To generate authorization codes for Software NGFWs (such as the VM-Series) within the Palo Alto Networks Customer Support Portal (CSP), an administrator must first create a deployment profile. This profile acts as a template, defining the firewall model, PAN-OS software version, and the specific subscriptions to be associated with a group of software firewalls. Once the deployment profile is created and saved, the CSP allows for the generation of the necessary authorization codes based on the specifications defined in that profile. This process streamlines the licensing of multiple software firewalls with consistent configurations.

A. Authorization codes are generated within the Palo Alto Networks CSP, not downloaded directly from a public cloud marketplace.

C. An Enterprise Support Agreement (ESA) or Software NGFW Credits provide the entitlement, but creating a deployment profile is the specific action required to generate the codes.

D. Registering a device with a cloud service provider pertains to the virtual machine instance itself, not the generation of the Palo Alto Networks license authorization code in the CSP.

1. Palo Alto Networks TechDocs. "Generate a VM-Series Auth Code." In VM-Series Deployment Guide, PAN-OS 11.0. The documentation explicitly states, "To generate a VM-Series auth code, you must first create a deployment profile in the Customer Support Portal (CSP)." The procedure outlines the steps: 1. Log in to the CSP, 2. Select Assets > Software NGFW Credits, 3. Create a Deployment Profile, and 4. Generate VM-Series Auth-Codes. This confirms that creating a deployment profile is the required prerequisite action. (Reference: docs.paloaltonetworks.com/vm-series/11-0/vm-series-deployment/license-the-vm-series-firewall/manage-software-ngfw-licenses/generate-a-vm-series-auth-code)