: Activate a License for Prisma Access (Managed by Panorama) and Add-Ons Through Common Services
Focus
Focus

Activate a License for Prisma Access (Managed by Panorama) and Add-Ons Through Common Services

Table of Contents

Activate a License for Prisma Access (Managed by Panorama) and Add-Ons Through Common Services

Learn how to activate your Prisma Access (Managed by Panorama) tenants through Common Services.
Where Can I Use This?What Do I Need?
  • Panorama
  • Commercial or FedRAMP Moderate deployments. Not FedRAMP High "In Process" deployments, which follow a different procedure.
  • Prisma Access license with optional add-ons
  • Activation link
  • Strata Logging Service
  • Role: Multitenant Superuser
  • FedRAMP Moderate: Panorama-managed Prisma Access FedRAMP Plugin and Dataplane Requirements
After you receive an email from Palo Alto Networks identifying the license you are activating, including all your add-ons and capacities, use the activation link to begin the activation process. The service will help you with the process of claiming your license, creating your tenant, and managing your users.
Select Activate Subscription in your email.
  1. Log in with your email address.
    • If you have a Palo Alto Networks Customer Support account, then enter the email address you used when you registered for that account and select Next.
    • If you do not have a Palo Alto Networks Customer Support account, then Create a New AccountPasswordNext.
    The service uses this email address for the user account assigned to the tenant that you use for this license. This tenant, and any others created by this email address, will have the Multitenant Superuser role.
  2. Choose the Customer Support Account number that you want to use to claim the license.
  3. Choose Panorama management for your setup and management method.
  4. Allocate the subscription to the recipients of your choice. You can select an existing tenant or create a new tenant. The following example shows creating a new tenant.
    For Managed Security Service Providers (MSSPs) and distributed enterprises, you can allocate the subscription directly on any tenant in the hierarchy. What is a tenant?
    1. Create a new tenant from All Tenants +.
    2. Name the tenant and select Done.
    3. (Optional) For Managed Security Service Providers (MSSPs) and distributed enterprises, create a new child tenant by selecting + from the parent tenant that you previously created.
    4. (Optional) Name the child tenant and select Done.
  5. Select the Region where you want to deploy your product.
    There is no cross-region aggregation. Make sure that all your tenants are in the same region for monitoring purposes.
  6. Select Create New from the Panorama drop-down and copy the Panorama Serial Number for use in step 9.
  7. Add-ons are enabled by default based on your contract. Disable (deselect) any add-ons you don’t want to activate now.
  8. Select Cloud Identity Engine if you might use it in the future.
  9. Agree to the Terms and Conditions.
  10. Activate Now. The products and add-ons that you are activating (such as Prisma Access or Strata Logging Service) are now provisioned. As the subscriptions are activating, the progress status will display. You now have a tenant provisioned with instances of the products that you purchased. The tenant has one user — the Customer Support account that you used when you began this process.
  11. Generate your One Time Password (OTP) from Common ServicesTenant ManagementTenant nameGenerate OTP for setting up Panorama.
  12. Complete the product setup: