Is the API key included in the Configuration file?

[Lesgall]

I just successfully finished migrating a pair of PA-500 to a pair of PA-3020, exporting and loading the configuration file.

I have checked the configuration file and I couldn't find the API key. Is someone able to confirm if the API key is included in the configuration file or if I have to generate a new API key and install the new key in the servers.

Thanks in advance for your help.

[gfreeman · Accepted solution]

The API key is generated from the user's password, it's not stored in the config file.  To generate the API key, you use the keygen PAN-OS API call:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-panorama-api/get-started-with-the-pan-os-xml-api...

[Lesgall]

Thank you for the confirmation. One more question please, if I have the API key (stored in a different server), is there a way to upload it to the FW?

[gfreeman · Accepted solution]

Hmm, not that I'm aware of.

[Lesgall]

Thank you! will generate a new API key.