How to allocate Prisma SD-WAN devices to the tenant?
16874
Created On 02/22/24 19:03 PM - Last Modified 05/20/24 14:15 PM
Objective
- The article provides information about registering new SD-WAN ION devices, subscriptions and add-ons with a CSP account and allocate the device serial numbers to an SD-WAN TSG tenant
- This article is for customers who have purchased SD-WAN after December 2023.
Environment
- Strata Cloud Manager and SASE Multi-tenant Platform
- Hub
- CSP (Customer Support Portal)
- SD-WAN ION Devices
Procedure
New SD-WAN customer:
- If you are a new SD-WAN customer activating an SD-WAN license for the first time, follow the process for New Purchase License Activation.
- This KB article applies only to existing SD-WAN customers who purchased additional devices after December 2023.
- If you are an existing SD-WAN customer with a TSG-enabled tenant, this article describes the steps required for allocating ION devices and subscriptions from your recent purchase to your tenant.
- Note that the terms tenant and TSG (tenant service group) are often used interchangeably.
- As of December 2023, all SD-WAN purchases (with the exception of renewals) generate a magic link.
- Upon order fulfillment, your company admin will receive an activation email which includes a magic link URL .
- This URL should be used to launch a guided activation flow to allocate the ION devices and subscriptions to your SD-WAN tenant.
- Depending on how your purchase order was processed, you may receive more than one magic link. Follow these steps for all URLs you receive:
Step 1:
- Select a CSP ID where you would like your devices and subscriptions registered.
- For customers with multi-tenant hierarchies it is recommended to always use the same CSP ID for all SD-WAN assets.
Step 2:
- Select the TSG ID where you would like your devices and subscriptions allocated.
- You should be able to view a list of TSG IDs associated with your CSP ID.
- For customers with multi-tenant hierarchy it is recommended to always allocate devices and subscriptions to the root tenant and use the SD-WAN device manager for allocating devices to sub-tenants
Step 3:
- Region selection for stats storage is available only for new tenant activations.
- For allocating devices to an existing tenant, this step will default to the same region where your tenant was originally onboarded
Step 4:
- Accept the terms and click on Activate Now.
- Once you have successfully completed the activation process, you should be able to view all the device serial numbers in your tenant.
- Use the left navigation bar in Strata Cloud Manager (Workflows -> Prisma SD-WAN Setup -> Devices) and select the Unclaimed Devices tab to view the list of devices allocated to your tenant.
- Note that it may take between 15 - 60 minutes for all devices to be displayed in the UI.
- The activation email with the magic link is sent to the company admin whose information was provided in the quote.
- The contact information is also included in your Sales Order.
- If you are not able to locate the activation email, please contact Customer Support or your Sales Rep and request to have it re-sent.
- Alternatively, if you have a Super User or Domain Administrator role, you can also trigger the activation process through the Customer Support Portal.
- Sign in to https://support.paloaltonetworks.com/
- Click Activate Products on the left-hand navigation bar
- Locate your Sales Order number and click on Activate to launch the activation user interface
Additional Information
RMAs
- ION devices shipped as a replacement for an RMA are automatically allocated to the exact same tenant where the device being returned was allocated.
- The support license and subscription will be automatically transferred to the replacement device once the RMA has been received.
Support and Subscription Renewals
- Renewals automatically extend the support and subscription expiration dates and update this information in your CSP account.
Moving a device to a different tenant after allocation
- If your tenants are in the same TSG hierarchy make sure you allocate your devices to your root tenant and use the SD-WAN device manager feature to move a device to a subtenant.
- At this moment the product does not support device moves across different tenant hierarchies.
Non-TSG tenants
- If you are one of the few customers that have not yet been migrated to a TSG-enabled tenant you will need to open a support case and request your devices and subscriptions to be allocated by our support team.
- Attach a copy of your sales order and include your CSP ID and your tenant ID in the support case.
- Reach out to your account manager at Palo Alto Networks to request having your tenant migrated to TSG so that you can get access to the Strata Cloud Manager UI and the latest activation UI.