>
    Strata Copilot
    Upgrade the Device Software
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Upgrade On-Premises Controller
    4. Upgrade the Device Software
    Download PDF
    Prisma SD-WAN

    Upgrade the Device Software

    Table of Contents

    Upgrade the Device Software

    Learn to upgrade the device software.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN
    • Prisma SD-WAN
    Upgrade the device software by following the below mentioned steps:
    1. Download the software image.
    2. Upgrade using operator console.
    3. Upgrade using management console.
    To download and upgrade device software using the script:
    Before you begin:
    • Confirm that an HA standby device is available and healthy before starting the upgrade.
    • Verify that a current controller-side backup exists at /mnt_ebs/backup_config before proceeding.
    • Check the current interface and device health status in the Administrator console.
    • Schedule a maintenance window. The device will experience a brief traffic interruption during the upgrade and reboot.
    1. Download the hardware bundle and upgrade the device by executing the following command:
      Download all software bundles exclusively from the Palo Alto Networks provided links. Verify the downloaded file's checksum before proceeding. Confirm the target version is compatible with your hardware before initiating the upgrade.
      Upgrade net 1 https://<bundle-download-URL-from-CSP>/artifacts/
ReleaseBuilds/<software-version>/<build-number>/<bundle> Upgrade to <6.x.x-bxx:
download_discovery
      Where:
      • net 1 — specifies the network interface used for the download.
      • download_discovery — instructs the device to discover and retrieve the bundle from the specified URL.
      • <bundle-download-URL-from-CSP> — replace with the authenticated download URL obtained from the CSP portal for your target release.
    2. Obtain the hardware bundle file in the device and then initiate the upgrade:
      1. Copy the hardware bundle file to the device at /home/root from the source system by executing the following command:
        scp ubuntu@source-server-IP:/home/ubuntu/bundle_hw-target-version /home/root/
        Replace source-server-IP with the IP address of the system holding the downloaded bundle, and target-version with the exact bundle filename (for example, bundle_hw-6.2.3-b10).
      2. Log in as elem-admin and initiate the upgrade using the copied bundle file: 
        upgrade file /home/root/bundle_hw-target-version
      3. Verify that the device software is upgraded by running the CLI toolkit command dump overview. Confirm the reported software version matches the expected release.

    Upload the Software Image to the Operator Console

    1. Log in to the Operator console.
    2. From the home page, navigate to Configuration Image Management.
    3. Select Device and click Upload.
    4. After uploading the software inventory successfully, click Create under Actions.
    5. After the Software Inventory is created successfully, click Allocate.
      After the software is allocated, the link is disabled.

    Upgrade the Device Software using the Administrator Console

    1. Upgrade the device software from the Administrator console home page ManageSetupDevicesClaimed Devices.
    2. Click Upgrade in the Software column.
    3. Select the version and upgrade.
      Alternatively, you can schedule an upgrade at a later time.

    Verify Device Upgrade

    1. To verify if the device software is upgraded, execute the CLI command dump overview
    2. Verify that the Software version is upgraded in the command output.
      You can view the activity on the devices/sites for only up to 30 days. Stats data more than 30 days old and flow data more than 10 days are auto-purged.

    © 2026 Palo Alto Networks, Inc. All rights reserved.