Activate Cortex Xpanse - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse Expander User Guide

Creation date
Last date published
User Guide

Learn how to activate Cortex Xpanse in the Cortex Gateway.

Before setting up Cortex Xpanse, you must activate the Cortex Xpanse tenant in the Cortex Gateway.

The Cortex Gateway enables you to perform the following actions:

Activating a Cortex Xpanse Expander tenant is a one-time task you’ll need to perform before using Cortex Xpanse. You only need to repeat the activation if you want to add additional tenants.

Before you activate Expander, complete the following prerequisites :

  • Locate the email that contains your activation information.

  • Ensure you have CSP Super User role permissions to your existing administrator accounts. This role cannot be removed or changed through the Cortex Gateway.

Perform the following steps to activate your Cortex Xpanse tenant:

  1. Navigate to the activation link you received in the email and sign in to begin activation in the Cortex Gateway.


    As the first user with CSP Super User permissions to access the Cortex Gateway, you are automatically granted Account Admin permissions. With these permissions, you are able to activate Cortex Xpanse tenants.

    The Gateway displays tenants Available for Activation and Available Tenants.

    In the Available for Activation section, you can view all the tenants allocated to your CSP account that are ready for activation. You can review the tenant details, such as serial number and purchase date.

    The Available Tenants section lists tenants that have already been activated. If you have more than one CSP account, the tenants are displayed according to the CSP account name.

  2. In the Available for Activation section, locate the tenant you want to activate according to the serial number and Activate to launch the Tenant Activation wizard.

  3. In Tenant ActivationDefine Tenant Settings, define the following tenant details.

    • Tenant Name—Give your Cortex Xpanse app instance an easily-recognizable name. Choose a name that is 59 or fewer characters and is unique across your company account.

    • Region—Select a region in which you want to set up your Cortex Xpanse instance.

    • Tenant Subdomain—Give your Cortex Xpanse instance an easy-to-recognize name that is used to access the tenant directly using the full URL (https://<subdomain>.xpanse.<region>


      Note this is a public FQDN, so be careful with sensitive information such as the company name.

    • Review and agree to the terms and conditions of the Privacy Policy, Terms of Use, EULA.

  4. Activate your tenant.

    Activation can take up to an hour. Cortex Xpanse sends a notification to your email when the tenant has completed the activation process.

  5. Select Back to main gateway and in the Available Tenant section, search for your tenant name. Hover over a tenant to display the Tenant Status and License Details. When the tenant displays an Active status, select the tenant name to confirm you can successfully access the Cortex Xpanse management console.


    You can change your tenant subdomain from to To change your tenant subdomain name, please open a Palo Alto Networks support ticket.