Skip to main content
jsarah
Staff
Staff
December 23, 2025

Troubleshooting Tip: Reason for the 'Read Only' status and error 'Contact your Fortinet partner to purchase the Secure Private Access license'

  • December 23, 2025
  • 0 replies
  • 221 views
Description This article describes the reason for the 'Contact your Fortinet partner to purchase the Secure Private Access license' error appearing under Network -> BGP -> Secure Private Access Network Configuration in FortiSASE.
Scope FortiSASE.
Solution

While trying to configure SPA, the following error might occur:

 

Screenshot 2025-12-08 150040.png

 

The SASE will have the SPA license while purchasing, which may lead to confusion.

 

This is because the SPA requires subscription per FortiGate device, which means the FortiGate device in question and FortiSASE must both be under the same FortiCloud account.

 

Make sure the HUB device has a SPA license.

 

If the Secure Private Access Network Configuration shows 'Read Only' status but there is already a BGP configuration, it means that the SPA license expired and it will not be possible to apply any changes to the configuration until the SPA license is renewed or a new license is applied. 

 

It is necessary to register FortiGate devices to the same FortiCloud account used to log into FortiSASE before using these devices as SPA hubs with FortiSASE.

 

To activate the SPA feature on FortiSASE, it is necessary to purchase and apply a FortiSASE Service Connection subscription to each FortiGate device registered.

 

Related documents: