How to Update Specific Versions of Content via the CLI

[Y.Narita347153]

Hello Palo Alto Networks Support Team,

I would like to ask about the current method for updating content via the CLI.

Previously, we used the following command to install a specific content version:

request content upgrade download <content version>

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/cli-commands-for-upgrade/use-cli-comman...

However, it appears that this command is no longer available.

At the same time, it is still possible to download and install a specific content version through the GUI.

Could you please advise whether there is a current CLI method to download or install a specific content version?

If so, would you be able to provide the relevant command and any applicable documentation?

Thank you for your assistance.

Best regards,

[emr_1]

As you know, we can download specific content version via GUI, so let's debug it.

Here is my result:

========= RemoteCall: DynamicUpdates.executeContentAction =========
[2026/08/28 17:57:09]  panui_core\mgmt\MSConnection  (DEBUG) 2302836 8602855971214498 - -
socket 50 sending request <request cmd="op" cookie="8602855971214498" refresh="no">
  <operations xml="yes">
    <request>
      <content>
        <upgrade>
          <download>
            <file>panupv2-all-contents-9130-10174</file>
          </download>
        </upgrade>
      </content>
    </request>
  </operations>
</request>
[2026/08/28 17:57:09]  ExtDirect_Router  (INFO) 2188567 8602855971214498 - -
Call to [PanDirect.run] /DeviceDirect.refreshSession from router.php
[2026/08/28 17:57:09]  PanDirect  (INFO) 2188567 8602855971214498 - -
========= RemoteCall: DeviceDirect.refreshSession =========
[2026/08/28 17:57:09]  panui_core\mgmt\MSConnection  (DEBUG) 2188567 8602855971214498 - -
socket 45 sending request <request cmd="op" cookie="8602855971214498" refresh="yes" skip-audit="yes">
  <operations xml="yes">
    <show>
      <cli>
        <idle-timeout/>
      </cli>
    </show>
  </operations>
</request>
[2026/08/28 17:57:09]  panui_core\mgmt\MSConnection  (DEBUG) 2188567 8602855971214498 - -
socket 45 response took 0.044s <response status="success">
  <result>
    <idle-timeout>3600</idle-timeout>
    <remaining>3600</remaining>
  </result>
</response>
[2026/08/28 17:57:09]  ExtDirect_Router  (INFO) 2188567 8602855971214498 - -
Call to [PanDirect.run] /DeviceDirect.refreshSession from router.php took 0.058s
[2026/08/28 17:57:11]  panui_core\mgmt\MSConnection  (DEBUG) 2302836 8602855971214498 - -
socket 50 response took 2.465s <response status="success" code="19">
  <result>
    <msg>
      <line>Download job enqueued with jobid 10150</line>
    </msg>
    <job>10150</job>
  </result>
</response>
[2026/08/28 17:57:11]  ExtDirect_Router  (INFO) 2302836 8602855971214498 - -
Call to [PanDirect.execute] /DynamicUpdates.executeContentAction from router.php took 2.477s

From above,  "<request> <content> <upgrade> <download> <file>panupv2-all-contents-9130-10174" seems to be valuable command.

Even CLI does not suggest us that "file" is valid prompt as below, it worked on my platform (pavm with 12.1.6)

==========

> request content upgrade download ?
+ force Force install even autocommit is not done
+ latest Most recent content package
+ sync-to-peer Send a copy to HA peer
<Enter> Finish input

> request content upgrade download file panupv2-all-contents-9130-10174

Download job enqueued with jobid 10151
10151

> show jobs id 10151

Enqueued Dequeued ID Type Status Result Completed
------------------------------------------------------------------------------------------------------------------------------
2026/08/28 17:59:05 17:59:05 10151 Downld FIN OK 17:59:26
Warnings:

Details:File successfully downloaded

Successfully downloaded
Applications and Threats version: 9130-10174

==========

Try on your platform.

Note: I'm not PAN employee, so I can't help you with official reply.

[Y.Narita347153]

Thank you for your response.

I was able to download the content package using the method you provided.

Could you also advise whether it is possible to specify a particular version during installation in the same manner?

I attempted to install the content package using the command below; however, although the command was accepted, the installation ultimately failed with an error.

> request content upgrade install skip-content-validity-check yes file panupv2-all-apps-9140-10212

Content cannot be installed. Failed to determine version of content.

[reaper]

if you run a check first you get a list of available content packages:

reaper@PA-440> request content upgrade check 

Version               Size              Released on Downloaded  Installed
-------------------------------------------------------------------------
9135-10195           139MB 2026/08/12 19:47:52 CEST         no         no
9133-10186           139MB 2026/08/06 22:40:54 CEST         no         no
9137-10202           129MB 2026/08/18 18:08:24 CEST         no         no
9139-10207           129MB 2026/08/24 22:33:08 CEST        yes   previous
9136-10199           129MB 2026/08/14 01:28:17 CEST         no         no
9132-10178           139MB 2026/08/03 23:11:29 CEST         no         no
9131-10176           139MB 2026/07/30 21:42:29 CEST         no         no
9140-10212           129MB 2026/08/26 02:32:35 CEST        yes    current
9141-10215           129MB 2026/08/27 21:41:20 CEST         no         no
9138-10205           129MB 2026/08/19 22:53:02 CEST        yes         no
9134-10191           139MB 2026/08/10 23:57:12 CEST         no         no
9130-10174           139MB 2026/07/28 23:37:02 CEST         no         no

the option to download a 'version' appears to have been removed, but the 'file' can still be fetched

reaper@PA-440> request content upgrade download 
+ force          Force install even autocommit is not done
+ latest         Most recent content package
+ sync-to-peer   Send a copy to HA peer
  <Enter>        Finish input

reaper@PA-440> request content upgrade download version 9133-10186
Invalid syntax.

reaper@PA-440> request content upgrade download file panupv2-all-contents-9133-10186
Download job enqueued with jobid 8912
8912

In short, you must append the full filename to the version number and use 'file' instead of 'version' (or just the version number) to download content packages