Technical Tip: 'CN = FortiGate' in Fortinet_Factory certificate is by design in FortiGates with LENC license

In order to check whether a device has an LENC license:

get system status
Serial-Number: FGVM02TM2XXXX
License Status: Valid
License Expiration Date: 2026-04-16
License Status: Low-Encryption(LENC) <-----

Check the Fortinet_Factory certificate details in the CLI:

get vpn certificate local details

== [ Fortinet_Factory ]
Name: Fortinet_Factory
Subject: C = US, ST = California, L = Sunnyvale, O = Fortinet, OU = FortiGate, CN = FortiGate, emailAddress = support@fortinet.com
Issuer: C = US, ST = California, L = Sunnyvale, O = Fortinet, OU = Certificate Authority, CN = support, emailAddress = support@fortinet.com
Valid from: 2012-02-21 21:13:18 GMT
Valid to: 2028-01-19 03:14:07 GMT

Check the Fortinet_Factory certificate details in the GUI:

'CN = FortiGate' is by design in FortiGates with LENC license. As a result, LENC devices cannot be connected to FortiManager.

Related articles:

• Technical Tip: Low Encryption LENC device FAQ
• Technical Tip: How to register the LENC license in a FortiGate HA cluster