Before you can begin using Panorama for centralized management, logging, and reporting, you must register, activate, and retrieve the Panorama licenses. Every instance of Panorama requires valid licenses that entitle you to manage firewalls and obtain support. The firewall management license enforces the maximum number of firewalls that Panorama can manage. This license is based on firewall serial numbers, not on the number of virtual systems on each firewall. The support license enables Panorama software updates and dynamic content updates (for the latest Applications and Threats signatures, as an example). To purchase licenses, contact your Palo Alto Networks Systems Engineer or reseller.
If you are running an evaluation license for firewall management on your Panorama virtual appliance and want to apply a Panorama license that you purchased, perform the tasks Register Panorama and Activate/Retrieve a Firewall Management License on the Panorama Virtual Appliance.
Register Panorama
Register Panorama
Record the Panorama serial number or auth code and record your Sales Order Number or Customer ID. For the auth code, Sales Order Number, or Customer ID, see the order fulfillment email that Palo Alto Networks Customer Service sent when you placed your order for Panorama. For the serial number, the location depends on the appliance type: M-Series appliance—Log in to the Panorama web interface and record the Serial # value in the Dashboard tab, General Information section. Panorama virtual appliance—See the order fulfillment email.
Register Panorama. The steps depend on whether you already have a login for the Support site. If this is the first Palo Alto Networks appliance you are registering and you don’t yet have a login: Go to the Palo Alto Networks Customer Support web site. Click Register at the bottom of the page ( Overview > Get Help > Register ), enter your Email Address, enter the code displayed on the page, and click Submit. Complete the fields in the Create Contact Details section. Enter a Display Name, Confirm Email Address, and Password/Confirm Password. Enter the Panorama Device Serial Number or Auth Code. Enter your Sales Order Number or Customer ID. Click Submit. If you already have a support account: Log in to the Palo Alto Networks Customer Support web site. Select Assets > Devices, and click Register New Device. Select Register Device using Serial Number or Authorization Code. Enter the device Serial Number, City, Postal Code, and Country. Click Agree Submit.
Activate a Panorama Support License
Before activating a Panorama support license on a Panorama M-Series appliance or Panorama virtual appliance, you must Register Panorama.
If the support license expires, Panorama can still manage firewalls and collect logs, but software and content updates will be unavailable. The software and content versions on Panorama must be the same as or later than the versions on the managed firewalls, or else errors will occur. For details, see Panorama, Log Collector, and Firewall Version Compatibility.
Activate a Panorama Support License
Select Panorama > Support and click Activate feature using authorization code.
Enter the Authorization Code and click OK.
Verify that the subscription is activated by checking the details (for example, the Expiry Date, support Level, and Description) in the Support section of the page.
Activate/Retrieve a Firewall Management License on the Panorama Virtual Appliance
Before activating and retrieving a firewall management license on the Panorama virtual appliance, you must Register Panorama. If you are running an evaluation license and want to apply a license that you purchased, you must still register and activate/retrieve the purchased license.
Activate/Retrieve a Firewall Management License on the Panorama Virtual Appliance
Select Panorama > Setup > Management and edit the General Settings.
Enter the Panorama Serial Number (included in the order fulfillment email) and click OK.
Click Commit, for the Commit Type select Panorama, and click Commit again. To determine how many firewalls a license enables a Panorama virtual appliance to manage, log in to the Palo Alto Networks Customer Support web site. Then select the Assets tab, find the Panorama entry, and view the Model Name. For example, a license for the PAN-PRA-25 model can manage 25 firewalls. This page also displays the Expiration Date and other license information.
Activate/Retrieve a Firewall Management License on the M-Series Appliance
Before activating and retrieving a Panorama firewall management license on the M-Series appliance:
Register Panorama. Locate the auth codes for the product/subscription you purchased. When you placed your order, Palo Alto Networks Customer Service sent you an email that listed the auth code associated with the purchase. If you cannot locate this email, contact Palo Alto Networks Customer Support to obtain your codes before proceeding.
After you activate and retrieve the license, the Panorama > Licenses page displays the associated issuance date, expiration date, and the number of firewalls that the license enables Panorama to manage.
To activate and retrieve the license, the options are:
Activate/Retrieve a Firewall Management License on the M-Series Appliance
Use the web interface to activate and retrieve the license. Select this option if Panorama is ready to connect to the Palo Alto Networks update server (you completed the task Perform Initial Configuration of the M-Series Appliance) but you have not activated the license on the Palo Alto Networks Customer Support web site. Select Panorama > Licenses and click Activate feature using authorization code. Enter the Authorization Code and click OK. Panorama retrieves and activates the license.
Retrieve the license key from the license server. If Panorama is not ready to connect to the update server (for example, you have not completed the initial M-Series appliance setup), you can activate the license on the Support website so that, when Panorama is ready to connect, you can then use the web interface to retrieve the activated license. The process of retrieving an activated license is faster than the process of both retrieving and activating. Activate the license on the Palo Alto Networks Customer Support web site. On a host with internet access, use a web browser to access the Palo Alto Networks Customer Support web site and log in. Select Assets > Devices, find your M-Series appliance and, in the Action column, click the edit icon ( ). Select Activate Auth-Code, enter the Authorization Code and click Agree and Submit to activate the license. Configure Panorama to connect to the update server: see Perform Initial Configuration of the M-Series Appliance. Select Panorama > Licenses and click Retrieve license keys from the license server. Panorama retrieves the activated license.
Manually upload the license from a host to Panorama. Panorama must have access to that host. If Panorama is set up (you completed the task Perform Initial Configuration of the M-Series Appliance) but does not have a connection to the update server, activate the license on the Support website, download it to a host that has a connection to the update server, then upload it to Panorama. Activate and download the license from the Palo Alto Networks Customer Support web site. On a host with internet access, use a web browser to access the Palo Alto Networks Customer Support web site and log in. Select Assets > Devices, find your M-Series appliance and, in the Action column, click the edit icon ( ). Select Activate Auth-Code, enter the Authorization Code and click Agree and Submit to activate the license. In the Action column, click the download icon and save the license key file to the host. In the Panorama web interface, select Panorama > Licenses, click Manually upload license key and click Browse. Select the key file you downloaded to the host and click Open. Click OK to upload the activated license key.

Related Documentation