Recently deployed FortiGate VM KVM with FortiOS 8 stuck at login screen

I tried ejecute factory reset and upload the license downloaded at the forticloud portal, same situation. For a brief period of time when i ran get system status it indeed show the license as active, but WEB GUI was stuck in a login screen loop (success auth→30/40s→ back to login screen) and now get System status shows no license

Hi ​@tf_fran ,

When cloud-communication is disabled, the forticldd and updated daemons are shutdown and multiple settings are disabled.

unset all settings :

Run below commands : 

config sys fortiguard
unset sdns-server-ip
set fortiguard-anycast disable
end

config system global
unset cloud-communication 
unset fds-statistics
end

Exe update:

di de di
di de application update -1
di de en
fnsysctl killall updated

check what is the status it shows after completion ? 

get sys status

If you have found a solution, please like and mark it as solved to make it easily accessible for everyone.

Thanks,
Mayur Padma

Hi tf_fran,
 

The debug shows us that the updates are might sought through the FortiManager:
 

026-05-01 23:53:16 do_setup[342]-Starting SETUP
2026-05-01 23:53:16 upd_act_setup[124]-No configured update servers. <---
 

Its configuration indicates the FortiGate to receive FortiGuard updates using the FortiManager
 

Verify with the help of the command: sh full system central-management
 

To receive updates directly from fortiguard please enable the 'include-default-servers' if its disabled
 

config system central-management
    set type fortimanager
    set fmg "x.x.x.x"
    set include-default-servers enable     <----- This setting will ensure FortiGate is getting updates from FortiGuard default servers.
end

Reference Link: https://community.fortinet.com/fortigate-3/technical-tip-how-to-setup-fortigate-to-get-updates-from-fortimanager-95923

Afterwards, run the debug below to identify the reason why the VM is unable to validate the license.

get system status
diagnose debug reset
diagnose debug console timestamp enable
diagnose debug application update -1
diagnose debug application forticldd -1
diagnose debug enable

If you have found a solution, please like and accept it to make it easily accessible to others.

Regards
Aman

this is my config for the referenced sections:
 

FGVMEV3D4QIUJL0F (global) # show
config system global
    set alias "FGVMEV3D4QIUJL0F"
    set gui-auto-upgrade-setup-warning disable
    set hostname "FGVMEV3D4QIUJL0F"
    set timezone "America/Caracas"
end

FGVMEV3D4QIUJL0F (fortiguard) # show
config system fortiguard
    set update-server-location usa
    set auto-firmware-upgrade-end-hour 5
end

config system central-management
    set type fortimanager
end

Here the logs

 

FGVMEV3D4QIUJL0F # diag debug enable

FGVMEV3D4QIUJL0F # execute aud2026-05-03 13:26:01 [63] fds_svr_start_fds_update: fds update is in progress already.
2026-05-03 13:26:01 [185] fds_svr_default_timeout: try to get IPs for fdni

FGVMEV3D4QIUJL0F # 2026-05-03 13:26:16 [63] fds_svr_start_fds_update: fds update is in progress already.
2026-05-03 13:26:16 [185] fds_svr_default_timeout: try to get IPs for fdni

FGVMEV3D4QIUJL0F # 2026-05-03 13:26:17 fds_upd_pkg_recv[1052]-Failed receiving fds response, ret=-3
2026-05-03 13:26:17 upd_act_setup[142]-Failed receiving setup response, fmg=0, ret=-1
2026-05-03 13:26:17 upd_act_setup[154]-Setup failed, fmg=0.
2026-05-03 13:26:17 do_setup[346]-SETUP failed
2026-05-03 13:26:17 upd_sched_time_to_update[238]-Config changed, next_upd_time=Mon May  4 01:10:00 2026

