Deactivate a Feature License or Subscription Using the CLI
If you accidentally installed a license/subscription on a firewall and need to reassign the license to another firewall, you can deactivate an individual license and re-use the same authorization code on another firewall without help from Technical Support. This capability is supported on the CLI only; this process is supported both on the hardware-based firewalls and on the VM-Series firewall.
- Log into the CLI on the firewall.
- (Direct internet access only) View the name
of the license key file for the feature you want to deactivate.request license deactivate key features ?
- (Direct internet access only) Deactivate the
license or subscription.request license deactivate key features <name> mode autowhere, name is the full name for the license key file.For example:
admin@vmPAN2> request license deactivate key features WildFire_License_2015_01_28_I5820573.key mode auto007200002599WildFire License SuccessSuccessfully removed license keys
- (When there is no direct internet access) View
the name of the license key file for the feature you want to deactivate.request license deactivate key features
- (When there is no direct internet access) Deactivate
the license manually.request license deactivate key features <name> mode manualFor example:
admin@PA-VM> request license deactivate key features PAN_DB_URL_Filtering_2015_01_28_I6134084.key mode manualSuccessfully removed license keysdact_lic.01282015.100502.tokThe token file uses the format dact_lic.timestamp.tok, where the timestamp is in the dmmyyyy.hrminsec format.
- Verify that the token file was generated.show license-token-files
- Export the token file to an SCP or TFTP server and save
it to your computer.scp export license-token-file to <username@serverIP> from <token_filename>For example:scp export license-token-file to firstname.lastname@example.org:/tmp/ from dact_lic.01282015.100502.tok
- Log into the Palo Alto Networks Customer Support website.
- Click the Deactivate License(s) link on the Assets tab.
- Select AssetsVM-Series Auth-CodesDeactivate License(s).
- While logged in to the Palo Alto Networks Customer Support website, upload the token file to complete the deactivation.
Deactivate the License(s)
Deactivate the License(s) The license deactivation process enables you to self-manage licenses. Whether you want to remove one or more active licenses or subscriptions attributed ...
Deactivate Licenses URL : https://api.paloaltonetworks.com/api/license/deactivate Parameters : encryptedToken To deactivate the license(s) on a firewall that does not have direct internet access, you must generate ...
Device > Licenses
Device > Licenses Select Device Licenses to activate licenses on all firewall models. When you purchase a subscription from Palo Alto Networks, you receive an ...
Deactivate VM When you no longer need a BYOL instance of the VM-Series firewall, you can free up all active licenses—subscription licenses, VM-Capacity licenses, and ...
Install a License Deactivation API Key
Install a License Deactivation API Key Retrieve your license API key from the Customer Support Portal and install it using the CLI on the firewall ...
Licensing API To successfully license firewalls that do not have direct internet access, Palo Alto Networks provides a licensing API. You can use this API ...
Manage Firewall Licenses
Manage Firewall Licenses Panorama > Device Deployment > Licenses Select Panorama Device Deployment Licenses to perform the following tasks: Update licenses of firewalls that don’t ...
Upgrade the VM-Series for NSX by Changing the OVF URL
Upgrade the VM-Series for NSX by Changing the OVF URL You can upgrade the PAN-OS version of your VM-Series firewall for NSX by changing the ...
Activate the License for the VM-Series Firewall (Standalone...
Activate the License for the VM-Series Firewall (Standalone Version) If you have not elected to use the bootstrapping workflow using a subscription bundle, you must ...