Activate the License for the VM-Series Firewall (Standalone
If you have not elected to use the bootstrapping
workflow using a subscription bundle, you must deploy the VM-Series
firewall and complete initial configuration before you can activate
the license on your VM-Series firewall.
If your VM-Series firewall has direct
To activate the license, the firewall must be configured
with an IP address, netmask, default gateway, and DNS server IP
The firewall must have a valid DNS configuration
and have network connectivity to access the Palo Alto Networks licensing
and select the
feature using authorization code
Enter the capacity auth code that you registered on
the support portal. The firewall will connect to the update server
(updates.paloaltonetworks.com), and download the license and reboot
Log back in to the web interface and confirm that
VM-Series firewall does not have internet access.
and click the
using Auth Code
Download Authorization File
and download the
on the client machine.
to a computer
that has access to the internet and log in to the support portal.
My VM-Series Auth-Codes
link and select
the applicable auth code from the list and click the
Register Virtual Machine
upload the authorization file. Select the PAN-OS version and the
hypervisor on which you have deployed the firewall, to complete
the registration process. The serial number of your VM-Series firewall
will be attached to your account records.
and search for the
VM-Series device just registered and click the
This will download the VM-Series license key to the client machine.
Copy the license key to the machine that can access
the web interface of the VM-Series firewall and navigate to
License keys must be installed through the web interface.
The firewall does not support license key installation through SCP
Manually Upload License
and enter the license key. When the capacity license is activated
on the firewall, a reboot occurs.