Skip to main content
Seis
Seis
Visitor III
July 31, 2025
Solved

Fortigate firmware upgrade via Fortimanager Script

  • July 31, 2025
  • 5 replies
  • 983 views

I need to upgrade a group of not licenced fortigates, I tried to run a script that execute a restore image tftp but after downloading and validate the image from the tftp server the script stops with errors and doesnt do anything.

 

script.png

progress error.png

scriptlog.png

I would like to know if this upgrade process is posible and if there are alternatives to do this upgrade on not licenced fortigates. Maybe a script on an external server that execute a ssh on every fortigate.

 

Thanks!

Best answer by Seis

I found a way to do the upgrade. Executing the image restore from FortiManager cause an error or some kind of incompatibility I dont know why. So the solution I found was create an automation with the image restore as the action.

 

config system automation-trigger
edit "upgrade"
set trigger-type scheduled
set trigger-frequency once
set trigger-datetime 2025-08-06 00:00:00
next
end

config system automation-action
edit "cmd"
set action-type cli-script
set script "execute restore image tftp <image> <IP>"
set accprofile "super_admin"
next
end


config system automation-stitch
edit "upgrade"
set trigger "upgrade"
config actions
edit 1
set action "cmd"
set required enable
next
end
next
end

Thanks to all!

5 replies

Jean-Philippe_P
Staff & Editor
Jean-Philippe_P
Staff & Editor
August 3, 2025

Hello Seis, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Thanks, 

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Staff & Editor
Jean-Philippe_P
Staff & Editor
August 5, 2025

Hello,

 

We are still looking for an answer to your question.

 

We will come back to you ASAP.

 

Thanks,

Jean-Philippe - Fortinet Community Team
filiaks1
filiaks1
Explorer III
August 5, 2025

Probably you need a license also this seems why you have selected the forum and not opened a support case as Support will not help with unlicensed fortigates and that is normal.

    Jean-Philippe_P
    Staff & Editor
    Jean-Philippe_P
    Staff & Editor
    August 7, 2025

    Hello again, Seis,

     

    I found this solution. Can you tell me if it helps, please?

     

    Upgrading non-licensed FortiGate devices using a script can be challenging due to the limitations in support and features available for non-licensed units. However, you can attempt the following steps to upgrade these devices:

     

    1. Ensure TFTP Server is Running: Make sure your TFTP server is operational and the firmware image is in the root directory.

    2. Verify Connectivity: Use the `execute ping <tftp_ipv4>` command to ensure each FortiGate can connect to the TFTP server.

    3. Script Execution:
      - If the script stops after downloading and validating the image, check for any error messages that might indicate the issue.
      - Ensure the script includes the necessary commands to confirm the upgrade process, such as responding to prompts with 'y' for confirmation.

    4. SSH Script Execution:
      - You can use an external server to execute an SSH script that logs into each FortiGate device and runs the upgrade commands.
      - Ensure the script handles interactive prompts and errors gracefully.

    5. Manual Upgrade: If scripting continues to fail, consider manually upgrading each device using the CLI method described in the context.

    6. Check for Errors: Review any error messages or logs to identify specific issues that may be causing the script to fail.

     

    If these steps do not resolve the issue, you may need to consult with Fortinet support for further assistance, especially if the problem persists across multiple devices.

    Jean-Philippe - Fortinet Community Team
      Seis
      SeisAuthorAnswer
      Visitor III
      August 7, 2025

      I found a way to do the upgrade. Executing the image restore from FortiManager cause an error or some kind of incompatibility I dont know why. So the solution I found was create an automation with the image restore as the action.

       

      config system automation-trigger
      edit "upgrade"
      set trigger-type scheduled
      set trigger-frequency once
      set trigger-datetime 2025-08-06 00:00:00
      next
      end

      config system automation-action
      edit "cmd"
      set action-type cli-script
      set script "execute restore image tftp <image> <IP>"
      set accprofile "super_admin"
      next
      end


      config system automation-stitch
      edit "upgrade"
      set trigger "upgrade"
      config actions
      edit 1
      set action "cmd"
      set required enable
      next
      end
      next
      end

      Thanks to all!

        Jean-Philippe_P
        Staff & Editor
        Jean-Philippe_P
        Staff & Editor
        August 8, 2025

        Hello Seis!

         

        Super and well done! Thanks for sharing the solution to everybody :)

         

        Regards

        Jean-Philippe - Fortinet Community Team
        Terms & ConditionsAccessibility statement