Technical Tip: How to update hardware ID changes

When the FortiSIEM VM is cloned or moved to another host, the hardware ID will change. As the hardware ID sets the license, the license needs to be updated for the FortiSIEM to keep running.

Here are the steps:

1. Check if the Hardware ID differs from the license:Access to the FortiSIEM super CLI as root:

phgetUUID

UUID: B17C2042-A493-D6EB-23BA-7C9BE4B5F3CB

phLicenseTool --show | grep "^Hardware"

Hardware ID 01E72042-BEFE-354B-3896-A53907492F71

If the hardware ID differs, please continue with the next steps. If not, no need to update the Hardware ID or the license.

2. Update the hardware ID in the database: from super CLI as root:

hwid=`phgetUUID`

psql -U phoenix phoenixdb -c "update ph_sys_conf set value='$hwid' where property = 'hardware_id';"

3. Update the license from the Fortinet Support Portal: go to the Product list and select the serial number:

• Select 'Edit':

• Edit the hardware ID and save:

• Download the new license:

4. Upload the license to the FortiSIEM at https://super_IP/phoenix/licenseUpload.jsf
5. Check the processes with phstatus command and all services should start up.

Note: Additional Information about License Key File vs Legacy License Key File

When downloading the FortiSIEM license from FortiCloud after Hardware ID changes, two license file options may be displayed:

• FortiSIEM License Key File
• FortiSIEM License Key Legacy File

The correct file selection depends on the FortiSIEM version.

Legacy License Key File requirement.

The Legacy License Key File must be used for FortiSIEM version 7.2.5 and earlier, including:

• v7.2.x (up to v7.2.5).
• v7.1.x.
• v7.0.x.
• v6.x.
• v5.x.
• v4.x.

These versions use the legacy license format and will fail to validate the newer license file.

Standard License Key File requirement.

The standard License Key File must be used for FortiSIEM version 7.2.6 and later, including:

• v7.2.6 and above.
• v7.3.x.
• v7.4.x.
• v7.5.x.