The steps for upgrading Primary Panorama are listed below:

• We need to disable Pre-emption, if enabled.
• Then, go to Device -> High Availability -> Election Settings and uncheck Pre-emptive and do commit.
• In order to make the Secondary Panorama as active, we need to suspend the Primary Panorama.
• Suspend the High Availability function, on Primary Panorama- go to Device -> High Availability -> Operations -> Suspend Local Device
• On Primary/ Passive Panorama, need to check the suspend status. We need verify all Firewalls are connected to the Secondary/ Active Panorama.
• The next step is download, install and reboot the latest version maintenance release, on the Primary Panorama
• Tech support and device state are to be saved, named device configuration snapshots.
• We can re-enable pre-emption, if required, and the Primary Panorama will be upgraded.