>
    Strata Copilot
    Manage Licenses and Updates
    Focus
    Download PDF
    Focus
    1. Home
    2. Panorama
    3. Manage Licenses and Updates
    Download PDF
    Panorama

    Manage Licenses and Updates

    Table of Contents

    Manage Licenses and Updates

    Use your Panorama™ management server to manage licenses, software updates, and content updates on firewalls and Dedicated Log Collectors.
    You can use the Panorama™ management server to centrally manage licenses, software updates, and content updates on firewalls and Dedicated Log Collectors. When you deploy licenses or updates, Panorama checks in with the Palo Alto Networks® licensing server or update server, verifies the request validity, and then allows retrieval and installation of the license or update. This capability facilitates deployment by eliminating the need to repeat the same tasks on each firewall or Dedicated Log Collector. It is particularly useful for managing firewalls that don’t have direct internet access or for managing Dedicated Log Collectors, which don’t have a web interface.
    Before deploying updates, see Panorama, Log Collector, Firewall, and WildFire Version Compatibility for important details about update version compatibility.
    You must activate a support subscription directly on each firewall; you cannot use Panorama to deploy support subscriptions.
    To activate licenses or install updates on the Panorama management server, see Register Panorama and Install Licenses and Install Content and Software Updates for Panorama.

    Manage Licenses on Firewalls Using Panorama

    The following steps describe how to retrieve new licenses using an authentication (auth) code and push the license keys to managed firewalls. It also describes how to manually update (refresh) the license status of firewalls that both have direct internet access and those that do not have direct internet access. Panorama™ automatically performs a daily check-in with the licensing server, retrieves license updates and renewals, and pushes them to the firewalls. The check-in is hard-coded to occur between 1 a.m. and 2 a.m.; you cannot change this schedule.
    You cannot use Panorama to activate the support license for firewalls. You must access the firewalls individually to activate their support licenses.
    To activate licenses for Panorama, see Register Panorama and Install Licenses.
    • Activate newly purchased licenses.
      1. Select PanoramaDevice DeploymentLicenses and Activate.
      2. Enter the Auth Code that Palo Alto Networks® provided for each firewall that has a new license.
      3. Activate the license.
      4. (WildFire® subscriptions only) Perform a commit on each firewall that has a new WildFire subscription to complete the activation:
        • Commit any pending changes. You must access each firewall web interface to do this.
        • If no configuration changes are pending, make a minor change and Commit. For example, update a rule description and commit the change. If the firewalls belong to the same device group, you can push the rule change from Panorama to initiate a commit on all those firewalls instead of accessing each firewall separately.
        Check that the WildFire Analysis profile rules include the advanced file types that the WildFire subscription supports.
    • Update the license status of firewalls.
      1. Select PanoramaDevice DeploymentLicenses.
        Each entry on the page indicates whether the license is active or inactive and displays the expiration date for active licenses.
      2. If you previously activated auth codes for the support subscription directly on the firewalls, click Refresh and select the firewalls from the list. Panorama retrieves the license, deploys it to the firewalls, and updates the licensing status on the Panorama web interface.
      3. (Enterprise Data Loss Prevention (DLP) license only) Push the updated license to the managed firewalls leveraging Enterprise DLP.
        1. Select Commit and Commit to Panorama.
        2. Select CommitPush to Devices and Edit Selections.
        3. Select Templates and select the template stack associated with the managed firewalls leveraging Enterprise DLP.
          Click OK to continue.
        4. Push the template configuration to successfully update the Enterprise DLP license.
        When you perform a license activation or refresh operation, the Pending Changes status is set to Yes by default. You must perform a Commit to finalize the license update and save the configuration.

    © 2026 Palo Alto Networks, Inc. All rights reserved.