Register the VM-Series Firewall (Software NGFW Credits)

• Use the following steps if the firewall is able to connect to the CSP:

  1. Log in to the CSP with your account credentials.
  2. Select ProductsAssetsSoftware NFGW Credits.

     Locate your credit pool and view Details.
  3. View Current Deployment Profiles and choose (or create) a profile.

     You will use the auth code from this profile for licensing any firewall you create with it. An auth code for a flexible firewall license begins with the letter D.
  4. Log in to the VM-Series firewall web interface.
  5. Verify the Palo Alto Networks update server configuration.

     1. Select DeviceSetupServices.
     2. Confirm that Update Server is set to updates.paloaltonetworks.com.
     3. Confirm that Verify Update Server Identity is selected.
  6. Select DeviceLicenses.

     1. Select the Activate feature using authorization code link.
     2. Enter the VM-Series authorization code from the deployment profile.
     3. Click OK to confirm the license upgrade.The firewall contacts the Palo Alto Networks update server and consumes the tokens required for your firewall based on the VM-Series model.
  7. Confirm that the Dashboard displays a valid serial number and that the PA-VM license displays in the DeviceLicenses tab.
  8. Verify your firewall is registered on the CSP:

     • Select ProductsAssetsSoftware NFGW Credits
     • Auth Code column, View Devices and locate the serial number for your deployment.
     • In the credit pool, Credits Consumed, Firewalls Deployed, and vCPUs consumed should be incremented to reflect your deployment.
• Use the following steps if the firewall is not able to connect to the CSP:

  This workflow adds your firewall to the support database. Because the firewall can’t connect to the license server, you must manually pass the licenses from the CSP to the firewall.

  1. Log in to the CSP with your account credentials.
  2. Select the new profile and Select the vertical ellipsis (More Options) and Register Firewall.

     This opens the device registration form. Enter the information for your firewall and Submit:

     This associates the firewall with the profile and its authcode and assigns a serial number.
  3. Click View Devices to see associated firewalls in Software NGFW Devices.

     In the License column, download each license key to a location from which you can safely transfer the files to the firewall.
  4. Log in to the firewall and select DeviceLicenses.

     License keys must be installed through the web interface. The firewall does not support license key installation through SCP or FTP.

     • Click Manually Upload License.
     • Confirm that the Dashboard displays a valid serial number and that the PA-VM license displays in the DeviceLicenses tab.