Failed to install licenses. Model incompatible : feature model is VM while the device model is VMFLEX

[CHOE-KyungJun]

Dear team,

Hello

When a customer registers a VM firewall license, the following error message is displayed.

Anyone else seeing these issues?  please let me know how to fix it.

<Flexible license>

<Fixed license>

[dmaynard]

Sure not using a deployment profile for 10.0.4 or higher and using auth for older PAN-OS?

What version of PAN-OS are your deploying on?

Where are you deploying PAVM?

[CHOE-KyungJun]

@dmaynard 

The OS version is 9.1.0-h3.

I've searched related known issues, but couldn't find a match.

And the firewall is installed in azure.

[dmaynard]

Deploying from custom image or marketplace?

May have old product code if using custom image and needs to be updated.

[CHOE-KyungJun]

@dmaynard 

1. Deploying from custom image or marketplace?
> My client used the azure template, not the marketplace.

2. May have old product code if using custom image and needs to be updated.
> Are you saying the template could have old product code?
> The code information is as follows.
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.13",
"parameters": {
"vmName": {
"defaultValue": "VM-FW2",
"type": "String",
"metadata": {
"description": "Name of VM-Series FW in the Azure portal"
}
},
"fwAvSet": {
"defaultValue": "AS-FW",
"type": "String",
"metadata": {
"description": "EXISTING Availability Set name for Firewalls"
}
},
"customData": {
"defaultValue": "storage-account=None,access-key=None,file-share=None,share-directory=None",
"type": "String",
"metadata": {
"description": "String passed down to the Virtual Machine."
}
},
"vmSize": {
"defaultValue": "Standard_DS5_v2",
"allowedValues": [
"Standard_D3",
"Standard_D4",
"Standard_D3_v2",
"Standard_D4_v2",
"Standard_A4",
"Standard_DS3_v2",
"Standard_DS4_v2",
"Standard_DS3_v2"
],
"type": "String",
"metadata": {
"description": "Azure VM size for VM-Series"
}
},
"imageVersion": {
"defaultValue": "latest",
"allowedValues": [
"latest",
"9.1.4",
"9.1.2",
"9.1.0"
],
"type": "String",
"metadata": {
"description": "Version number of VM-Series VM in the Azure portal"
}
},
"imageSku": {
"defaultValue": "byol",
"allowedValues": [
"byol",
"bundle1",
"bundle2"
],
"type": "String",
"metadata": {
"description": "Firewall License Model"
}
},
"virtualNetworkName": {
"defaultValue": "V-NET",
"type": "String",
"metadata": {
"description": "Name of the EXISTING Virtual Network (VNET)"
}
},
"virtualNetworkAddressPrefix": {
"defaultValue": "192.168.0.0/16",
"type": "String",
"metadata": {
"description": "EXISTING Virtual network address CIDR"
}
},
"virtualNetworkExistingRGName": {
"defaultValue": "",
"type": "String",
"metadata": {
"description": "Name of resource group of EXISTING VNET"
}
},
"subnet0Name": {
"defaultValue": "Mgmt",
"type": "String",
"metadata": {
"description": "EXISTING Subnet for Management"
}
},
"subnet1Name": {
"defaultValue": "Untrust",
"type": "String",
"metadata": {
"description": "EXISTING Subnet for Untrust"
}
},
"subnet2Name": {
"defaultValue": "Trust",
"type": "String",
"metadata": {
"description": "EXISTING Subnet for Trust"
}
},
"authenticationType": {
"defaultValue": "password",
"allowedValues": [
"sshPublicKey",
"password"
],
"type": "String",
"metadata": {
"description": "Type of administrator user authentication "
}
},
"subnet0Prefix": {
"defaultValue": "192.168.0.0/24",
"type": "String",
"metadata": {
"description": "EXISTING Mgmt subnet CIDR"
}
},
