Technical Tip: Failure to execute firmware upgrade

[navellano]

Description	This article describes why the FortiGate is unable to perform a firmware upgrade due to the error 'This is a FortinetOS vX.X.X-buildXXXX firmware image that cannot be installed because the device's FortiGuard license for firmware upgrades could not be verified or may have expired. Verify or renew the license to install upgrades'.
Scope	FortiGate v7.0 and later.
Solution	The issue occurs because the FortiGate is in an air-gapped environment and is not permitted to connect to the internet. As a result, it cannot reach the FDN servers for FortiGuard updates, license validation, or subscription verification. To rectify this, the license file must be manually uploaded to the FortiGate. Follow the steps outlined below to complete this process. Visit the Fortinet Support website at Support. Select Services -> Asset Management: Go to Product -> Product List. Select the serial number of the FortiGate. Under the License & Key section, select Download to get the License File. The file downloaded to the device is in the format FG*********.lic. In FortiOS, go to System -> FortiGuard. Select the 'Upload License File' and upload the license file. This operation does not require a reboot. Once the upload is completed, the FortiGate shows as registered and licensed. The device is now ready to proceed with the firmware upgrade.