Locate the activation codes for the licenses you
When you purchased your subscriptions you should have received
an email from Palo Alto Networks customer service listing the activation
code associated with each subscription. If you cannot locate this
email, contact Customer Support to obtain
your activation codes before you proceed.
Activate your Support license.
You will not be able to update your PAN-OS software if
you do not have a valid Support license.
Log in to the web interface and then select
Activate support using authorization
Activate each license you purchased.
then activate your licenses and subscriptions in one of the following
this option to enable purchased subscriptions using an authorization
code for licenses that have not been previously activated on the
support portal. When prompted, enter the
and then click
Manually upload license key
option if your firewall does not have connectivity to the Palo Alto Networks Customer Support
Portal. In this case, you must download a license key file
from the support site on an internet-connected computer and then
upload to the firewall.
To automate activation
using the Customer Support Portal API, see the process to Activate Licenses. This
process works for both the hardware and VM-Series firewalls.
Verify that the license is successfully activated
verify that the license is successfully activated. For example, after
activating the WildFire license, you should see that the license
WildFire, Advanced URL Filtering, and DNS Security
changes to complete subscription activation.
After activating a WildFire, Advanced URL Filtering, or
DNS Security subscription license, a commit is required for the
firewall to begin processing their corresponding traffic and data
types based on the security profile configurations. You should:
Commit any pending changes. If you do not have pending changes,
which prevents you from committing any configuration updates, you
can: issue a commit force command through the CLI or make an update
that writes to the candidate configuration, which enables the commit
Use the following CLI configuration mode command to initiate
a commit force:
commit force bypasses some of the validation checks that normally
occur with a normal commit operation. Make sure your configuration
is valid and is semantically and syntactically correct before issuing
a commit force update.
Check that the WildFire Analysis profile rules include
the advanced file types that are now supported with the WildFire
subscription. If no change to any of the rules is required, make
a minor edit to a rule description and perform a commit.