Activate the License for the VM-Series Firewall (Standalone Version)

If you have not elected to use the bootstrapping workflow using a subscription bundle, you must deploy the VM-Series firewall and complete initial configuration before you can activate the license on your VM-Series firewall.
  • If your VM-Series firewall has direct internet access.
    To activate the license, the firewall must be configured with an IP address, netmask, default gateway, and DNS server IP address.
    The firewall must have a valid DNS configuration and have network connectivity to access the Palo Alto Networks licensing server.
    1. If you are activating a license on an already-licensed VM-Series firewall, you must Install a License Deactivation API Key.
    2. Select
      Device
      Licenses
      and select the
      Activate feature using authorization code
      link.
    3. Enter the auth code that you registered on the support portal. The firewall will connect to the update server (updates.paloaltonetworks.com), and download the license and reboot automatically.
    4. Log back in to the web interface and confirm that the
      Dashboard
      displays a valid serial number. If the term
      Unknown
      displays, it means the device is not licensed.
    5. On
      Device
      Licenses
      , verify that
      PA-VM
      license is added to the device.
      If you see an error message, check Troubleshoot License Activation Issues.
  • If your VM-Series firewall does not have internet access.
    1. Select
      Device
      Licenses
      and click the
      Activate Feature using Auth Code
      link.
    2. Click
      Download Authorization File
      , and download the
      authorizationfile.txt
      on the client machine.
    3. Copy the
      authorizationfile.txt
      to a computer that has access to the internet and log in to the support portal. Click
      My VM-Series Auth-Codes
      link and select the applicable auth code from the list and click the
      Register VM
      link.
    4. On the
      Register Virtual Machine
      tab upload the authorization file. Select the PAN-OS version and the hypervisor on which you have deployed the firewall, to complete the registration process. The serial number of your VM-Series firewall will be attached to your account records.
      license-no-Internet.png
    5. Navigate to
      Assets
      My Devices
      and search for the VM-Series device just registered and click the
      PA-VM
      link. This will download the VM-Series license key to the client machine.
    6. Copy the license key to the machine that can access the web interface of the VM-Series firewall and navigate to
      Device
      Licenses
      .
      License keys must be installed through the web interface. The firewall does not support license key installation through SCP or FTP.
    7. Click
      Manually Upload License
      link and enter the license key. When the capacity license is activated on the firewall, a reboot occurs.
    8. Log in to the device and confirm that the
      Dashboard
      displays a valid serial number and that the
      PA-VM
      license displays in the
      Device
      Licenses
      tab.

Related Documentation