Model-Based Licensing API
Use the model-based licensing API to manage license tasks for firewalls that do not have
internet access.
| Where Can I Use
This? | What Do I
Need? |
|---|
|
|
- VM-Series 10.x or above
- Panorama running PAN-OS 10.1.x or above
versions
- Customer Support Portal (CSP) account with one
of the following user roles:
- Superuser, Standard User, Limited User, Threat
Researcher, AutoFocus Trial Role, Group superuser,
Group Standard User, Group Limited User, Group
Threat Researcher, Authorized Support Center (ASC)
User, and ASC Full Service User.
- Superuser access to the VM-Series firewall
|
Use the model-based licensing API to register auth codes, retrieve licenses attached to an auth
code, renew licenses, or deactivate all model-based licenses on a VM-Series firewall. In
addition, the licensing API enables you to license firewalls that do not have direct
internet access and cannot reach the Palo Alto Networks license server. You can manage
licenses manually or automate licensing with a custom script or an orchestration
service.
You can also use the
Panorama Software
Firewall License plugin for licensing tasks, including offline
licensing. The plugin requires Panorama 10.0.0 or later with VM-Series
plugin 2.0.4 or later, and your managed VM-Series firewalls must
be running PAN-OS 9.1.0 or later and VM-Series plugin 2.0.4 or later;
the VM-Series firewall for Azure requires VM-Series plugin 2.0.8.
For model-based licenses, the API allows you to view the details of an auth code so that you can
track the number of unused licenses attached to an auth-code or auth-code
bundle that enables you to license more than one instance of the firewall.
An auth-code bundle includes the VM-Series model, subscriptions and support
in a single, easy to order format; you can use this bundle multiple times to
license VM-Series firewalls as you deploy them.
To use the API, each support account is assigned a unique key.
Each API call is a POST request, and the request must include the
API key to authenticate the request to the licensing server. When
authenticated, the licensing server sends the response in json format
(content-type application/json).