"subnet1Prefix": {
"defaultValue": "192.168.1.0/24",
"type": "String",
"metadata": {
"description": "EXISTING Untrust subnet CIDR"
}
},
"subnet2Prefix": {
"defaultValue": "192.168.2.0/24",
"type": "String",
"metadata": {
"description": "EXISTING Trust subnet CIDR"
}
},
"subnet0Address": {
"defaultValue": "192.168.0.4",
"type": "String",
"metadata": {
"description": "Mgmt subnet static address"
}
},
"subnet1Address": {
"defaultValue": "192.168.1.4",
"type": "String",
"metadata": {
"description": "Untrust subnet static address"
}
},
"subnet2Address": {
"defaultValue": "192.168.2.4",
"type": "String",
"metadata": {
"description": "Trust subnet static address"
}
},
"adminUsername": {
"type": "String",
"metadata": {
"description": "Username of the administrator account of VM-Series"
}
},
"adminPassword": {
"defaultValue": "",
"type": "SecureString",
"metadata": {
"description": "Password for the administrator account of VM-Series"
}
},
"publicIPAddressName": {
"type": "String",
"metadata": {
"description": "Name of FW1 MGMT Public Address"
}
},
"bootstrap": {
"type": "string",
"defaultValue": "no",
"allowedValues": [
"yes",
"no"
],
"metadata": {
"description": "Pass bootstrap data to VM"
}
},
"zone": {
"type": "string",
"defaultValue": "None",
"metadata": {
"description": "Availability Zone for VM-Series"
}
},
"nsgName": {
"defaultValue": "DefaultNSG",
"type": "String",
"metadata": {
"description": "Name of existing Network Security Group for MGMT FW interface"
}
}
},
"variables": {
"apiVersion": "2015-06-15",
"imagePublisher": "paloaltonetworks",
"imageOffer": "vmseries1",
"nicName": "[concat(parameters('vmName'), '-eth')]",
"vnetID": "[resourceId(parameters('virtualNetworkExistingRGName'),concat('Microsoft.Network','/','virtualNetworks'),parameters('virtualNetworkName'))]",
"subnet0Ref": "[concat(variables('vnetID'),'/subnets/',parameters('subnet0Name'))]",
"subnet1Ref": "[concat(variables('vnetID'),'/subnets/',parameters('subnet1Name'))]",
"subnet2Ref": "[concat(variables('vnetID'),'/subnets/',parameters('subnet2Name'))]",
"publicIPAddressType": "Dynamic",
"zones": [
"[parameters('zone')]"
],
"subnets": [
{
"name": "[parameters('subnet0Name')]",
"properties": {
"addressPrefix": "[parameters('subnet0Prefix')]",
"networkSecurityGroup": {
"id": "[resourceId('Microsoft.Network/networkSecurityGroups', parameters('nsgName'))]"
}
}
},
{
"name": "[parameters('subnet1Name')]",
"properties": {
"addressPrefix": "[parameters('subnet1Prefix')]"
}
},
{
"name": "[parameters('subnet2Name')]",
"properties": {
"addressPrefix": "[parameters('subnet2Prefix')]"
}
}
]
},
"resources": [
{
"type": "Microsoft.Resources/deployments",
"apiVersion": "2017-05-10",
"name": "pid-6DBAAFA1-69B7-48FC-8ECC-B6B3D2664FCD",
"properties": {
"mode": "Incremental",
"template": {
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"resources": []
}
}
},
{
"type": "Microsoft.Network/publicIPAddresses",
"apiVersion": "2019-04-01",
"name": "[parameters('publicIPAddressName')]",
"location": "[resourceGroup().location]",
"properties": {
"publicIPAllocationMethod": "[variables('publicIPAddressType')]",
"dnsSettings": {
"domainNameLabel": "[parameters('publicIPAddressName')]"
}
}
},
{
"type": "Microsoft.Network/networkInterfaces",
"apiVersion": "2017-10-01",
"name": "[concat(variables('nicName'), '0')]",
"location": "[resourceGroup().location]",
"dependsOn": [
"[concat('Microsoft.Network/publicIPAddresses/', parameters('publicIPAddressName'))]"
],
"properties": {
"ipConfigurations": [
{
