Can't reach the forticare.fortinet.com to license my FortiGate VM.

Hello,

What is the error you are facing?
If you are failing to authenticate then it might be an issue with the user credentials.
-BR-

Hi,
Ensure that you dont have network access issue:
exec ping fds1.fortinet.com

exec ping directregistration.fortinet.com

exec ping globalftm.fortinet.net

execute ping directregistration.fortinet.com

If the DNS is not able to resolve to these domains, it would not be possible for FortiGate to communicate with FortiGuard servers. If the current DNS is not working, you can try to change to another DNS to see if that works.

Also try to perform telnet forticare.fortinet.com 443
Please review the following article:
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Getting-license-invalid-error-when/ta-p/190328

-BR-

Hello Yassinonce,

Well the cert also might be the problem.
FGT is the client and Forticare is the web server, Forticare is presenting the server certificate then FGT should be able to validate that cert with his own certificate(root CA) if it not able to validate ssl handshake will fail and cant establish the ssl connection.
You can see more details about the SSL handshake on a PCAP.

-BR-

Hi,
Try to set Fortinet_Factory :
config sys global
set auth-cert Fortinet_Factory
next
end

-BR-

hi,
Please can you also review this guide:
https://docs.fortinet.com/document/fortigate/7.2.3/administration-guide/441460/permanent-trial-mode-for-fortigate-vm

-BR-

Hi @Yassinonce, 

You can't ping forticare.fortinet.com? Does it even resolve to an IP address when you ping? What are the DNS servers you are using? Please provide the outputs of the following commands: 

execute ping forticare.fortinet.com

show full system dns 

show full system fortiguard 

Regards, 

It seems nobody was able to resolve this problem, because i am really stuck here with the same issue. 

Requesting FortiCare Trial license, proxy:(null)
curl forticare failed, 28
Failed to download VM license.

All pings as shown in this trail were successful yet, it failed.

Has anyone solved this problem?, I have the same and I stuck...

Thanks in advace!

I don’t think the registration server likes NAT connections. I was able to ping all suggestions but still unable to register. After changing my VMWare network connections from NAT to bridged it instantly connected and registered the VM trial. Hope this helps!