PA-VM registration failures upon PAN-OS Upgrade
5385
Created On 03/12/20 18:17 PM - Last Modified 04/06/20 22:47 PM
Symptom
VM-Series firewalls lose the serial number after upgrading PAN-OS from 7.1.x to 8.1.x or 9.0.x
- Review System Logs and/or configd logs to understand and verify the failure events.
configd Logs:
2019-10-03 11:42:37.650 -0400 vm-cfg: scheduled license fetch for uuid=42268CAD-6917-F798-42D5-227D9DBCF930, cpuid=NSX:D7060200FFFBAB1F
2019-10-03 11:42:38.657 -0400 Error: pan_cfg_vm_lic_fetch(pan_cfg_vm.c:3979): failed to fetch license: An initial license cannot be applied for renewal of license
2019-10-03 11:42:37.650 -0400 vm-cfg: scheduled license fetch for uuid=42268CAD-6917-F798-42D5-227D9DBCF930, cpuid=NSX:D7060200FFFBAB1F
2019-10-03 11:42:38.657 -0400 Error: pan_cfg_vm_lic_fetch(pan_cfg_vm.c:3979): failed to fetch license: An initial license cannot be applied for renewal of license
- Above log snippet shows, license fetched cannot be applied
- Retrieve the cupid and uuid associated with the serial using the below CLI command:
> show system info
CPU ID on 7.1.x
Serial # 007900000029836
CPU ID D7060200FFFBAB1F
UUID 4226931E-0E19-1628-53A5-FE0B9A06E509
Serial # 007900000029836
CPU ID D7060200FFFBAB1F
UUID 4226931E-0E19-1628-53A5-FE0B9A06E509
CPU ID on 8.1.x
Serial # unknown
CPU ID NSX:D7060200FFFBAB1F
UUID 4226931E-0E19-1628-53A5-FE0B9A06E509
Serial # unknown
CPU ID NSX:D7060200FFFBAB1F
UUID 4226931E-0E19-1628-53A5-FE0B9A06E509
- Notice the CPU ID is prefixed with ’NSX:’ causing the serial number to lose association
Environment
- Platform: PA-VM
- PAN-OS Version: 7.1.x
- Deployment: Any
Cause
- Upgrading from 7.1.x to 8.1 or later appends the hypervisor type to CPUID
- Issue is been tracked under PAN-135989
Resolution
- Engage Support Team to manually update the CPUID on License Server by prefixing the hypervisor type