Troubleshooting Tip: FortiGate license falsely shows as expired

Licenses are shown as expired in the GUI.

This occurs even when there is no issue with communication to the FortiGuard servers, as seen when checking the output of:

diagnose debug application update -1

diagnose debug enable

execute update-now

__upd_act_update[319]-Package installed successfully
upd_comm_disconnect_fds[498]-Disconnecting FDS 173.243.141.6:443
[206] __ssl_data_ctx_free: Done
[1094] ssl_free: Done
[198] __ssl_cert_ctx_free: Done
[1104] ssl_ctx_free: Done
[1085] ssl_disconnect: Shutdown
do_update[699]-UPDATE successful

The debug logs for the manual FortiGuard update indicate a successful communication and update process. The FortiGate establishes a secure SSL connection to the FortiGuard Distribution Server (FDS) at 173.243.141.6 over port 443, downloads and installs the update package successfully.

In Asset Management, it can be observed that every day, the activation date is changed based on the current date. However, this is not expected behavior.

For example: On the 9th of August, the activation date is the 9th of August.

The issue can be resolved by contacting the Customer Service team, who will perform a recalculation of the license bundle.

Related article:

Technical Tip: The license still shows as expired after renewal