To get the official image, you need an active support account with Palo Alto Networks.
Transfer your file (e.g., via WinSCP) and rename it to virtioa.qcow2 so the hypervisor recognizes it as the primary boot disk.
[Insert download link]
gpg --edit-key 0xA1B2C3D4E5F60708 trust # Choose “5 = I trust ultimately”