How to Activate the Precision AI Bundle

• This article will show step by step instructions to activate the Precision AI Network Security Bundle or the Precision AI Network Security Bundle Renewal 
  
  
• This article applies to both of the following customer scenarios:

NOTE: Do not activate the Precision AI auth code via WEB GUI on the firewall. Activating the auth code in the GUI will not add the device to the Device Security tenant in Hub. 

1. 1. Customers who have newly purchased the Precision AI Network Security Bundle
      

   2. Customers who renewed from the Core Security Bundle to the Precision AI Network Security Bundle Renewal and whose Renewal Orders were processed before June 5, 2026.*

      *Important note for customers who renewed from the Core Security Bundle to the Precision AI Network Security Bundle Renewal:
      

      If the renewal start date is set to a future date and the following error message is displayed during the Bundle Renewal activation process, please refer to the details below.

      "If you registered early, the old Core Security Bundle license would become invalid, and it wouldn't be activated until the new AI Security Bundle expires on Month Date."

      
      The renewed licenses will become effective based on the renewal start date specified in the Renewal Order Summary.
      Additionally, due to the previous system design, the existing Core Security Bundle license will remain active for only one day after the Bundle Renewal is activated.

An example is provided below:

[Condition]
The Precision AI Network Security Bundle Renewal start date is July 1, 2026, as per the renewal order summary.
As of May 1, 2026, the customer has received the activation email, or the Bundle Renewal is available under "Activate Products" in CSP.
The customer activates the Bundle Renewal on May 1, 2026.

[What happens]
The Precision AI Network Security Bundle Renewal will only take effect from July 1, 2026.
The existing Core Security license will remain active until May 2, 2026 (GMT) on the firewall.

[Resolution]
1. We recommend activating the Bundle Renewal 1 day before the renewal start date (e.g. June 30, 2026 in this example).
2. If this is not possible, please open an Admin case to request removal of the effective date from the Bundle Renewal after activation, following the steps outlined in the article below, so that the licenses are correctly applied on the firewall.

• Customer Support Portal (CSP)
• Tenant Service Group (TSG)
• All Pan-OS versions

• Go the the CSP portal and activate the Precision AI Network Security Bundle or the Precision AI Network Security Bundle Renewal 
  or use the "Magic Link" in the activation email to active the bundle: 

1. Allocate the product to the Recipient of your choice.
   The Recipient refers to the TSG that you want to allocate device licenses to. You can select an existing TSG or create a new TSG.
2. Choose the data ingestion Region, which is the region where Strata Logging Service is receiving data from firewalls.
3. Agree to the terms and conditions, and Activate.
4. Go to  Common Services >Device Associations tab to add firewalls to the tenant.
5. Go to Common Services > Device Associations tab to associate Device Security with the firewalls in your tenant.
6. Once devices are added go to  Associate Products  
7. Choose Device Security then choose the serial numbers  IMPORTANT only choose the serial numbers on the order. 

• If the HUB still has the previous Enterprise IoT device security, then we will need to remove it first before activating the Precision AI Network Security Bundle or the Precision AI Network Security Bundle Renewal.
  https://docs.paloaltonetworks.com/common-services/device-associations/get-started/remove-device-associations
• If the magic link is missing from the activation email, please open an admin case.