Reset Your Prisma Access License

Use this workflow if you need to modify one or more of your licenses; for example, if you update your Prisma Access license from an evaluation to a production version.
If you are upgrading your Prisma Access license from evaluation to production, make sure that your Panorama appliance has active, paid licenses before starting this procedure. If your Panorama has an evaluation license, you need to transfer the Prisma Access license to a Panorama with a production license.
  1. In the Panorama appliance, select
    Panorama
    Licenses
    .
  2. Make a note or take a screenshot of the licenses you have, the quantity of licenses, and the expiration date of each license.
  3. Remove the license that you need to modify.
    For example, if you are upgrading from an evaluation to a production license, remove the evaluation cloud service licenses you have installed.
    1. Open a SSH console session to the Panorama appliance.
    2. Enter the
      delete license key
      command, then press the
      Tab
      key to view all installed license keys.
    3. Delete all Prisma Access license keys, including the license keys for Cortex Data Lake (formerly Logging Service), Prisma Access for Users, Prisma Access for Networks, and Prisma Access for Clean Pipe, as applicable to your deployment.
      The following is an example of the process:
      admin-Panorama>
      delete license key
      [then click tab] GlobalProtect_Cloud_Service_f_2017_11_07.key 2017/11/0712:32:51 0.3K GlobalProtect_Cloud_Service_for_Mobile_Users_2017_11_07.key 2018/01/10 13:52:18 0.3K GlobalProtect_Cloud_Service_for_Remote_Networks_2017_11_07.key 2018/01/10 13:52:18 0.3K Logging_Service_2017_11_07.key 2018/01/10 13:52:18 0.3K admin-Panorama>
      delete license key Logging_Service_2017_11_07.key
      successfully removed Logging_Service_2017_11_07.key admin-Panorama>
      delete license key GlobalProtect_Cloud_Service_f_2017_11_07.key
      successfully removed GlobalProtect_Cloud_Service_f_2017_11_07.key admin-Panorama>
      delete license key GlobalProtect_Cloud_Service_for_Remote_Networks_2017_11_07.key
      successfully removed GlobalProtect_Cloud_Service_for_Remote_Networks_2017_11_07.key admin-Panorama>
      delete license key GlobalProtect_Cloud_Service_for_Mobile_Users_2017_11_07.key
      successfully removed GlobalProtect_Cloud_Service_for_Mobile_Users_2017_11_07.key
  4. From the Panorama administration console, select
    Panorama
    Licenses
    and click
    Retrieve license keys from license server
    .
    This step should refresh the licenses you already have, and the new licenses should reflect the new quantity you purchased and the new expiration date.
  5. Delete any existing certificates using CLI from Panorama by entering the following command:
    admin-Panorama>
    request plugins cloud_services panorama-certificate delete
  6. Enter the
    debug plugins cloud_services reset-endpoint
    command to reset the Panorama appliance.
  7. Create the new certificate with the new OTP by entering the following command, where
    value
    is the new OTP:
    admin-Panorama>
    request plugins cloud_services panorama-certificate fetch debug yes otp
    value
  8. Complete the one-time password (OTP) verification procedure and verify the Panorama appliance.
  9. In Panorama, verify that you can make configuration changes and can successfully push the configuration to Prisma Access.
    If the licenses do not update correctly, or if you are not able to make configuration changes after the refresh, contact Palo Alto Networks support.

Recommended For You