Technical Tip: CPU entitlements in VM

Description

This article describes FortiOS VM showing only 1 CPU when licensed through FortiFlex.

Scope

FortiGate.

Solution

FortiGate VM is licensed through FortiFlex.

In the FortiFlex portal, the device is assigned to an ACTIVE configuration with 2 CPUs ('Switch VPC PoC - 2 CPU bundle').

However, FortiGate still shows: VM Resources: 1 CPU / 1 allowed:

get system status

Version: FortiGate-VM64-KVM v7.6.6,build3652,260127 (GA.M)

Serial-Number: FGVMELTMXXXXXXX

VM Resources: 1 CPU/1 allowed, 1993 MB RAM ----------------->>>

exec cpu show

Active CPU number: 1

Total CPU number: 1

Solution:

1. FortiOS is not aware of the quantity of CPUs an entitlement has by the time the license file is uploaded, hence the default behavior is to revert to 1 vCPU.

2. Once VM is rebooted, as part of the license installation process, FortiGate will validate through the FortiGuard Servers/FDN, which then provides the quantity of seats.

3. FortiGate cannot automatically adjust the quantity of vCPUs.

4. After the first reboot, FortiGate takes some time to synchronize with FDN, and until it is complete, FortiGate will still show vCPU seat = 1.

5. After full FDN synchronization, then FortiGate is ready to add the extra vCPUs available in the entitlement, but then either a reboot is needed again or run the command 'exec cpu add x':
   
   

execute cpu add
number   New Active CPU Number