2026-05-03 13:26:17 upd_centmgmt_change_notif[70]-Detected central management type change
2026-05-03 13:26:17 upd_daemon[1900]-Received update request from pid=2284
2026-05-03 13:26:17 upd_daemon[1869]-Received setup request from pid=2415
2026-05-03 13:26:30 [120] fds_mctrl_start_update: 
2026-05-03 13:26:30 [37] fds_queue_task: req-101 is added to message-controller
2026-05-03 13:26:30 [706] fds_https_start_server: server: 209.40.117.133:443
2026-05-03 13:26:30 [707] fds_https_start_server: source-ip: 0.0.0.0:0
2026-05-03 13:26:30 [124] __ssl_cert_ctx_load: Added cert FortiGate, root ca Fortinet_CA, idx 0 (default)
2026-05-03 13:26:30 [509] ssl_ctx_use_builtin_store: Loaded Fortinet Trusted Certs
2026-05-03 13:26:30 [529] ssl_ctx_use_builtin_store: Enable CRL checking.
2026-05-03 13:26:30 [536] ssl_ctx_use_builtin_store: Enable OCSP Stapling.
2026-05-03 13:26:31 [882] ssl_ctx_create_new: Falied in setting cipher list
2026-05-03 13:26:31 [213] __ssl_cert_ctx_free: Done
2026-05-03 13:26:31 [1186] ssl_ctx_free: Done
2026-05-03 13:26:31 [63] fds_svr_start_fds_update: fds update is in progress already.
2026-05-03 13:26:31 [185] fds_svr_default_timeout: try to get IPs for fdni
2026-05-03 13:26:42 upd_daemon[1712]-Found cached action=00000001
2026-05-03 13:26:42 do_setup[342]-Starting SETUP
2026-05-03 13:26:42 upd_act_setup[131]-Trying Setup, fmg=0
2026-05-03 13:26:42 [4132] fds_handle_request: Received cmd 37 from pid-2415, len 44
2026-05-03 13:26:42 [409] fds_queue_check: The task(37) is already in queue(37).
2026-05-03 13:26:42 [593] fds_send_reply2: Sending 0 bytes data, data2len=0.
2026-05-03 13:26:42 __upd_comm_rcv[969]-data_len=24, pkg(buf=0x7ffce89ec16c, sz=8516, pos=0)
2026-05-03 13:26:42 __upd_fix_rx_pkg[988]-Failed, length=24, no res header.
2026-05-03 13:26:42 upd_act_setup[142]-Failed receiving setup response, fmg=0, ret=-1
2026-05-03 13:26:42 upd_act_setup[154]-Setup failed, fmg=0.
2026-05-03 13:26:42 do_setup[346]-SETUP failed
2026-05-03 13:26:42 upd_daemon[1712]-Found cached action=00000002
2026-05-03 13:26:42 do_update[812]-Starting now UPDATE (final try)
2026-05-03 13:26:42 __update_upd_comp_by_settings[507]-Disabling FLEN components.
2026-05-03 13:26:42 __update_upd_comp_by_settings[511]-Disabling NIDSDB/ISDB components.
2026-05-03 13:26:42 __update_upd_comp_by_settings[515]-Disabling MUDB components.
2026-05-03 13:26:42 __update_upd_comp_by_settings[519]-Disabling FMWPDB components.
2026-05-03 13:26:42 __update_upd_comp_by_settings[523]-Disabling APPDB components.
2026-05-03 13:26:42 __update_upd_comp_by_settings[527]-Disabling AIAPDB components.
2026-05-03 13:26:42 __update_upd_comp_by_settings[531]-Disabling IOTDB/OTDB components.
2026-05-03 13:26:42 __update_upd_comp_by_settings[539]-Disabling AVEN components.
2026-05-03 13:26:42 __update_upd_comp_by_settings[543]-Disabling AVDB/FLDB/MMDB components.
2026-05-03 13:26:42 __update_upd_comp_by_settings[597]-Disabling MCDB components.
