Upgrade Line Cards to K2 Secure Mode

Access the Palo Alto Networks Customer Support Portal and
Sign In
.
Select
Assets
and
Devices
.
Find the serial number for the chassis of the line card you are upgrading and in that row, select the Actions icon (
).
The Device Licenses screen appears. Enter the Auth Code from your sales order into the Authorization Code field. Select
Activate Auth-Code
.
Select
Agree and Submit
.
A Confirmation message appears, stating that
Subscription auth codes should be applied only to K2 devices running in express mode. If this is a K2 express mode device, select Yes.
If that is the case, press
Yes
.
Find the Auth Code that you activated and next to the corresponding K2 Secure Mode Upgrade, select the download icon.
A text window opens; select
OK
to open the file.
The text file opens displaying the CLI command to enable or disable express mode. Make note of this CLI command, but don’t execute it yet.
Repeat Step 2 through Step 8 to upgrade each line card on the PA-7000 Series firewall that is in express mode.
All line cards on the chassis must be in secure mode for the firewall to function in secure mode.
After you have upgraded all of the line cards on the PA-7000 Series firewall from express mode to secure mode, Access the CLI to the firewall and enter the
no
version of the CLI command to upgrade the firewall to secure mode.