Unable to add vDefend Firewall license key (Error Code:3035)

Products

• VMware NSX
• VMware NSX Firewall
• VMware NSX Data Center for vSphere
• VMware NSX Networking

Issue/Introduction

• You are unable to add the vDefend Firewall license key due to an error:
  “VMware Firewall key can be added only if valid ("NSX Networking for VMware Cloud Foundation"), ("vSphere 8 Enterprise Plus for VCF") key exists. (Error code: 3035)”
  or
"VMware Firewall with Advanced Threat Prevention key can be added only if valid ("VMware Cloud Foundation") key exists. (Error code: 3035)"



Environment

NSX Networking for VCF

Cause

• vDefend Firewall is purchased as an Add-on to VCF (VMware Cloud Foundation).
• VCF includes NSX Networking for Cloud Foundation and vDefend Firewall can be applied on existing vSphere Solution license key.
• vDefend Gateway Firewall and vDefend Distributed Firewall licenses can be applied on the NSX Manager that has NSX Networking for Cloud Foundation license key applied on.
• However, to apply vDefend Firewall license key, vSphere and vCenter Server version should be on 8.0 U2b and higher.

Resolution

In a new deployment, or if the license is not immediately reflected / recognized, please allow up to 60 minutes for the license synchronization workflow to synchronize licenses across VCF systems. 

To manually synchronize the licenses, you can run the NSX API: Synchronize VCF licenses from all registered vCenters (NSX API Guide)

 

Refer the instructions below to license the product:

• vCenter Server and vSphere ESXi Hosts of version 8.0 U2b and higher should have vSphere Solution license key (vSphere 8 Enterprise Plus for VCF part of VMware Cloud Foundation) applied.

 

• Verify that the selected vCenter is added to NSX as a Compute Manager.
• NSX Manager queries for licenses through vCenter Server every hour. Access NSX Manager UI>System>Licensing to verify that the vSphere Enterprise Plus for VCF license key from vCenter has successfully synchronized over to NSX.

Note: NSX Manager will have the solution license key auto-populated allowing to apply the vDefend Firewall license key.

• Add vDefend Firewall license key.

Additional Information

The Solution License for VMware Cloud Foundation (VCF) is not synchronizing with NSX.

vDefend Firewall includes 3 licenses in its purchase.

• vDefend Firewall
• vDefend Gateway Firewall
• vDefend Distributed Firewall

To apply these licenses, NSX Manager should be on version 4.1.2.3 and later. NSX License Types Techdocs will help in understanding the NSX edition license key that is supported with specific version of NSX:

More information on the keys that are supported with different version of NSX is mentioned in the Knowledge Base article here VMware vDefend Firewall Solution License Key