: Set Up Zero Touch Provisioning
Focus
Focus

Set Up Zero Touch Provisioning

Table of Contents
End-of-Life (EoL)

Set Up Zero Touch Provisioning

Set up Zero Touch Provisioning (ZTP) to simplify and automate on-boarding new managed firewall deployments.
Set up Zero Touch Provisioning (ZTP) to simplify and streamline initial firewall deployments by automating the new managed firewall on-boarding without the need for network administrators to manually provision the firewall.
ZTP onboarding requires on the ZTP firewall, you cable the Eth1/1 interface with an outbound internet connection before the ZTP firewall is powered on. This is required to successfully onboard the ZTP firewall to Panorama management, register your ZTP firewall with the CSP, and push the policy and network configurations from Panorama.
Only Panorama administrators with Superuser privileges can access the ZTP settings required to set up ZTP.
To successfully leverage the ZTP service, on-board your ZTP firewalls with the factory default PAN-OS version before upgrading to PAN-OS 10.0.0 or later release.
The ZTP plugin is supported on PAN-OS 9.1.4 and later releases.