PA-VM registration failures upon deployment in NSX

PA-VM registration failures upon deployment in NSX

8922
Created On 03/12/20 17:56 PM - Last Modified 06/11/22 02:50 AM


Symptom


Panorama fails to register the PA-VM upon deployment. For every new deployment in NSX environment, licenses are not automatically installed
  • Set logging level on configd process to “debug” by turning on debug on management-server using below CLI on Panorama:
> debug management-server on debug  (configd.log/ms.log)
  • Review System Logs and/or configd logs to understand and verify the failure events.
System Logs: 
> show log system direction equal backward
...
critical general general 0 000710000864 vm-cfg: failed to fetch license for svm device uuid=42158BAB-2FC3-ACF8-E693-3E1FDF805E28, cpuid=NSX:54060500FFFBAB1F, ip=10.141.32.232
...
  • System logs show that Panorama failed to fetch serial number for PA-VM with specific uuid and cpuid
configd.log 
> less mp-log configd.log
....
vm-cfg: svm enabled device registering with init state
vm-cfg: scheduled license fetch for uuid=42158BAB-2FC3-ACF8-E693-3E1FDF805E28, cpuid=NSX:54060500FFFBAB1F
Error: pan_cfg_vm_lic_fetch(pan_cfg_vm.c:3993): failed to fetch license: The auth code must be registered on the support site before creating a VM device
  • Above log snippet shows the auth code used under Panorama > Device Group is not registered on Support Portal.
  • Turn off the debug level to normal by using  
> debug management-server on info

 


Environment


  • Platform: PA-VM  Panorama
  • Supported PAN-OS  
  • Deployment: Operations Centric


Cause


ELA / Auth code should be registered under support portal prior to use.

Resolution


Register the auth code on Support Portal and enter the correct auth code under Panorama > Device Group included on the Service Definition.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PP20CAG&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language