To activate the license on your VM-Series firewall, you must have deployed the VM-Series firewall and completed initial configuration.
Activate the License
If your VM-Series firewall has direct internet access. To activate the license, the firewall must be configured with an IP address, netmask, default gateway, and DNS server IP address. Select Device >Licenses and select the Activate feature using authentication code link. Enter the capacity auth code that you registered on the support portal. The firewall will connect to the update server (updates.paloaltonetworks.com), and download the license and reboot automatically. Log back in to the web interface and confirm that the Dashboard displays a valid serial number. If the term Unknown displays, it means the device is not licensed. On Device > Licenses, verify that PA-VM license is added to the device.
If your VM-Series firewall does not have internet access. Select Device > Licenses and click the Activate Feature using Auth Code link. Click Download Authorization File, and download the authorizationfile.txt on the client machine. Copy the authorizationfile.txt to a computer that has access to the internet and log in to the support portal. Click My VM-Series Auth-Codes link and select the applicable auth code from the list and click the Register VM link. On the Register Virtual Machine tab upload the authorization file. This will complete the registration process and the serial number of your VM-Series firewall will be attached to your account records.
Navigate to Assets > My Devices and search for the VM-Series device just registered and click the PA-VM link. This will download the VM-Series license key to the client machine. Copy the license key to the machine that can access the web interface of the VM-Series firewall and navigate to Device > Licenses. License keys must be installed through the web interface. The firewall does not support license key installation through SCP or FTP. Click Manually Upload License link and enter the license key. When the capacity license is activated on the firewall, a reboot occurs. Log in to the device and confirm that the Dashboard displays a valid serial number and that the PA-VM license displays in the Device > Licenses tab.

Related Documentation