Skip to main content
Zeineb
Zeineb
Visitor III
January 28, 2026
Question

FortiGate not authorized in FortiClient EMS 7.4.5 REST API returns HTTP 401,FCEMS fail to be verifie

  • January 28, 2026
  • 3 replies
  • 1076 views

hello community ,

I am trying to integrate an on-prem FortiGate (FortiOS 7.6.5) with FortiClient EMS on-prem (version 7.4.5 build 2111).

 

  • FortiGate license: Evaluation license

  • FortiClient EMS license: Trial license

  • Network connectivity between the two devices is working correctly

However, the FortiGate remains “Not Authorized” and the integration cannot be completed.

Observed Behavior

On the FortiGate, the EMS connector shows:

  • Connection status: Connected

  • Authorization status: Not Authorized

diagnose endpoint fctems test-connectivity

Connection test had an error -8 : EMS server connection failed.Authentication failed

In the FortiGate event logs, I see the following error:

Issue in reply of REST API call to api/v1/settings/server/public_address HTTP Code: 401 (Unauthorized) cURL result: (0) No error
FCEMS entry has failed to be verified  . EMS certificate can't be verified: issue in getting capabilities. EMS server connection failed. Authenticationfailed\nError (-1@_get_capabilities:519).\n.
 
In FortiClient EMS (7.4.5):
  • There is no notification or prompt to authorize the FortiGate.

  • There is no “Fabric Devices” menu where FortiGate authorization can be performed.

  • Under Administration → Fabric & Connectors, only OAuth 2.0 Fabric Connectors are available (FortiAnalyzer, FortiManager, FortiWeb, etc.).

  •  and there is no option to add or authorize it from the EMS UI.

 

Additionally, the EMS web interface shows: SSL Certificate is not secure

 

3 replies

Jean-Philippe_P
Staff & Editor
Jean-Philippe_P
Staff & Editor
January 31, 2026

Hello Zeineb, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Staff & Editor
Jean-Philippe_P
Staff & Editor
February 2, 2026

Hello,

 

We are still looking for an answer to your question.

 

We will come back to you ASAP.

 

Jean-Philippe - Fortinet Community Team
Zeineb
ZeinebAuthor
Visitor III
February 2, 2026

Hello,
thank you for your help. I think the problem is with the FortiGate trial license.
I tested with a licensed one, and it works normally.

Jean-Philippe_P
Staff & Editor
Jean-Philippe_P
Staff & Editor
February 2, 2026

Hello again Zeineb,

 

That's probably it! I found this answer too, I hope it can help you:

 

To resolve the issue of the FortiGate not being authorized in FortiClient EMS, follow these steps:

  1. Verify Network Connectivity: Ensure that the network connectivity between FortiGate and FortiClient EMS is functioning correctly. You can use the ping command to verify connectivity.

  2. Check EMS Certificate: The error message indicates that the EMS certificate cannot be verified. Ensure that the correct CA certificates are installed on the FortiGate. You can upload the CA certificates in the FortiGate under System -> Certificates -> Remote CA.

  3. Authorize FortiGate on EMS:

    • Since there is no prompt to authorize the FortiGate in the EMS UI, ensure that the EMS version supports FortiGate authorization. If the EMS version does not have the "Fabric Devices" menu, it might be a limitation of the trial license or the specific EMS version.
    • Check if there is an option to manually authorize the FortiGate by navigating to Administration -> Fabric & Connectors in the EMS UI.

  4. SSL Certificate Issue: The EMS web interface showing "SSL certificate is not secure" indicates a problem with the SSL certificate configuration. Ensure that the EMS server is using a valid SSL certificate. You may need to install a trusted SSL certificate on the EMS server.

  5. Debugging and Logs:

    • Enable debugging on the FortiGate to gather more information about the issue:

      diagnose debug application fcnacd -1 diagnose debug enable
    • Review the debug logs for any additional errors or information that can help identify the issue.

  6. Trial License Limitations: Be aware that trial licenses may have limitations that could affect the integration. Consider upgrading to a full license if the issue persists.

If the problem continues after following these steps, consider reaching out to Fortinet support for further assistance.

Jean-Philippe - Fortinet Community Team
Terms & ConditionsAccessibility statement