Focus

VM-Series Deployment Guide

Troubleshoot License Activation Issues

Table of Contents

Troubleshoot License Activation Issues

View and resolve common issues with activating your VM-Series firewall license.

Some of the most common issues with activating your license are covered in this section.

Error: Insufficient Memory

Licensing a PA-VM without sufficient memory causes an error similar to the following:

Server error : failed key check : Resource check failed. 
Memory needed: 6.5GB, allocated memory: 4.8GB

To fix this problem, provision the additional memory the license requires, and fetch the license with the command.

Provision the additional memory the license requires.
Execute the following command:
request license fetch
If you use any other command it will fail with the following error:
Server error : failed to fetch license: Cannot apply a provisioning license feature to an already provisioned device.

Error: Failed to Fetch Licenses

If you see an error that reads Failed to fetch licenses. Failed to get license info. Please try again later or a generic communications error message displays.

If you see this error, complete the following verification steps.

Can the firewall route traffic to the Palo Alto Networks server using a service route? By default, the firewall uses the management interface to access the server. If you plan on using a dataplane interface, make sure that you have set up a service route.
Is routing over the internet working? SSH into the firewall and ping an publicly accessible IP address such as 4.2.2.2. Be sure to use the source option if you are using a dataplane interface. For example: ping count 3 source 10.0.1.1 host 4.2.2.2.
Is DNS set up correctly? SSH into the firewall and ping a DNS name such as google.com. For example:

Error: Invalid Authcode

If you see an error that reads Invalid Auth Code, complete the following verification steps.

You have entered the auth code properly.
You have registered the auth code to your account on the support portal.
Your auth code has not reached the maximum provisioning capacity for the VM-Series firewalls.
1. For legacy licenses, log in to the CSP and select AssetsVM-Series Auth-Codes
2. For Software NGFW Credits, if you know the deployment profile, log in to the CSP and select AssetsSoftware NGFW Credits, locate your profile, and click Details.
  You can also select AssetsSoftware NGFW Devices and search by Auth-Code.

Activate Licenses on VM-Series Firewalls on NSX When Panorama has No Internet Access