The firewall is showing that the software warranty or support license has expired, and it is not possible to upgrade from Panorama, even though a valid support license is in place.

The firewall is showing that the software warranty or support license has expired, and it is not possible to upgrade from Panorama, even though a valid support license is in place.

10014
Created On 02/26/23 19:56 PM - Last Modified 04/13/26 02:18 AM


Symptom


  • The firewalls display license as "support expired" on Panorama and will not be able to upgrade from Panorama.
  • Checking the license on the firewalls confirms the following scenarios:
    1. Firewalls have a valid support license locally.
    2. Firewalls have a valid support license locally, but an expired software warranty is still associated with them.
  • Trying to push the PAN-OS software under device deployment on Panorama, the firewalls are not be listed/visible to do a selected push.


Environment


  • Panorama managed Firewalls
  • Supported PAN-OS
  • License


Cause


Panorama shows that the software warranty or support license on the firewall has expired.



Resolution


For Scenario 1:

For Scenario 2:

  1. On the Firewall, delete the expired software warranty license key from the firewall CLI.
    > delete license key Software_Warranty<expiredate>.key (check the key-name on the firewall)

    Log in to the firewall GUI and confirm that the expired/deleted key has been removed.
    For more details, please refer to the link below.
    How to Delete Active or Expired purchased and Trial Licenses from Firewall

  2. Please update the firewall license status in Panorama following the instructions in the link below.
    Manage Licenses on Firewalls Using Panorama


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kH6OCAU&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail