Skip to main content
Matt_B
Staff & Editor
Staff & Editor
December 13, 2024

Technical Tip: Requesting a new FortiGate evaluation license after previous evaluation VM is lost

  • December 13, 2024
  • 0 replies
  • 8554 views
Description This article demonstrates how to decommission the existing evaluation VM when a new evaluation license request fails with 'Error downloading license: invalid serial number'.
Scope FortiOS VM 7.2.1 and later using an evaluation license.
Solution

Virtual machine permanent trial licenses are available with limitations. See the article 'Permanent trial mode for FortiGate-VM'.

 

Only one permanent evaluation license is permitted per FortiCare account, and evaluation licenses are only valid for the virtual machine instance they were requested from. While it is possible to download the previous evaluation license file, uploading it to a new instance will not create a valid license.

 

This leads to an issue if the instance is lost or corrupted. If an evaluation VM already exists in the Asset Management list on the FortiCare account, a license request with the correct credentials will fail with the message 'Error downloading license: invalid serial number'.

 decomm 1.PNG

 

If requesting a license through the CLI, the request fails with 'Forticare response error 61'.

 

FortiGate-VM64-KVM # execute vm-license-options account-id principalaccountuser@realdomain.com

FortiGate-VM64-KVM # execute vm-license-options account-password password

FortiGate-VM64-KVM # execute vm-license

This VM is using the evaluation license. This license does not expire.

Limitations of the Evaluation VM license include:

  1.Support for low encryption operation only

  2.Maximum of 1 CPU and 2GiB of memory

  3.Maximum of three interfaces, firewall policies, and routes each

  4.No FortiCare Support

This operation will reboot the system !

Do you want to continue? (y/n)y

Requesting FortiCare Trial license, proxy:(null)

Forticare response error 61.

Failed to download VM license.

 

If a new license must be requested because an evaluation VM is accidentally deleted or lost, it is possible to decommission the old device in FortiCloud Asset Management.

 

Login to support.fortinet.com and find the existing Trial VM license in Asset Management.

 

decomm 2.PNG

 

Decommission the previous FortiGate VM trial unit.

 

decomm 3.PNG

 

decomm 4.PNG

 

After the previous device is decommissioned in Asset Management, it is possible to request an Evaluation license for a new virtual machine.

 

See the article FortiGate VM Evaluation license update failure for other Evaluation license troubleshooting steps if errors other than 'invalid serial number' are seen.

 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!