Convert Your Evaluation Panorama to VM-Flex Licensing without Local Log Collector

1. Obtain the Panorama serial number and auth code from your flexible VM-Series licensing deployment profile.

   1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
   2. Create a deployment profile that enables a Panorama virtual appliance.
   3. Provision Panorama to generate the a serial number for Panorama.
   4. Copy the Serial Number and Auth Code.
2. Log in to the Panorama web interface.
3. Select PanoramaSetupManagement and edit the General Settings.
4. Enter the Serial Number provided by Palo Alto Networks.

   The Panorama serial number and authorization code you generated in the previous step.
5. Click OK.
6. Select Commit and Commit to Panorama.
7. Restart management server on the Panorama virtual appliance.

   1. Log in to the Panorama CLI.
   2. Restart the management server.

      admin> debug software restart process management-server

      All administrators are logged out of the Panorama web interface and CLI when you restart the management server.
8. Verify that the support and device management licenses are successfully activated.

   1. Log in to the Panorama web interface.
   2. Select PanoramaLicenses and Retrieve license keys from license server.
   3. Verify the Device Management License displays the correct number of devices.
   4. Select PanoramaSupport and verify that the correct support Level and Expiry Date are displayed.
9. Synchronize the production Panorama virtual appliance with the firewalls to resume firewall management.

   Complete this step during a maintenance window to minimize network disruption.

   1. On the production Panorama virtual appliance, select PanoramaManaged Devices and verify that the Device State column displays Connected for the firewalls.

      At this point, the Shared Policy (device groups) and Template columns display Out of sync for the firewalls.
   2. Push your changes to device groups and templates:

      1. Select CommitPush to Devices and Edit Selections.
      2. Select Device Groups, select every device group, Include Device and Network Templates, and click OK.
      3. Push your changes.
   3. In the PanoramaManaged Devices page, verify that the Shared Policy and Template columns display In sync for the firewalls.