Cortex XDR manager upgrade

[ThomasDaCruz]

Hello, 
In October, our XDR manager console displayed a pop-up window regarding "Cortex XDR 4.X is now available" with the possibility to upgrade before end of February 2026. 
We did not choose to upgrade at that time. 

How can we upgrade now ? Can we do it alone or it require a support case ? 

Thank you for your help. 

Thomas

[susekar]

Hello @ThomasDaCruz ,

Greetings for the day.

Upgrading to Cortex XDR 4.x is a major platform migration managed through a phased rollout rather than a standard software update.

How to Upgrade Now

If your tenant is currently eligible for the migration, you can initiate the process yourself without a support case:
* Check the Management Console: When you log in as an Account Administrator or Instance Administrator, a notification banner or pop-up should appear regarding the availability of Cortex XDR 4.x.
* Use the Notification Center: If the pop-up was previously dismissed, check the Notification Center in your console to view upgrade details.
* Self-Service Actions: From the banner or notification, you can select Upgrade now to start the process immediately or use the calendar to schedule it for a later time.

If the Upgrade Option is Missing

If you no longer see the upgrade banner or notification, it indicates that your tenant is not currently included in an active rollout batch or the scheduled window has changed.
* Do not open a support case: Technical Support (TAC) does not manage or process these platform upgrades.
* Contact your Account Team: To request an immediate upgrade or to inquire about your migration schedule, you must contact your Palo Alto Networks Account Manager or Sales Engineer/Solution consultant.

Important Timelines and Details

• Scheduling Deadline: The final date to manually schedule your upgrade is January 22, 2026.
• Automatic Migration: Any tenants that have not been manually upgraded will be automatically migrated by the end of February 2026.
• Upgrade Window: If scheduling manually, you must select a time between Monday and Thursday, from 05:00 to 17:00 UTC.
• Downtime: The upgrade process typically takes 60 to 120 minutes, during which the management console will be temporarily unavailable. Endpoint protection remains fully functional during this window.

If you feel this has answered your query, please let us know by clicking Like and "Mark this as a Solution".

Thanks & Regards,
S. Subashkar Sekar