Troubleshooting Tip: Some settings under 'config central-management' command are not appearing in Install Preview and are not pushed

Description

This article explains why some settings under 'config central-management' do not appear in the Install Preview.

Scope

FortiManager.

Solution

FortiManager does not allow changing of FortiManager some central-management settings of its managed devices. For example, when trying to push the following CLI Template to a managed device:

The Install Preview will only show FortiManager pushing the following config:

Notice that the following settings are not allowed pushed:

    set serial-number
    set fmg
    set fmg-source-ip
    set fmg-source-ip6
    set include-default-servers
    set enc-algorithm
    set type
    set vdom
    set local-cert
    set ca-cert
    set interface-select-method

This is because pushing these settings might break the FGFM tunnel from FortiManager to the managed devices.

One possible workaround is to make direct configuration changes to the device in the FortiManager GUI under Device Manager -> Device -> CLI Configuration -> system -> central-management, or through the following API: 

"url": "/pm/config/device/<DEVICE>/global/system/central-management"