To generate authorization codes for Software Next-Generation Firewalls (NGFWs), it is necessary to create a deployment profile within the Palo Alto Networks Customer Support Portal (CSP). This process involves defining the specifics of your deployment, such as the desired firewall model, associated subscriptions, and other relevant configurations.

Once the deployment profile is established, the CSP generates an authorization code corresponding to the specified configuration. This code is then used during the firewall's activation process to license the software and enable the associated subscriptions.

It's important to note that authorization codes are not typically obtained directly from public cloud marketplaces or through Enterprise Support Agreement (ESA) codes. Additionally, while registering the device with the cloud service provider is a necessary step, it does not, by itself, generate the required authorization codes.

References:

docs.paloaltonetworks.com