Technical Tip: Understanding differences between license file and entitlement file and its usage

In FortiManager and FortiAnalyzer, there are a few instances where it is required to upload a license file or an entitlement file.

These files serve 2 different purposes, and understanding them will help to identify which file needs to be uploaded when requested.

• License File:

1. Simply put, the license file provides the Serial Number or 'Identity' to the unit.
2. For example, when first deploying the FortiAnalyzer VM instances, it will provide a random Serial Number for a Trial License
3. To change the Serial Number to the one that is purchased, the license file needs to be uploaded.
4. For the built-in local certificate, there is also a serial number used for the common name. This value will also be updated when uploading the license.

• Entitlement File:

1. Entitlement files help to provide the entitlement or service eligibility for said serial number.
2. Services include Return Merchandise Authorization (RMA), Firmware and General Updates, as well as Technical Support that is tied to serial numbers.
3. The entitlement file is also bound to the whole account and not to one specific serial number. For example, if in the account, there are 2 different FortiManager serial numbers, the same license file can be uploaded to both units, and each serial number will have its service eligibility updated.
4. The units automatically get the updates from the FortiGuard server that checks and verifies the serial number and the entitlement. However, for the unit that cannot reach the internet, the entitlement file needs to be uploaded.
5. Usual use cases for uploading the entitlement file are after upgrading the unit or after renewing the license.

In most cases, uploading a license is only necessary when deploying the unit for the first time, as it serves the purpose of providing the identity to the unit.

For upgrading the unit, since v7.2.x, the setup wizard requires FortiCare registration, and entitlement files need to be uploaded if the unit is not able to reach the internet. The article below can be referred to on how to get the entitlement file:

Requesting account entitlement files

For license renewal, since the same serial number is used, there is no need to upload the license file. But since the information for the services has changed, such as adding new services or extending the expiry date, entitlement file data and information tied to the serial number are also updated.