The VM-Series firewall licensing process uses
the UUID and CPU ID to
generate a unique serial number for a firewall. When you generate
a license, it is mapped to a specific instance of the VM-Series
firewall and cannot be modified. See VM-Series Firewall Licensing for an
overview of the license types and consumption models.
the instructions in this section if you want to:
from a evaluation capacity license to a production license.
Upgrade the model to increase capacity. For example, you
want to upgrade from the VM-100 to the VM-300 model, or change the
instance type or VM type for your hypervisor.
capacity restarts some critical processes on the firewall.
If your firewall is licensed with the BYOL option, you must deactivate your VM before
you change the model. If you do not, your license is invalidated because
a new UUID and CPU ID are assigned when the model changes. After
you complete the capacity upgrade, a license for the new capacity must
can use a VM-Series Model, but fund the license with Software NGFW
credits. For that procedure, see
Allocate additional hardware resources to your
Before initiating the capacity upgrade, you must verify
that enough hardware resources are available to the VM-Series firewall
to support the new capacity. The process for assigning additional
hardware resources differs on each hypervisor.
To check the
hardware requirements for your new VM-Series model, see VM-Series
Although the capacity upgrade does not require
a reboot of the VM-Series firewall, you need to power down the virtual
machine to change the hardware allocation.
Make sure that you are using the same account
that you used to register the initial license.
From the menu on the left, select
API Key Management
Copy the API key.
On the firewall, use the CLI to install the API key copied
in the previous step.
request license api-key set key
Enable the firewall to
Verify Update Server
your changes. Ensure that
you have a locally-configured user on the firewall. Panorama pushed
users might not be available after the deactivation if the configuration
exceeds the non-licensed PA-VM objects limit.
Upgrade the capacity.
Upgrade VM Capacity
activate your licenses and subscriptions in one of the following
option if your firewall does not have connectivity to the Customer Support portal.
In this case, you must download a license key file from the support
site on an Internet connected computer and then upload to the firewall.
Use an authorization code
—Use this option
to upgrade the VM-Series capacity using an authorization code for
licenses that have not been previously activated on the support
portal. When prompted, enter the
Verify that your firewall is licensed successfully.
verify that the license was successfully activated.