Software NGFW renewal, more credits needed for same deployment profile

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Software NGFW renewal, more credits needed for same deployment profile

L0 Member

Hi all,

Last year I purchased 30 Software NGFW Credits for my PA-VM's in AWS. Of which I used 29.54 credits in a Deployment Profile.

This year I purchased again 30 credits to renew this Deployment Profile. However, I got a message:

'Failed to Renew Deployment Profile, Please try again or contact Support'


Then I used the credit estimator, and to my astonishment, the amount of credits needed for the same Deployment Profile is 30.27!

You might say well that's normal, prices increase. But the price increase is already in the price per credit: 23% increase compared to last year!

Neither Palo Alto or our ASC Partner informed me of this. Now I have a hard time to fix this before the licenses expire.


Does anyone have similar experiences, or tips to solve this?



Albert Bruggeman

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

Cyber Elite
Cyber Elite


Do you need the DNS subscription that's going to be tac'd on by default? Assuming your using the default subscriptions dropping the DNS subscription can drop you down to 28.77/28.98 for what I'm assuming is a simple 4 vCPU deployment and get you up and running.

Going forward I would always recommend using the credit estimator prior to making the purchase though. Your partner doesn't know how your actually using these credits unless they care to look, so they're going to assume that you've already used the estimator to pick what you want. 

L0 Member

Hi, thank you for your reply. Do you mean drop a subscription from the existing deployment profile (how?), or deactivate a license in the PA-VM?

I already made a new deployment profile with 1 less subscription. But I cannot link my running PA-VM's to that.

Then I tried to deactivate a license on 1 of the running PA-VM's, but this gives:

Server error : Cannot deactivate license key DNS_Security_2021_09_29.key which is part of bundle without parent_id attribute.

So this license is on both firewalls in the cluster. How do I deactivate this?

  • 2 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!