Unable to load the PA-VM.Key after the successful PA-VM registration under Customer Support Portal
16062
Created On 01/17/21 23:01 PM - Last Modified 12/14/21 22:18 PM
Symptom
- After the registration of PA-VM using the CPU/UUID under the Customer Support Portal (CSP), PA-VM.key can be downloaded for VM Capacity licensing
- Upon loading of valid PA-VM.key file under GUI: Device > Licenses page returns the "Invalid license file" error
Environment
- Palo Alto VM-Series Firewall under both Private and Public Cloud
- Any PAN-OS
- License install
Cause
- PA-VM did not meet the minimum memory requirement based on pan_vm_plugin.log (CLI: less mp-log pan_vm_plugin.log)
xxxxx@PA-VM> less mp-log pan_vm_plugin.log
......(output omitted)
vm_license_check INFO: : Applying nolic license capacity.
vm_license_check INFO: : Applying nolic license capacity, prepare /etc/cfgdb_license/cfgdb.nolic.xml
and /etc/cfgdb_license/cfgdb.nolic.xml.
vm_license_check INFO: : vm_mode: 6
vm_license_check INFO: : Platform Identified as AZR
vm_license_check INFO: : AZR cloud_setting called
vm_license_check ERROR: Can not parse the XML config! Traceback -
Traceback (most recent call last):
File "/opt/plugins/installed/vm_series/scripts/vmlib/config_parser.py", line 39, in parse_xml
self._parse_azure_config(xml_root)
File "/opt/plugins/installed/vm_series/scripts/vmlib/config_parser.py", line 72, in _parse_azure_config
azure_ha_config = temp_list.find("azure-ha-config")
AttributeError: 'NoneType' object has no attribute 'find'
2021-01-12 08:55:00.446 -0800 vm_license_check INFO: : Memory needed: 16.0GB, allocated memory: 13.7GB
- In this case,VM-500 did not have the required 16GB system memory causing a failure during the provisioning of VM capacity license.
Resolution
- Check the VM-Series System Requirement to allocate the minimum system resources including CPU and Memory before licensing the PA-VM.
- For PA-VMs being hosted under Public Cloud verify the system resource allocation based on machine type or instances type