How can I transfer my IoT license and tenant?
Question
How can I transfer IOT license and tenant between devices and / or CSP accounts ?
Environment
RMA license transfer
Device transfer in CSP
IoT portal
Answer
IoT as a product does not support transfer. Removing IoT license from Cortex Data Lake (CDL) is not possible either, because IoT is dependent upon the CDL tenant. Should you need to move an IoT tenant between devices / CSP accounts, review the following steps and create a support case if you hit an error.
With a workaround ( and this is the only option ), it is possible to move IoT from one Customer Support Portal (CSP) account to another, or from one Firewall to the other.
1. Offboard IoT from the firewalls , break the connection to CDL, clear the IoT tenant(s).
2. Transfer the firewalls to the target account
3. Onboard IoT license again. If you cannot use the original activation link, contact the Palo Alto Networks Support team. In the activation process you will need to choose the existing CDL in the target account if it already has a CDL license.
RMA scenario:
1. Offboard IoT tenant on the defective device
2. Activate the IoT tenant on the replacement device
Note:
- All the logs and configurations will be lost for the IoT if the IoT license is transferred between the firewalls. Migrating logs between tenants is not supported.
Renaming the CDL tenant in the target account is not possible.
If you purchased IOT license which Does not Require Data Lake, the system will generate a free Telemetry CDL during the IOT activation process. The free Telemetry CDL license cannot be used as part of TSG.
If you purchased IOT license which requires a purchased CDL, you will need to have a valid CDL license in your account or purchase the CDL together with IOT license. The purchased CDL can be used as part of TSG. - Logs are being stored and managed at product side.
Additional Information
See also:
Onboard Device Security
Offboard Device Security Subscriptions
Prepare Your Firewall for Device Security