Locate the activation codes for the licenses you
purchased.
When you purchased your subscriptions you should have received
an email from Palo Alto Networks customer service listing the activation
code associated with each subscription. If you cannot locate this
email, contact Customer Support to obtain
your activation codes before you proceed.
Activate your Support license.
You will not be able to update your PAN-OS software if
you do not have a valid Support license.
Log in to the web interface and then select DeviceSupport.
Click Activate support using authorization
code.
Enter your Authorization Code and
then click OK.
Activate each license you purchased.
Select DeviceLicenses and
then activate your licenses and subscriptions in one of the following
ways:
Retrieve license keys from license server—Use
this option if you activated your license on the Customer Support portal.
Activate feature using authorization code—Use
this option to enable purchased subscriptions using an authorization
code for licenses that have not been previously activated on the
support portal. When prompted, enter the Authorization
Code and then click OK.
Manually upload license key—Use this
option if your firewall does not have connectivity to the Palo Alto Networks Customer Support
Portal. In this case, you must download a license key file
from the support site on an internet-connected computer and then
upload to the firewall.
To automate activation
using the Customer Support Portal API, see the process to Activate Licenses. This
process works for both the hardware and VM-Series firewalls.
Verify that the license is successfully activated
On the DeviceLicenses page,
verify that the license is successfully activated. For example,
after activating the WildFire license, you should see that the license
is valid:
(WildFire, Advanced URL Filtering, and DNS Security
subscriptions only) Commit configuration
changes to complete subscription activation.
After activating a WildFire, Advanced URL Filtering, or
DNS Security subscription license, a commit is required for the
firewall to begin processing their corresponding traffic and data
types based on the security profile configurations. You should:
Commit any pending changes. If you do not have pending changes,
which prevents you from committing any configuration updates, you
can: issue a #commit force command through the
CLI or make an update that writes to the candidate configuration,
which enables the commit option.
A commit force bypasses
some of the validation checks that normally occur with a normal
commit operation. Make sure your configuration is valid and is semantically
and syntactically correct before issuing a commit force update.
WildFire only Check that the WildFire Analysis profile rules include
the advanced file types that are now supported with the WildFire
subscription. If no change to any of the rules is required, make
a minor edit to a rule description and perform a commit.