How to Authorize and Install VM-Series Auth-Codes

by panagent on ‎11-28-2013 05:27 PM - edited on ‎11-22-2017 12:13 AM by (68,134 Views)

The steps in this article are applicable to both eval and non-eval VM-Series firewalls.




Screen Shot 2017-10-25 at 2.33.46 PM.png



  • Click the button Add VM-Series Auth-Code


Screen Shot 2017-10-25 at 2.35.12 PM.png



  • In the pop-up window, enter the VM-series auth code that you purchased from Palo Alto Networks and click the button Agree and Submit (Note that for Software Evaluation, you will have received an email containing the evaluation Auth-Code).


Screen Shot 2017-10-25 at 2.41.29 PM.png



  • Click on Download icon to download the VM base image software.


Screen Shot 2017-10-25 at 2.44.43 PM.png


  • A pop-up window will appear with a list of available VM-Series software images. Select the VM-Series Base Image for the type of VM deployment you will be using. Click the download link for the specific base image software version that you need.


Screen Shot 2017-10-25 at 2.47.29 PM.pngScreen Shot 2017-10-25 at 2.48.33 PM.png


  • Install the software on your chosen VM platform (VMWare ESX, NSX, SDX, KVM, or Hyper-V).
  • Note: NSX follows a slightly different licensing procedure, please refer to this article: Activate the License for the VM-Series NSX Edition Firewall
  • After installation is complete, power on the VM and run the command show system info in the CLI console. Locate the CPUID and UUID in the output and copy each of those ID numbers. 
  • Return to the Support portal -> Assets -> VM-Series Auth-Codes.
  • In the VM-Series Auth-Code table, find the auth code that you download the VM software for, and click on its Register VM

Screen Shot 2017-10-25 at 2.59.44 PM.png


  • In the Register Virtual Machine pop-up window, enter the UUID and CPUID that you copied from the VM software image. **It is vital that you enter the ID numbers exactly as they are displayed into each field.**
    • OS Release: Select the software base image version that you downloaded
    • Virtual Platform: Select the VM platform that the VM image is running on
    • Click Submit


Screen Shot 2017-10-25 at 3.03.05 PM.png


  • A new pop-up window will appear showing the new VM serial number. Enter the Location information and click Submit


Screen Shot 2017-10-25 at 3.12.24 PM.png


  • Go to Assets -> Devices and search for the newly created VM image serial #
  • Download the PA-VM key file by clicking the download icon


Screen Shot 2017-10-25 at 3.15.21 PM.png


  • Go to your VM image WebGUI, Device tab -> Licenses page. Click Manually upload license key.



  • Browse to the key file and upload it from your computer.
  • If the upload is successful, you will see a warning about the VM being rebooted.
  • Go ahead and reboot



  • After reboot, log in to the VM WebGUI and go back to Devices -> Licenses. The page should now display the VM support license.
  • If your VM is connected to the Internet, click Retrieve license keys from license server
    • If the VM is not connected to the Internet, you will need to download each of the license key files from the support site and then manually upload each file to the VM image.
  • Once all licenses are downloaded and activated, your Licenses screen should look similar to this.



If you have any trouble during this process, please contact your account Systems Engineer or Palo Alto Networks Support

(Support portal -> Case Management)


For detailed information on installing and deploying the VM Series software, please use the following link: VM-Series Deployment Documentation


Updated by @bfrentz  26 October 2017

by andreip
on ‎09-21-2016 03:14 AM

Please update the article with VM deactivation info.

Ignite 2018
Ask Questions Get Answers Join the Live Community