Transfer or Update Prisma Access Licenses Between Panorama Appliances

Use the following workflow if you need to transfer Prisma Access licenses from one Panorama appliance to another, for example:
  • If you need to transfer production (paid) licenses from one Panorama appliance to another.
  • If you are running an evaluation license on a Panorama appliance that also has an evaluation license. In this case, you must transfer the production Prisma Access license from an evaluation to a production Panorama appliance.
Prisma Access automatically preserves all instances and public and loopback IP addresses during the license transfer.
  1. (
    Optional
    ) Export a snapshot of your Panorama configuration to a host external to Panorama or to an on-premise firewall.
    While Prisma Access saves all its infrastructure settings, including public and loopback IP addresses, you need to transfer any Panorama-specific configuration to the new Panorama appliance. You can export your configuration after the license transfer process is complete, but we recommend exporting it before you transfer the licenses as a best practice.
  2. Log in to the Palo Alto Networks Customer Support Portal.
  3. Select
    Assets
    Devices
    .
  4. Find the production Panorama appliance to which you will be transferring the production Prisma Access plugin and complete these steps:
    1. Verify that it has an active support license.
    2. Make a note of this serial number; you use it in a later step.
  5. Search for the current Panorama appliance you are using to run Prisma Access by using the serial number.
    The model name should be in the format
    PAN-PRA-25-E
    xx
    .
    license-find-eval-serial-number.png
  6. Click the
    Actions
    icon for the current Panorama appliance.
  7. Select
    Transfer Licenses
    and choose the Panorama appliance to which you will be migrating.
    licenses-transfer-cloud-license.png
  8. Review the EULA and click
    Agree
    , then click
    Submit.
  9. Wait for a confirmation message in the Support Portal for a successful transfer.
  10. After the successful transfer of licenses, login to the administration console of your production Panorama appliance.
  11. Select
    Panorama
    Support
    and verify that the Panorama appliance has a valid support license.
  12. Click
    Dashboard
    and verify that the running software version is a minimum of 9.0.4.
  13. Verify that the Panorama appliance is configured to use NTP by selecting
    Panorama
    Setup
    Services
    NTP
    and setting a value, such as
    pool.ntp.org
    , for the NTP Server.
  14. Select
    Panorama
    Licenses
    and click
    Retrieve license keys from license server
    .
    This should refresh the screen with recently transferred Prisma Access and Cortex Data Lake licenses you purchased. If the cloud service licenses do not appear, contact Palo Alto Networks Support for assistance.
  15. Complete the one-time password (OTP) verification procedure and verify the Panorama appliance.
  16. Migrate the configuration from the previous Panorama appliance to the current Panorama appliance.
    • If the production Panorama appliance is completely new, export the configuration from the Panorama appliance you used during the evaluation (if you have not done so already) and import it to this Panorama appliance.
    • If this is the Panorama appliance that you have been using to manage your existing VMs and devices, load a partial configuration to this Panorama appliance.
    You can now use this Panorama appliance to configure and manage Prisma Access.

Recommended For You