2026-05-03 13:26:42 do_update[818]-Update comp 0x9ba65bb0
2026-05-03 13:26:42 upd_act_update[350]-Start act_update.
2026-05-03 13:26:42 __upd_act_update[202]-Trying update delta update, fmg=0
2026-05-03 13:26:42 upd_cfg_extract_av_db_version[410]-Failed av db version, obj 41
2026-05-03 13:26:43 upd_cfg_extract_antiphish_pattern_db_version[1021]-Failed antiphish pattern db version, obj 35
2026-05-03 13:26:43 upd_pkg_create_fds_update_req[371]-Update objver 0x2138e7105c080 , len=44+707, req=[|DataItem=08000000DLDB00401-00000.00000-0101010000*08000000DBDB00100-00000.00000-0101010000*08000000CIDB00100-00001.00198-2604200000*08000000IPGO00100-00003.00172-2304122123*00000000FCNI00000-00000.00000-0000000000*01000000FSCI00100-00000.00000-0000000000*08000000FFDB03108-00000.00000-0101010000*08000000UWDB00100-00000.00000-0101010000*08000000CRDB00000-00001.00062-2601092157*08000000SFAS00000-00000.00000-0101010000*01000000ALCI00000-00000.00000-0000000000*08000000MADB00200-00001.00210-2403260900*08000000AFDB00100-00000.00000-0000000000*08000000ICDB00101-00000.00000-0101010000*08000000DLDB00300-00000.00000-0101010000*08000000CASB00203-00001.00000-2307252116*08000000SLAD00000-00001.00000-2305061526]
2026-05-03 13:26:43 [4132] fds_handle_request: Received cmd 37 from pid-2415, len 751
2026-05-03 13:26:43 [37] fds_queue_task: req-37 is added to fdni
2026-05-03 13:26:46 [63] fds_svr_start_fds_update: fds update is in progress already.
2026-05-03 13:26:46 [185] fds_svr_default_timeout: try to get IPs for fdni
2026-05-03 13:26:48 [772] fds_https_stop_server: 209.40.106.61:443
2026-05-03 13:26:48 [635] fds_https_timeout: Connection timed out, svr=fds-update
2026-05-03 13:26:48 [281] fds_svr_default_on_error: fds-update: ip=209.40.106.61:443, reason=4
2026-05-03 13:26:48 [298] fds_svr_default_on_error: fds-update: Conn failed 2/3
2026-05-03 13:26:48 [172] fds_svr_default_pickup_server: fds-update: 209.40.106.61:443
2026-05-03 13:26:50 [772] fds_https_stop_server: 209.40.106.61:443
2026-05-03 13:26:50 [172] fds_svr_default_pickup_server: fds-update: 209.40.106.61:443
2026-05-03 13:26:50 [706] fds_https_start_server: server: 209.40.106.61:443
2026-05-03 13:26:50 [707] fds_https_start_server: source-ip: 0.0.0.0:0
2026-05-03 13:26:50 [124] __ssl_cert_ctx_load: Added cert FortiGate, root ca Fortinet_CA, idx 0 (default)
2026-05-03 13:26:50 [509] ssl_ctx_use_builtin_store: Loaded Fortinet Trusted Certs
2026-05-03 13:26:50 [529] ssl_ctx_use_builtin_store: Enable CRL checking.
2026-05-03 13:26:50 [536] ssl_ctx_use_builtin_store: Enable OCSP Stapling.
2026-05-03 13:26:50 [882] ssl_ctx_create_new: Falied in setting cipher list
2026-05-03 13:26:50 [213] __ssl_cert_ctx_free: Done
2026-05-03 13:26:50 [1186] ssl_ctx_free: Done
2026-05-03 13:27:01 [63] fds_svr_start_fds_update: fds update is in progress already.
2026-05-03 13:27:01 [185] fds_svr_default_timeout: try to get IPs for fdni

