Description
In a FortiGate HA cluster, each unit must have an individual FortiClient license packs installed.
If any individual FortiGate unit of all the units in the HA cluster does not have a valid license pack installed, or amounts of licenses are not equal on each unit, then the HA cluster (via the Primary unit) will consider the lowest number of licenses installed on any of the units as the number of licenses, valid for the HA cluster as a whole.
Note: Examples, when the procedure described in this KB article can be used, include scenarios, when the FortiGate unit has no access to Internet, and therefore the registration via the GUI cannot be used, or when the secondary FortiGate unit can not be accessed via the web admin GUI.
Important: Before using this procedure, please contact the Fortinet Customer Service in order to obtain the license keys, that can be used for the CLI procedure. You will be required to provide the FortiGate unit serial number and the scratch card digital copy.
Solution
The following CLI command can be used to load the license on the Primary unit within the HA cluster:
execute FortiClient-NAC update-registration-license <code>
To connect to the Secondary unit in the HA cluster, use the following CLI command first:
execute ha manage <secondary_unit_id>
and then use:
execute FortiClient-NAC update-registration-license <code>