"name": "ipconfig-mgmt",
"properties": {
"privateIPAllocationMethod": "Static",
"privateIPAddress": "[parameters('subnet0Address')]",
"publicIPAddress": {
"id": "[resourceId('Microsoft.Network/publicIPAddresses', parameters('publicIPAddressName'))]"
},
"subnet": {
"id": "[variables('subnet0Ref')]"
}
}
}
]
}
},
{
"type": "Microsoft.Network/networkInterfaces",
"apiVersion": "2017-10-01",
"name": "[concat(variables('nicName'), '1')]",
"location": "[resourceGroup().location]",
"dependsOn": [],
"properties": {
"enableIPForwarding": true,
"ipConfigurations": [
{
"name": "ipconfig-untrust",
"properties": {
"privateIPAllocationMethod": "Static",
"privateIPAddress": "[parameters('subnet1Address')]",
"subnet": {
"id": "[variables('subnet1Ref')]"
}
}
}
]
}
},
{
"type": "Microsoft.Network/networkInterfaces",
"apiVersion": "2017-10-01",
"name": "[concat(variables('nicName'), '2')]",
"location": "[resourceGroup().location]",
"properties": {
"enableIPForwarding": true,
"ipConfigurations": [
{
"name": "ipconfig-trust",
"properties": {
"privateIPAllocationMethod": "Static",
"privateIPAddress": "[parameters('subnet2Address')]",
"subnet": {
"id": "[variables('subnet2Ref')]"
}
}
}
]
}
},
{
"type": "Microsoft.Compute/virtualMachines",
"apiVersion": "2018-06-01",
"name": "[parameters('vmName')]",
"location": "[resourceGroup().location]",
"dependsOn": [
"[concat('Microsoft.Network/networkInterfaces/', variables('nicName'), '0')]",
"[concat('Microsoft.Network/networkInterfaces/', variables('nicName'), '1')]",
"[concat('Microsoft.Network/networkInterfaces/', variables('nicName'), '2')]"
],
"plan": {
"name": "[parameters('imageSku')]",
"product": "[variables('imageOffer')]",
"publisher": "[variables('imagePublisher')]"
},
"properties": {
"availabilitySet": {
"id": "[resourceId('Microsoft.Compute/availabilitySets', parameters('fwAvSet'))]"
},
"hardwareProfile": {
"vmSize": "[parameters('vmSize')]"
},
"osProfile": {
"computerName": "[parameters('vmName')]",
"adminUsername": "[parameters('adminUsername')]",
"adminPassword": "[parameters('adminPassword')]",
"linuxConfiguration": "[if(equals(parameters('authenticationType'), 'password'), json('null'), variables('linuxConfiguration'))]",
"customData": "[if(equals(parameters('bootstrap'), 'no'), json('null'), base64(parameters('customData')))]"
},
"storageProfile": {
"imageReference": {
"publisher": "[variables('imagePublisher')]",
"offer": "[variables('imageOffer')]",
"sku": "[parameters('imageSku')]",
"version": "[parameters('imageVersion')]"
},
"osDisk": {
"createOption": "FromImage"
}
},
"networkProfile": {
"networkInterfaces": [
{
"id": "[resourceId('Microsoft.Network/networkInterfaces', concat(variables('nicName'),'0'))]",
"properties": {
"primary": true
}
},
{
"id": "[resourceId('Microsoft.Network/networkInterfaces', concat(variables('nicName'),'1'))]",
"properties": {
"primary": false
}
},
{
"id": "[resourceId('Microsoft.Network/networkInterfaces', concat(variables('nicName'),'2'))]",
"properties": {
"primary": false
}
}
]
}
},
"zones": "[if(equals(parameters('zone'), 'None'), json('null'), variables('zones'))]"
}
]
}

[dmaynard · Accepted solution]

"imageOffer": "vmseries1",

That is an older offering, discontinued updates but still available.

az vm image list --publisher paloaltonetworks --offer vmseries-flex --all --output table

[CHOE-KyungJun]

@dmaynard 

Thank you for your commnet

According to your comments, that model seems to be still supported as well. But can you tell me why this error is occurring?