VM-Series documentation is temporarily unavailable due to scheduled maintenance. We apologize for the inconvenience. The documentation will be available again shortly.
    Strata Copilot
    PAN-OS Upgrade Guide
    : Use CLI Commands for Upgrade Tasks
    Focus
    Download PDF
    Focus
    1. Home
    2. PAN-OS
    3. PAN-OS Upgrade Guide
    4. CLI Commands for Upgrade
    5. Use CLI Commands for Upgrade Tasks
    Download PDF

    PAN-OS Upgrade Guide

    Use CLI Commands for Upgrade Tasks

    Table of Contents

    Use CLI Commands for Upgrade Tasks

    CLI commands for upgrading PAN-OS.
    Use the following CLI commands to carry out upgrade tasks.
    If you want to...
    Use...
    Check the current versions of the firewall
    • Check the current version of the firewall software and content.
    
									show system info
    Access the available dynamic updates and upgrade the content version of the firewall
    • Check available content versions of dynamic updates directly from the Palo Alto Networks servers.
    
									request content upgrade check
    • Check available content versions of dynamic updates directly from the firewall.
    
									request content upgrade info
    • Download content version directly to the firewall.
    
									request content upgrade download <content version>
    • Install content version.
    
									request content upgrade install <content version>
    Access the available software versions and upgrade the firewall
    • Check the available software versions available for download.
    
									request system software info
    • Check the preferred releases of a software.
      (PAN-OS 11.1.3 and later releases)
    		 
    
									request system software info preferred
    • Check the base releases of a software.
      (PAN-OS 11.1.3 and later releases)
    		 
    
									request system software info base
    • Check both preferred and base releases of a software.
      (PAN-OS 11.1.3 and later releases)
    		 
    
									request system software info preferred base
    • Check the available versions loaded on the firewall.
    		 
    
									request system software check
    • Download a specific version of the software.
    		 
    
									request system software download version <version>
    • Check the status of a specific download job.
    		 
    
									Show job id <jobid>
    • Install the downloaded software.
    
									request system software install version 10.1.0
    • Restart the firewall.
    
									request restart system
    • Initiate the HA upgrade orchestration workflow.
      (PAN-OS 12.1.2 and later releases)
    		 
    request workflow high-availability software install install_timeout <value> wait_peer_to_start <value> wait_post_switchover <value> file <filename> ha-pair <serial-number1,serial-number2>
    • Stop a specific running workflow or job.
      (PAN-OS 12.1.2 and later releases)
    		 
    request workflow terminate-job job-id <id>
    Access the available software patches for the firewall:
    The patch feature is currently offered in preview mode. Full support is not available with this functionality.
    If you want to...
    Use...
    • Check the available software patches available for download.
    
									request system patch check
    • Check the available patches for the currently installed firewall version.
    
									request system patch info
    • Download a specific patch version.
    
									request system patch download version <version>
    • Check more detailed information for a specific patch version.
    
									request system patch info version <version>
    • Install the downloaded patch.
    
									request system patch install version <version>
    • Apply the installed patch.
    
									request system patch apply

    © 2026 Palo Alto Networks, Inc. All rights reserved.