Technical Tip: Unable to upgrade despite having a valid firmware contract
Description
This article describes the steps to resolve licensing issues that prevent the upgrade of FortiManager/FortiAnalyzer despite having a valid firmware contract.
Scope
FortiManager/FortiAnalyzer.
Solution
In some cases, when performing a major firmware version upgrade, there is an error encountered: 'This FortiAnalyzer does not have a valid Firmware Contract for upgrading/downgrading to another major/minor version'.
To resolve the licensing issue, follow these steps:
- Confirm the validity of the FMWR contract from the FortiCare portal under My Asset.
- Confirm the validity matches the contract available in the device using the command.
diagnose fmupdate dbcontract
Note: The FMWR should be valid
- If there is a validity mismatch found (even when the contract is valid in FortiCare and FortiManager/FortiAnalyzer), perform the following workaround:
- If this is an air-gapped network, upload the recent entitlement file. Refer to this article: Technical Tip: How to upload account entiltement files for managed devices when FortiManager is operating in closed network.
- If this is not an air-gapped network, verify the connectivity to FortiGuard servers. Refer to this article: Technical Tip: Verifying FortiGuard connectivity on FortiManager.
- If a web proxy is configured, ensure connectivity of the proxy server to the FortiGuard server.
get system web-proxy​​
Once the contract is updated, attempt to upgrade the FortiManager/FortiAnalyzer device again. If the issue persists, contact Fortinet Support for further assistance and attach to the ticket the following output:
diagnose fmupdate dbcontract execute tac report