Activate the License for the VM-Series Firewall (Standalone Version)

Direct internet access
To activate the license, the firewall must be configured with an IP address, netmask, default gateway, and DNS server IP address.
The firewall must have a valid DNS configuration and have network connectivity to access the Palo Alto Networks licensing server.
Select
Device
Licenses
and select the
Retrieve license keys from license server
link.
The firewall will connect to the update server (updates.paloaltonetworks.com), and download the license and reboot automatically.
Log back in to the web interface and confirm that the
Dashboard
displays a valid serial number. If the term
Unknown
displays, it means the device is not licensed.
On
Device
Licenses
, verify that
PA-VM
license is added to the device.
If you see an error message, check Troubleshoot License Activation Issues.
No internet access
Select
Device
Licenses
and click the
Activate Feature using Auth Code
link.
Click
Download Authorization File
, and download the
authorizationfile.txt
on the client machine.
Copy the
authorizationfile.txt
to a computer that has access to the internet and log in to the support portal. Click
My VM-Series Auth-Codes
link and select the applicable auth code from the list and click the
Register VM
link.
On the
Register Virtual Machine
tab upload the authorization file. Select the PAN-OS version and the hypervisor on which you have deployed the firewall, to complete the registration process. The serial number of your VM-Series firewall will be attached to your account records.

Navigate to
Assets
My Devices
and search for the VM-Series device just registered and click the
PA-VM
link. This will download the VM-Series license key to the client machine.
Copy the license key to the machine that can access the web interface of the VM-Series firewall and navigate to
Device
Licenses
.
License keys must be installed through the web interface. The firewall does not support license key installation through SCP or FTP.
Click
Manually Upload License
link and enter the license key. When the capacity license is activated on the firewall, a reboot occurs.
Log in to the device and confirm that the
Dashboard
displays a valid serial number and that the
PA-VM
license displays in the
Device
Licenses
tab.