HA cluster licensing

[Nik]

Hi,

I have a HA cluster of 100E model and I want to renew the license on it (it will soon expire). We have purchased two licenses with same features in order to apply on these two fortigates separately.

Is it ok if I apply the license on the master first, and then change the prio and make the slave, a master, and then reboot. After that apply the license on the other fortigate?

thanks in advance

[whatz]

Hello,

A cluster normally sync's the license.  That is at least my experience.  All the clusters I am working with retrieve their licensing directly from the FortiGuard portal.

Mike

[lbjust · Accepted solution]

Hi,

After your licensing renew, Fortinet will update their servers with new expiration dates and licensed services. When your FortiGate checks against FortiGuard server, it will retrieve those new values automatically. You dont have to do nothing.

If you want to force an update: execute update-now

If you want to be sure that everything is correct, you can run a debug and see exactly what FortiGuard is replying:

diagnose debug application update -1
diagnose debug enable
execute update-now

You will see the contract for both members.

More info: Verifying FortiGuard licenses and troubleshooting

If you dont have Internet connection and need to apply the license file manually, just reset the uptime and the slave member will assume as master:

diag sys ha reset-uptime