Sofware Upgrade broken? "An active license is required for this feature"

[pcolomes]

I have a bunch of PA440s and some of them cannot be upgraded as I keep getting an "An active license is required for this feature" message when clicking on Check Now under Device > Software. Device is correctly licensed and activated on the support portal, NTP is activated and sync'd. Dynamic Updates can be retrieved from the Cloud but PAN-OS cannot.

(I have already tried clicking on "Retrieve license keys from license server " with no success)

Current PAN-OS version: 10.1.3

Device Certificate Status: Valid

Anyone having the same problem? 

 

[SomeGuy1000]

I'm having a somewhat similar issue - I can't retrieve licensing or check for updates on one of my pa 440 that we set up today. We have another 440 (they are in HA) and it had no issues.

When did your issues start?

[Paul_Stinson]

currently have a call logged for this. accidently deleted a profile for  "Software NGFW Credits" that had our Panorama and log collectors on it. Have been able to get support to reattach serials (with cpuid and uuid to be able to be migrated). we migrated all serials to another deployment profile for management and everything took except our primary panorama. Same message as above. Shows as licensed ok and yes can get app updates etc just not panOS updates. Awaiting what fix might be needed.....running 10.1.6 here....

[Paul_Stinson]

Fix for our situation with the new Software NGFW credits and Deployment profiles and active license message (once Palo fixed restoring serials in backend - with matching UUID and CPUID and we attached again to another deployment profile that was active) was to run the software check from the CLI not from the GUI.

This fixed up the state that Panorama was in despite license showing as ok after license update and GUI throwing the non active license message in the software tab.

Hope this helps someone.....try CLI update first post license checks and then GUI post this if the CLI looks ok.

[jcoyle2]

I had the same issue and ran "request system software check" from the cli and fixed the error message. 

[OtakarKlier]

Hello,

By default it will use the management port to try and grab the licenses and updates etc. Does the traffic log show why its getting denied? Could be a lot of things, please check the configuration for the following: valid DNS servers, valid time servers, traffic allowed out the management port to the internet, you are bypassing ssl decryption.

Regards,

[DanOC_CGC]

@jcoyle2 thanks, this worked for me too

[Greg_Smith1]

Thanks for tip. Worked as advertised. Much appreciated!

[Steve-Phillips]

@jcoyle2 This worked for me too, so thank you for this tip. There was no error for me to fix, merely running the CLI command came back with the software list and then the GUI displayed the same list.

[ASvinn]

Thank you, this worked for me.

[Daniko]

This worked for me too! Thank you for your post!

[garymurphy]

Worked perfectly for me and cleared the fault!