Technical Tip: FortiManager Cloud is grayed out when FortiManager Cloud service is configured

In some situations, the 'FortiManager Cloud' button is grayed out, as shown below:

The most common cause of this issue is a device that lacks a FortiManager Cloud entitlement or has an expired license. This can be confirmed with the following command, which should show a valid license for FortiManager Cloud under account contracts. The FortiManager Cloud entitlement will be shown as 'FMGC':

FGT # diagnose test update info

Logs: idx=..

.....

System contracts:

.....

Account contracts:
FMGC,Sat Jun 22 08:00:00 2024

If no FortiManager Cloud license is presented, proceed to update information from FortiGuard and monitor the debug below manually:

diagnose debug application update -1

diagnose debug enable

execute update-now

It should show the output about 'FortiManager Cloud entitlement' as below:

2023-08-10 10:01:53 upd_status_extract_alci_info[1361]-Extracting account contracts...(UserID=110XXXX|SerialNumber=FMGVCLTMXXXXXXXX|Cont

ract=FMGC-6-20240805-10-10

Note: If the update debug output shows an error message of 'Server certificate failed verification. Error: 19 (self signed certificate in certificate chain)'. Then, refer to the following KB article: Troubleshooting Tip: FortiGuard Update Fail: Server certificate failed verification.

During the license update process, the status can be effectively verified by utilizing the CLI command 'diagnose test update info'. This command is designed to confirm whether a valid FortiManager Cloud entitlement is present within the account contracts

Correct device entitlement for the device can be confirmed under the asset portal by following these steps:

1. In Asset Management, go to Products List, and find the FortiManager Cloud device.

2. In the Entitlement widget, select Show Contracts.

3. In the Registered Support Contract(S) pane, the SKU column will contain FC<#>-10-MVCLD-227-01-12.

After verifying the license is correctly applied to the account, verify the FortiCloud account and its status on FortiGate by running 'diagnose test application forticldd 1':

FGT # diagnose test application forticldd 1
System=FGT Platform=FGT81F
Connection vdom: root, id=0, ha=primary.
acct_id=XXXX
acct_st=OK

FortiGuard interface selection: method=auto specify=FortiGuard log: status=enabled, full=overwrite, ssl_opt=1, source-ip=0.0.0.0

Centra Management: type=FGD, flags=000000bd.

active-tasks=0

rpdb_ver=00000043 rpdb6_ver=00000001

See this article: Troubleshooting Tip: How to connect FortiGate to FortiManager Cloud and troubleshoot connectivity issues.

Related documents:

Enabling the FortiManager Cloud connector on FortiGate

Checking Requirements and Licenses 

Limitations of FortiManager Cloud

Identifying the Public IP Address

Technical Tip: FortiManager Cloud Account-Level FMGC License support for FortiGate version lower than 6.2

Technical Tip: FortiManager Cloud option not available (greyed out) in FortiGate central management

Connection and Troubleshooting