Skip to main content
I_encounter_everybug
New Member
May 19, 2025
Question

Howto free up Licenses from active Clients without loosing EMS connection

  • May 19, 2025
  • 3 replies
  • 820 views

Hi, would be glad if someone can help:

 

Info: Forticlient 7.4.3 deployed from EMS with autoconnect EMS-Telemetry with specified Passphrase

 

Situation:

Users sometimes connect with multiple different devices over time (which is ok). I need to free up licenses after let's say 3 days of no connection so these doesnt eat up all free licenses.
I told EMS-Server to deregister this clients, which works but when you do it it will also disconnect the EMS Telemetry.

 

Problem:

When the user wants to reconnect with one of the deregistered devices at a later time he must first click on Connnect with EMS" in the "zero Trust Settings" of the Forticlient.

The Client is not asking for the Telemetrie Key to reconnect, which is fine, so why does it disconnect at all???

That doesnt make sense in my opinion and leads to this unneccessary extra step. 

Anybody knows which setting I'm missing or how to free up the licenses without loosing EMS-Telemetry Connection?

Best regards,
Daniel

 

3 replies

Anthony_E
Staff
Staff
May 22, 2025

Hello Daniel,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
Anthony_E
Staff
Staff
May 22, 2025

Hi Daniel,

 

To free up licenses from active clients without losing EMS connection, follow these steps:

  1. Exclude Users or Endpoints: For per-user licenses, manually remove or exclude users from management to free up license seats. This will not affect the EMS connection.
  2. De-register Clients: Navigate to the EMS Console. - Go to `Endpoints -> Action -> Deregister`. Select the client you wish to deregister. This action will revoke the license from the client while maintaining the EMS connection.
  3. Uninstall FortiEDR Collector Agent (if applicable): For Windows, stop the service using the command: C:\Program Files\Fortinet\FortiEDR\FortiEDRCollectorService.exe --stop -rp:INPUTPASSWORD. Uninstall the FortiEDR Collector Agent. For macOS and Linux, follow the uninstallation guide provided in the FortiEDR documentation.

 

By following these steps, you can effectively manage and free up licenses without disrupting the EMS connection.

Best Regards
I_encounter_everybug
New Member
May 22, 2025
  1. De-register Clients: Navigate to the EMS Console. - Go to `Endpoints -> Action -> Deregister`. Select the client you wish to deregister. This action will revoke the license from the client while maintaining the EMS connection.->

    Thats exactly what I do, but as soon as I do this the client switches to 30day grace period (trialmode) and disconnects from ems telemetry. (The EMS Server stays in the input field, but you must manually click connect - thats my problem)