How to provision an NGFW in SCM

There are few steps that need to be done to ensure that device is provisioned and managed by SCM.

STEP1:  Ensure that the device serial is provisioned in the correct CSP in the CSP portal and has the correct license type - which has SCM as part of license and is not expired.

STEP2:

• Once done, navigate to the app hub portal https://apps.paloaltonetworks.com/hub.
• Ensure that device shown up in the tenant - that requires this device to be provisioned.
• Click on the common services menu at top right hand corner and select tenant management.

STEP3:  In the Tenant Management, ensure that the SCM product is associated with the tenant or sub tenant and is complete for provisioning.

STEP4:  Click on device associations and click add device on the tenant or sub- tenant where the device needs to be provisioned. 

STEP5: Click Add after which it can verified that the association of the CSP account from which that device is sourced, to ensure that the correct device/CSP is being looked at for sourcing the device to be added: - search the device by serial and click on save: 

STEP6 - Click on the associate products at the right hand corner and click on save- this should kick start the SCM product association

STEP7 : Once this is complete,  Launch and login to strata cloud manager pertaining to the tenant / subtenant where this device has been onboarded and associated: - then when SCM is launched - click on Workflows ---> NGFW setup an click on device management.

STEP8: Now SCM should see this device that was previously onboarded to in the list of available devices: 

STEP 9 - Now we can click " move to cloud management' to ensure that the device's onboarding status is a success . Then this device is ready to be managed by the SCM and ready for configuration snippet pushes: - In this example, it can seen that the bootstrap is already begun as this device is set to be configured via ZTP.