Troubleshooting Tip: Resolving error 'No valid FTC subscription was found' when adding FortiTokenCloud to the FortiGate

Description

This article describes how to troubleshoot and resolve the error 'No valid FTC subscription was found. Please enable your free trial or register your FTC license.' when adding FortiToken Cloud to the FortiGate.

Scope 

FortiToken Cloud, FortiIdentity Cloud, FortiGate.

Solution

• Step 1: 
  Access the page Welcome to Fortinet Support, navigate to account services and ensure that there is a valid license added to the account and is not expired. 

• Step 2:
  Enable FortiToken Cloud services on FortiGate.
  On FortiOS v6.0.x and above:

config system global
    set fortitoken-cloud-service enable
end

On FortiOS v7.0.x and later:

config system global
    set fortitoken-cloud enable
end

• Step 3:
  Create a user on the FortiGate, enable FortiToken Cloud, this will result in error if there are any connectivity issues. 

• Step 4:
  If connectivity succeeds, follow the article to assign the token to users: Technical Tip: How to provision FortiIdentity Cloud (previously known as FortiToken Cloud).
  If connectivity fails and produces license-related errors, the following debug commands may provide more detailed error messages:

diagnose fortitoken-cloud debug enable
diagnose debug console timestamp enable
diagnose debug appl fnbamd –1
diagnose debug application httpsd 255
diagnose debug enable 

• Step 5:
  Reproduce the issue by enabling the following setting:
  
  

config system global
    set fortitoken-cloud enable
end

Then, initiate communication with FortiTokenCloud with this command:

execute fortitoken-cloud sync all

Debug output may look something like this:

2026-03-10 15:44:46 fas_ssl_recv_rsp[647]: fas_ssl_recv_rsp: received (254 bytes) done!
2026-03-10 15:44:46 fas_ssl_recv_rsp[656]: Recevied packet header:
HTTP/1.1 402 PAYMENT REQUIRED
Server: nginx
[...]
Connection: close
"No valid FTC subscription was found. Please enable your free trial or register your FTC license."
2026-03-10 15:44:46 fas_ssl_recv_rsp[716]: fas_ssl_recv_rsp() is done!
2026-03-10 15:44:46 fas_get_ftc_users[2278]: Failed to communicate with FTC server:402
Cannot retrieve user information from FortiToken Cloud!
Command fail. Return code -1

In the above, the subscription and licenses are valid and seen on the account services, but the error states there is an issue with the licenses.

• Step 6:
  Log in to Welcome to Fortinet Support, navigate to Service -> FortiToken Cloud, add the credentials and log in to FortiIdentity Cloud.
  Navigate to Devices -> Ownership and verify if the FortiGate is added to the portal.
  In this case, FortiGate is not added. Add FortiGate with the serial number.

• Step 7:
  FortiGate is now added to FortiIdentity Cloud. Test by assigning the tokens to the user on FortiGate, the cloud service will be enabled and FortiToken Cloud licenses will be synced and valid.

Note that the process will take couple of minutes for the licenses to get synced.