Activate the AI Access Security License (Existing Deployments)

1. Click the magic link provided to you by Palo Alto Networks when you purchase the AI Access Security subscription.
2. Click Activate Subscription to begin activating AI Access Security.
3. Enter your Palo Alto Networks Customer Support Portal (CSP) Email Address. This email address must match the email address that received the magic link to activate AI Access Security.
   Create a New Account if the email address that received the AI Access Security activation link does not already have a valid CSP account. The newly created account is automatically associated with the same tenant for which you're activating AI Access Security and assigned a Multitenant Superuser role.

4. (Multitenancy only) In the Customer Support Account section, select the Palo Alto Networks Customer Support Account associated with the tenant for which you activating the AI Access Security license.
   Skip this step if you have a single tenant Customer Support Portal account. Your Customer Support Account is selected by default.
5. (Multitenancy only) In the Allocate This Subscription section, select the tenant service group (TSG) for which you want to activate AI Access Security. You can select the parent tenant or a child tenant.
   AI Access Security is activated for only the selected tenant. If you select a parent tenant, AI Access Security isn't activated for any child tenant.

   Skip this step if you only have a single tenant Customer Support Portal account. It is selected by default.
6. Review the tenant Region. This region is pre-populated based on the deployed NGFW or Prisma Access tenant region and can't be changed.

7. In the Assign Licenses section, click Done to assign all your AI Access Security licenses. Verify that the AI Access Security License is Fully Assigned
8. Verify that your Data Loss Prevention instance is selected if you have Enterprise Data Loss Prevention (E-DLP) active on your tenant.
   Your Enterprise DLP instance is selected by default if active already on your tenant.

   Skip this step if you don't have Enterprise DLP already active. Enterprise DLP is not required to enable AI Access Security. If Enterprise DLP instance is not already active then one is created as part of the license activation. Review what happens to Enterprise DLP if you don't renew your AI Access Security license.

9. Agree to the Terms and Conditions.
10. Activate.
    You're redirected to the Tenant Management page where the AI Access Security Activation Status starts Initializing.

    The AI Access Security license displays as Data Security and has a serial number that begins with AIX. Continue to the next step after the Activation Status is Complete.

11. (NGFW only) Associate the AI Access Security license with your NGFW.
    Associating the AI Access Security license is required to activate the license for your NGFW.
    1. In the Strata Cloud Manager menu, select SettingsDevice Associations.
       The Strata Cloud Manager menu is located in the bottom-left corner of Strata Cloud Manager.
    2. Associate Apps.
    3. In the Licensed Products, select Data Security.
    4. Select the NGFW for which you want to activate AI Access Security.
    5. Save.
12. Verify you successfully activated AI Access Security.
    1. Log in to the Palo Alto Networks Customer Support Portal (CSP).
    2. Select ProductsAssets.
    3. Select NGFW or Prisma Access tenant based on the enforcement point for which you activated AI Access Security.
    4. Use the filters to locate your NGFW or Prisma Access tenant.
    5. Expand the list of active licenses or click Licenses & Subscriptions.
    6. Verify that the AI Access Security license is active.

13. Get Started with AI Access Security.