Failed to add security license in NSX with error "VMware Firewall with Advanced Threat Prevention key can be added only if valid ("NSX Networking for VMware Cloud Foundation").("VCF entitlement*) key exists. (Error code: 3035)"

Products

• VMware NSX
• VMware vDefend Firewall with Advanced Threat Prevention
• VMware vDefend Firewall

Issue/Introduction

• When attempting to apply a VMware Advanced Threat Prevention license key in NSX, the operation fails with the following error:

VMware Firewall with Advanced Threat Prevention key can be added only if valid ("NSX Networking for VMware Cloud Foundation").("VCF entitlement*) key exists. (Error code: 3035).

Environment

VMware NSX

Cause

Add-on services like VMware vDefend Firewall or Advanced Threat Prevention (ATP) have a licensing dependency. You must have a valid NSX base license (or VCF base SKU) applied before you can add an add-on key.

Resolution

Ensure that the NSX base license key is applied before attempting to add the Advanced Threat Prevention (ATP) license key. NSX does not receive this license directly; instead, it polls the registered vCenter (Compute Manager).

The license must be assigned to the vCenter Server Systems asset in vCenter for NSX to recognize it. For more information Refer: Configuring License Settings for Assets in the vSphere Client

Validation procedure:

• Login to "NSX UI" as "admin" user and go to --> System > Licenses
• Validate if the NSX base license present and valid.

Additional Information

License Types

VMware Advanced Threat Prevention key can be added only if valid ("VMware Firewall") key exists. (Error code: 3035).

Unable to add vDefend Firewall license key (Error Code:3035).