Migration from Evaluation license to Production license
29275
Created On 03/18/20 05:37 AM - Last Modified 04/26/23 03:08 AM
Symptom
Eval licenses are currently applied to PA-VM instance. While applying the new auth code (production license) it prompts error “Cannot apply a provisioning license feature to an already provisioned device”.
- Verify if PA-VM already has licenses applied under WebUI > Device > Licenses or using the below CLI command:
> request license info
Current GMT Date: February 04, 2020
...
License entry:
Feature: PA-VM
Description: Standard VM-700
Serial: 999999999999999999
Issued: January 17, 2020
Expires: Never
Expired?: no
Current GMT Date: February 04, 2020
...
License entry:
Feature: PA-VM
Description: Standard VM-700
Serial: 999999999999999999
Issued: January 17, 2020
Expires: Never
Expired?: no
- Above CLI output shows licenses are already applied to PA-VM instance and should be de-activated prior to applying new auth codes
- Licenses can be de-activated from WebUI and/or Customer Support portal.
Environment
- Platform: PA-VM
- PAN-OS/Plugin Version: Any
- Deployment: Existing
Cause
- We cannot apply a new capacity license to an already licensed PA-VM instance.
- Existing licenses on the instance need to be de-activated followed by a reboot
Resolution
- Deactivate PA-VM to remove the eval license. The procedure is introduced in Deactivate VM in VM-Series Deployment Guide.
- Reboot the PA-VM instance and verify the serial number is changed to “unknown” post boot up.
- Activate the new auth code to apply the new license. Activate the License for the VM-Series Firewall (Standalone Version) in VM-Series Deployment Guide would be the reference.