On a firewall that’s been upgraded from the ‘non Advanced’ licences to the ‘Advanced’ licences and where the ‘non Advanced’ licences now show as expired in the licences page you may encounter the following message when trying to manually install Wildfire updates:
Failed to update content with following message: rootdir changed to /opt/pancfg/mgmt/wf_ramdisk/wf_tmp
No wildfire update is applied. No valid Wildfire license.
exiting with 255
or you may see the message below in the system log file:
Retrieving Content ‘Antivirus’ info failed with error ‘Virus updates are available but you must first update threat content’
The solution is to delete out the expired licences from the firewall, see https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CldmCAC for the PAN KB article on this, in summary you will:
Run the command below to list the licences delete license key ? Run the command below followed by the licence name produced by the previous command to delete the expired licence delete license key