And get sys status output:

Version: FortiGate-VM64-KVM v8.0.0,build0167,260420 (GA.F)
First GA patch build date: 260420
Current Security Level: High
Firmware Signature: certified
Virus-DB: 1.00001(2026-04-02 13:48)
Extended DB: 1.00001(2026-04-02 13:48)
Extreme DB: 1.00001(2026-04-02 13:48)
OCR DB: 0.00000(2001-01-01 00:00)
AV AI/ML Model: 0.00000(2001-01-01 00:00)
IPS-DB: 6.00741(2015-12-01 02:30)
IPS-ETDB: 6.00741(2015-12-01 02:30)
IPS-MLDB: 0.00000(2001-01-01 00:00)
APP-DB: 6.00741(2015-12-01 02:30)
AIAP-DB: 0.00000(2001-01-01 00:00)
Proxy-IPS-DB: 6.00741(2015-12-01 02:30)
Proxy-IPS-ETDB: 6.00741(2015-12-01 02:30)
Proxy-APP-DB: 6.00741(2015-12-01 02:30)
Proxy-AIAP-DB: 0.00000(2001-01-01 00:00)
FMWP-DB: 0.00000(2001-01-01 00:00)
IPS Malicious URL Database: 1.00001(2015-01-01 01:01)
IoT-Detect: 0.00000(2022-08-17 17:31)
OT-Detect-DB: 0.00000(2001-01-01 00:00)
OT-Patch-DB: 0.00000(2001-01-01 00:00)
OT-Threat-DB: 6.00741(2015-12-01 02:30)
IPS-Engine: 8.00028(2026-04-06 22:53)
Timezone DB Version: 1.003
Timezone DB IANA Version: 2024a
Serial-Number: FGVMEV3D4QIUJL0F
License Status: No License
VM Resources: 1 CPU/0 allowed, 1994 MB RAM/0 MB allowed
Log hard disk: Not available
Hostname: FGVMEV3D4QIUJL0F
Private Encryption: Disable
Operation Mode: NAT
Current virtual domain: root
Max number of virtual domains: 2
Virtual domains status: 1 in NAT mode, 0 in TP mode
Virtual domain configuration: disable
FIPS-CC mode: disable
Current HA mode: standalone
Branch point: 0167
Release Version Information: GA
FortiOS x86-64: Yes
System time: Sun May  3 13:28:25 2026
Last reboot reason: shutdown

 

Hi ​@msanjaypadma 

FGVMEV3D4QIUJL0F # config sys fortiguard
FGVMEV3D4QIUJL0F # unset sdns-server-ip
FGVMEV3D4QIUJL0F (fortiguard) # set fortiguard-anycast disable
command parse error before 'fortiguard-anycast'
Command fail. Return code -61
end

And 

fnsysctl killall updated
Unknown action 

Here is my config related to sections mentioned by ​@kaman 

FGVMEV3D4QIUJL0F (global) # show
config system global
    set alias "FGVMEV3D4QIUJL0F"
    set gui-auto-upgrade-setup-warning disable
    set hostname "FGVMEV3D4QIUJL0F"
    set timezone "America/Caracas"
end

FGVMEV3D4QIUJL0F (fortiguard) # show
config system fortiguard
    set update-server-location usa
    set auto-firmware-upgrade-end-hour 5
end

config system central-management
    set type fortimanager
end

Also i dont have a FortiManager deployed. Its a lab environment with permanente trial Mode did it following this Guide:
Deploying a FortiGate-VM into Proxmox

Hi,

I have the same issue. This is what i get from the console

do_setup[342]-Starting SETUP
upd_act_setup[131]-Trying Setup, fmg=0
__upd_comm_rcv[969]-data_len=24, pkg(buf=0x7ffed5f17f6c, sz=8516, pos=0)
__upd_fix_rx_pkg[988]-Failed, length=24, no res header.
upd_act_setup[142]-Failed receiving setup response, fmg=0, ret=-1
upd_act_setup[154]-Setup failed, fmg=0.
do_setup[346]-SETUP failed
 

Hey, I don’t know if you figured it out but If you are still experiencing the same issue even though the license is valid try this. Install Ublock extension and in my filters paste this line exactly

"*/api/v2/service/security-rating/results*"

Click Apply changes.

Close all FortiGate tabs, open a new normal tab, go to your FortiGate URL, and log in.