UTM 9 in AWS - How to convert from hourly (PAYG) to licensed (BYOL)

Question

Hi, 
 
 We've been using the hourly (PAYG -Pay As You Go) version of UTM 9 in AWS and are planning to change to the licensed (BYOL - Bring Your Own License) version. 
 
 In order to test this, I made a backup of the config in our PAYG firewall, then launched a new BYOL firewall and restored the config to it. But after doing the restore, it became unresponsive and I cannot connect to the management interface anymore. 
 
 The single interface on the firewall was set to use DHCP, so it is not an IP addressing issue. 
 
 I am assuming that the problem is related to the fact that the PAYG AWS instance and the BYOL AWS instance are different AMIs (Amazon Machine Images), and that this is somehow causing a problem? 
 
 Can anyone provide guidance on how to convert from PAYG to BYOL in a way that you can retain your configuration? We have over a dozen of these firewalls, and rebuilding them all from scratch would be a nightmare. 
 
 Thanks in advance for your help!

Rob75206 · Answer

Hi Bill, thanks for your reply. I actually was already helped by another member of the Sophos team on this issue, but forgot to update this posting. So here is the fix for anyone else who is having this issue: 
 Create a backup of the configuration of the PAYG firewall, but make sure you check the following two options before clicking "create backup now": 
 
 Unique site data (license, passwords, certificates/keys, endpoints) 
 Administrative mail addresses 
 
 When you select these options, you can successfully restore the config to the BYOL firewall image with no problems. 
 Thanks, 
 Rob