To license the firewall during the bootstrapping
process, you must purchase the auth codes and register the licenses
and subscriptions on the Palo Alto Networks Support portal before
you begin bootstrapping.
For the VM-Series firewalls running
BYOL (not applicable for usage-based licensing—PAYG), you must have
an auth code bundle that includes the capacity auth code, support
subscription, and any other subscriptions you require. The process
of preparing the licenses for bootstrapping depends on whether the
firewall has internet access when bootstrapping: