Troubleshooting Tip: How to fix the FortiSIEM Windows agent constantly restarting

Description

This article describes how to fix an issue where the FortiSIEM Windows Agent process keeps restarting.

Scope

Windows Agent v4.x.x - v7.4.x.

Solution

1. Review the Agent's log under C:\Program Files\Fortinet\FortiSIEM\logs\cms.log.

2. The following error may be present in the cms.log file:

FortiSIEMWinRTWrapper::LoadLib - Main Signature is not valid for C:\Program Files\Fortinet\FortiSIEM\FortiSIEM.WinRTWrapper.dll

• To fix this, go to C:\Program Files\Fortinet\FortiSIEM\.

• Right-click the file FortiSIEM.WinRTWrapper.dll -> Properties -> Digital Signature -> Select Fortinet Signature -> Details. If the signature is not valid, select View Certificate and Install certificate.
  
  

Note: The Windows host must have internet access to install the certificate. Also, it is recommended to run the latest Windows OS patches/updates.