How to Update Specific Versions of Content via the CLI

[Y.Narita347153]

Hello Palo Alto Networks Support Team,

I would like to ask about the current method for updating content via the CLI.

Previously, we used the following command to install a specific content version:

request content upgrade download <content version>

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/cli-commands-for-upgrade/use-cli-comman...

However, it appears that this command is no longer available.

At the same time, it is still possible to download and install a specific content version through the GUI.

Could you please advise whether there is a current CLI method to download or install a specific content version?

If so, would you be able to provide the relevant command and any applicable documentation?

Thank you for your assistance.

Best regards,

[emr_1]

As you know, we can download specific content version via GUI, so let's debug it.

Here is my result:

========= RemoteCall: DynamicUpdates.executeContentAction =========
[2026/08/28 17:57:09]  panui_core\mgmt\MSConnection  (DEBUG) 2302836 8602855971214498 - -
socket 50 sending request <request cmd="op" cookie="8602855971214498" refresh="no">
  <operations xml="yes">
    <request>
      <content>
        <upgrade>
          <download>
            <file>panupv2-all-contents-9130-10174</file>
          </download>
        </upgrade>
      </content>
    </request>
  </operations>
</request>
[2026/08/28 17:57:09]  ExtDirect_Router  (INFO) 2188567 8602855971214498 - -
Call to [PanDirect.run] /DeviceDirect.refreshSession from router.php
[2026/08/28 17:57:09]  PanDirect  (INFO) 2188567 8602855971214498 - -
========= RemoteCall: DeviceDirect.refreshSession =========
[2026/08/28 17:57:09]  panui_core\mgmt\MSConnection  (DEBUG) 2188567 8602855971214498 - -
socket 45 sending request <request cmd="op" cookie="8602855971214498" refresh="yes" skip-audit="yes">
  <operations xml="yes">
    <show>
      <cli>
        <idle-timeout/>
      </cli>
    </show>
  </operations>
</request>
[2026/08/28 17:57:09]  panui_core\mgmt\MSConnection  (DEBUG) 2188567 8602855971214498 - -
socket 45 response took 0.044s <response status="success">
  <result>
    <idle-timeout>3600</idle-timeout>
    <remaining>3600</remaining>
  </result>
</response>
[2026/08/28 17:57:09]  ExtDirect_Router  (INFO) 2188567 8602855971214498 - -
Call to [PanDirect.run] /DeviceDirect.refreshSession from router.php took 0.058s
[2026/08/28 17:57:11]  panui_core\mgmt\MSConnection  (DEBUG) 2302836 8602855971214498 - -
socket 50 response took 2.465s <response status="success" code="19">
  <result>
    <msg>
      <line>Download job enqueued with jobid 10150</line>
    </msg>
    <job>10150</job>
  </result>
</response>
[2026/08/28 17:57:11]  ExtDirect_Router  (INFO) 2302836 8602855971214498 - -
Call to [PanDirect.execute] /DynamicUpdates.executeContentAction from router.php took 2.477s

From above,  "<request> <content> <upgrade> <download> <file>panupv2-all-contents-9130-10174" seems to be valuable command.

Even CLI does not suggest us that "file" is valid prompt as below, it worked on my platform (pavm with 12.1.6)

==========

> request content upgrade download ?
+ force Force install even autocommit is not done
+ latest Most recent content package
+ sync-to-peer Send a copy to HA peer
<Enter> Finish input

> request content upgrade download file panupv2-all-contents-9130-10174

Download job enqueued with jobid 10151
10151

> show jobs id 10151

Enqueued Dequeued ID Type Status Result Completed
------------------------------------------------------------------------------------------------------------------------------
2026/08/28 17:59:05 17:59:05 10151 Downld FIN OK 17:59:26
Warnings:

Details:File successfully downloaded

Successfully downloaded
Applications and Threats version: 9130-10174

==========

Try on your platform.

Note: I'm not PAN employee, so I can't help you with official reply.