How To Re-Activate a running VM-Series device that was deactivated in the CSP.
10864
Created On 05/10/24 19:15 PM - Last Modified 05/10/24 21:43 PM
Objective
To help go through the process of re-registering an existing VM-Series firewall what was deactivated in the CSP.
Environment
- VM-Series Firewall
- Activation
Procedure
NOTE: Recommended to perform this during a scheduled maintenance/outage window as there may
be an impact to your environment.
- Verify/validate that the VM-Series device in question was in fact deactivated within the CSP. It
will not appear in the list of assets / devices. - Click View Devices
- Locate the FW Flex Credit Pool you want to use for the re-activation of the existing device. You may need to create a new deployment profile to match the existing device configuration (vCPU,Memory, Subscriptions)
- Create Deployment Profile
- Once the deployment profile is complete, Register the device
- When entering the UUID and CPUID, use the UUID and CPUID currently shown on the deactivated but running device. This will create a new serial number and asset/device within the CSP.
- Next, deactivate the local firewall device (This will require a reboot)
- Deactivating a VM removes all the licenses/entitlements and places the VM-Series firewall in an unlicensed state; the firewall will not have a serial number and can support only a minimal number of sessions. Because the configuration on the firewall is left intact, you can re-apply a set of licenses and restore complete functionality on the firewall, if needed.
- Once the firewall comes back up after the reboot, login. You should see that the configuration of the firewall is intact. The serial number on the device should now show unknown.
- Apply Licenses and finish the Registration of the VM-Series Device
- On the VM-Series Firewall, click Device> Licenses on the left-hand menu, and click Retrieve License keys from license server
- Validate that the firewall now has valid licenses
- Verify that the VM-Series Firewall device reflects the serial number created in the device registration step.
- If your device was previously managed by Panorama, that device will need to be removed from
- Panorama as it will no longer be managed given the change of serial number.
- Follow the normal process of transitioning a firewall to Panorama Management .