# Palo Alto Networks Prisma SD-WAN Device Recovery Process

Palo Alto Networks Prisma SD-WAN device requires users to perform a manual recovery process if the Virtual Network Function goes into an unrecoverable state. This topic provides the vendor-specific instructions for the recovery of the VNF.

note

For the most up-to-date vendor documentation on the recovery steps, see [Replace a Prisma SD-WAN ION Device](https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-sites-and-devices/returned-merchandise-authorization-rma/replace-a-prisma-sd-wan-ion-device).

## High-Level Recovery Process

1. Generate the ION Key and obtain the secret for the key from the Orchestrator.
2. Follow the self-guided recovery process.
3. Push the new configuration to your new device.

## Generate ION Key and Secret

Generate the ION key and secret on your orchestrator. (See the [Palo Alto documentation](https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/deployment-and-integrations/prisma-sd-wan-ion-kvm-nfv-deployment/prisma-sd-wan-nfv-virtual-deployment/generate-tokens) for detailed Instructions.) This key and secret are used in the Equinix Network Edge device detail to start to start the virtual device replacement process.

1. Sign in to the Prisma SD-WAN web interface.
2. Select **System Administration** > **License Management** > \[your device model]
3. Click **Create Token**.
4. Select **Use Type** > \[**Single Use** or **Multi Use**]
5. Obtain **ION KEY** and **SECRET KEY** from the table.

## Self-Guided Virtual Device Replacement Process

1. Sign in to the [Equinix Customer portal](https://portal.equinix.com/fabric/dashboard).

2. From theNetwork Edge menu, select Virtual Device Inventory.

3. Use the filters to find the impacted Palo Alto Networks Prisma Virtual ION SD-WAN device. Make sure you select the correct replacement device from the previous section.

4. Select the device and click the **Tools** tab in the **Device Details**.

5. In the **Replace Virtual Device** section, click **Request Replacement**.

   ![](https://docs.equinix.com/assets/images/NE-cvim-request-replace-2f525172c9053e2ae0d2479a855b2119.png)

6. Enter the License Key and License Secret obtained in the virtual device replacement process in the Palo Alto Networks Prisma SD-WAN web interface.

   ![](https://docs.equinix.com/assets/images/NE-cvim-prima-RMA-request-693d0355f6f87a100a54708467295401.png)

7. Click **Submit** to confirm your request.

   ![](https://docs.equinix.com/assets/images/NE-cvim-prisma-submit-RMA-d4aaccee6824b796ae19f92d276787e9.png)

   warning

   This process can’t be canceled once the request is submitted.

The device card will indicate that your request is in progress.

![](https://docs.equinix.com/assets/images/NE-cvim-prisma-RMA-inprogress-a34e9b07617173ee755507e16dc23605.png)

The device status will indicate Provisioning. After the virtual device replacement process is done, the status changes to Completed with a timestamp. The Provisioning status changes to Provisioned. If any issues prevent the replacement process from completing successfully, the status will indicate to **Failed** (displayed in red). If you see this failure status, open a customer support case.

To submit a support case, see [Support](https://docs.equinix.com/en-us/Content/Interconnection/NE/user-guide/NE-Support.htm).

## Push Configuration to New Device

1. Sign in to the Palo Alto Networks Prisma SD-WAN web interface.

2. Select **Manage** > **Setup** > **Devices** > **Unclaimed Devices**.

   ![](https://docs.equinix.com/assets/images/NE-cvim-prisma-select-replace-cc57523d02e05271865051ec9aa502e0.png)

3. From the ellipsis menu, select **Replace the Device**.

4. Select a replacement device.

   ![](https://docs.equinix.com/assets/images/NE-cvim-prisma-replacement-cda07d2a6e59d017020bc5c1557ebd1b.png)

   note

   There can be multiple replacement devices, so make sure you choose the correct one.

5. Click **Next** to select a snapshot for the replacement device.

   note

   The replacement device must be online and claimed to apply the snapshot.

6. After the snapshot is created, click **Download Snapshot Before Continuing**.

   ![](https://docs.equinix.com/assets/images/NE-cvim-prisma-snapshot-09316d75125fe65bd73fcbebe86fe7e1.png)

7. Select Download to File or Copy to Clipboard as required.

8. Click Next to continue after you have downloaded the snapshot. Click OK after confirming that the remaining device replacement steps are service affecting.

   ![](https://docs.equinix.com/assets/images/NE-cvim-prisma-confirm-1b02dca6ab93b8429da06a9e272c07ed.png)

9. Assign the replacement device to the site.

   ![](https://docs.equinix.com/assets/images/NE-cvim-prisma-assign-device-5bf99d5b70e4c09c37cf708acdc2d76a.png)

   The Replacement Wizard will take the site information from the failed device and transfer it to the replacement device. When the replacement device is assigned to the site and the faulty device is unassigned, the service may be affected temporarily.

10. Click **Next** to configure the service.

    ![](https://docs.equinix.com/assets/images/NE-cvim-prisma-download-warnings-d97ab160d47753720dd40cdd0f643726.png)

11. Click **Done** when you have copied the manual configurations to complete the replacement process.

    note

    The Replacement Wizard automatically transfers the configuration from the old device to the new device. There may be flags for the functions that need to be manually configured. Configurations that are not copied will be listed in a text box.

    The final screen displays when the device is successfully configured. If there are any warnings, download them before you exit the wizard.

12. Click **Done** to complete the device replacement process.

For the most up-to-date vendor documentation about the recovery steps, see [Replace a Prisma SD-WAN ION Device](https://docs.paloaltonetworks.com/prisma/prisma-sd-wan/prisma-sd-wan-admin/prisma-sd-wan-sites-and-devices/returned-merchandise-authorization-rma/replace-a-prisma-sd-wan-ion-device).