The licensing process for the VM-Series firewall uses the UUID and the CPU ID to generate a unique serial number for each VM-Series firewall. Hence, when you generate a license, the license is mapped to a specific instance of the VM-Series firewall and cannot be modified.
Use the instructions in this section, if you are:
Migrating from an evaluation license to a production license. In order to apply a new capacity license to a firewall that has been previously licensed, for the same license type (BYOL to BYOL), you can deactivate the evaluation license and activate the purchase license in place, you do not need to clone the firewall. For a different license type (PAYG to BYOL) clone the existing (fully configured) VM-Series firewall and use the following instructions to register and license the purchased copy of your VM-Series firewall. During the cloning process, the firewall is assigned a unique UUID, and you can therefore apply a new license to the cloned instance of the firewall. Upgrading the model to allow for increased capacity. For example you want to upgrade from the VM-200 to the VM-1000-HV license.
Migrate the License on the VM-Series Firewall
Power off the VM-Series firewall.
Clone the VM-Series firewall. For moving to a different license type, for example PAYG to BYOL. If you are manually cloning, when prompted indicate that you are copying and not moving the firewall.
Power on the new instance of the VM-Series firewall. Launch the serial console of the firewall on the vSphere/SDX web interface and enter the following command: show system info Verify that: the serial number is unknown the firewall has no licenses the configuration is intact
Register the new auth-code on the Palo Alto Networks Customer Support web site. See Register the VM-Series Firewall.
Apply the new license. See Activate the License. After you successfully license the new firewall, delete the previous instance of the firewall to prevent conflict in configuration or IP address assignments.

Related Documentation