resolver is located.
    5. The web interface shows the available Advanced DNS Security Resolver licenses that can be assigned to a specified tenant. Leave the value at the default setting and select Done.
      This item is not applicable for ELA accounts, however, you must select Done to proceed to the next step.
    6. Agree to the terms and conditions, and Activate.
      A single default tenant is auto-created behind the scenes, and the product is activated in the tenant.
      This tenant, and any others created by this Customer Support Portal account, will have the Superuser role.
    7. Advanced DNS Security Resolver activation is now complete for Strata Cloud Manager. After you log in to Strata Cloud Manager, you can access all Advanced DNS Security Resolver management operations from ManageConfigurationADNS Resolver.
    8. (Optional) Manage your product from Strata Cloud Manager.
    9. (Optional) Manage identity and access.

    © 2026 Palo Alto Networks, Inc. All rights reserved.