FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ssanga
Staff & Editor
Staff & Editor
Article Id 350803
Description This article provides a fix for an issue where FortiGate fails to boot during an upgrade or when restoring a configuration file that contains an invalid string format.
Scope FortiGate v7.2.9, v7.4.3, v7.4.4.
Solution

When the configuration file contains an invalid string format, such as single double quotation marks without escape code, FortiGate may fail to boot and show the following errors in the console logs:

Reading boot image 3108513 bytes.
Initializing firewall...
System is starting...
System file integrity init check failed!

<00000> Backtrace:
<00000> [0x027445f6] => /bin/cmdbsvr
<00000> [0x7fc8d978bec0] => /usr/lib/x86_64-linux-gnu/libc.so.6 liboffset 00038ec0
<00000> [0x02750043] => /bin/cmdbsvr
<00000> [0x0275e230] => /bin/cmdbsvr
<00000> [0x0275e9dd] => /bin/cmdbsvr
<00000> [0x0275efa8] => /bin/cmdbsvr
<00000> [0x027405ec] => /bin/cmdbsvr
<00000> [0x02744973] => /bin/cmdbsvr
<00000> [0x027450d9] => /bin/cmdbsvr
<00000> [0x027c6141] => /bin/cmdbsvr
<00000> [0x027c8602] => /bin/cmdbsvr
<00000> [0x027c96a5] => /bin/cmdbsvr
<00000> [0x0044e5ef] => /bin/cmdbsvr
<00000> [0x004516cb] => /bin/cmdbsvr
<00000> [0x004517fb] => /bin/cmdbsvr
<00000> [0x0045d93e] => /bin/cmdbsvr
<00000> [0x0044e5ef] => /bin/cmdbsvr
<00000> [0x00453e48] => /bin/cmdbsvr
<00000> [0x00454211] => /bin/cmdbsvr
<00000> [0x004576a7] => /bin/cmdbsvr
<00000> [0x7fc8d9776e1b] => /usr/lib/x86_64-linux-gnu/libc.so.6 (__libc_start_main+0x000000eb) liboffset 00023e1b
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf723e0:0x7fc8d4ad4144 duplicated action=find-dup, vdom=root, node=system.interface.name, key=[mgmt]
[fwinit_interface:438] cmf_query_table_append_static mgmt error
Interface initialize error
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf4c240:0x7fc8d541e0c0 duplicated action=find-dup, vdom=root, node=system.physical-switch.name, key=[sw0]
cmf_query_table_append_static sw0 error
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf68d40:0x7fc8d47f70a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.mail.msg-type, key=[partial]
Can not add table entry, createTable,702: partial table mail iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf740b0:0x7fc8d47f30a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.http.msg-type, key=[url-block]
Can not add table entry, createTable,702: url-block table http iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf7c0c0:0x7fc8d47ef0a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.alertmail.msg-type, key=[alertmail-virus]
Can not add table entry, createTable,702: alertmail-virus table alertmail iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf840d0:0x7fc8d47eb0a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.spam.msg-type, key=[ipblocklist]
Can not add table entry, createTable,702: ipblocklist table spam iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf8c0e0:0x7fc8d47e70a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.ftp.msg-type, key=[ftp-explicit-banner]
Can not add table entry, createTable,702: ftp-explicit-banner table ftp iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf94240:0x7fc8d47e30a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.fortiguard-wf.msg-type, key=[ftgd-block]
Can not add table entry, createTable,702: ftgd-block table fortiguard-wf iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf9c240:0x7fc8d47df0a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.auth.msg-type, key=[auth-disclaimer-page-1]
Can not add table entry, createTable,702: auth-disclaimer-page-1 table auth iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafa4250:0x7fc8d47db0a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.webproxy.msg-type, key=[deny]
Can not add table entry, createTable,702: deny table webproxy iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafac260:0x7fc8d47d70a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.sslvpn.msg-type, key=[sslvpn-login]
Can not add table entry, createTable,702: sslvpn-login table sslvpn iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafb4270:0x7fc8d47d30a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.admin.msg-type, key=[pre_admin-disclaimer-text]
Can not add table entry, createTable,702: pre_admin-disclaimer-text table admin iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafbc280:0x7fc8d47cf0a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.nac-quar.msg-type, key=[nac-quar-virus]
Can not add table entry, createTable,702: nac-quar-virus table nac-quar iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafc43e0:0x7fc8d47cb0a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.traffic-quota.msg-type, key=[per-ip-shaper-block]
Can not add table entry, createTable,702: per-ip-shaper-block table traffic-quota iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafcc3e0:0x7fc8d47c70a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.utm.msg-type, key=[virus-html]
Can not add table entry, createTable,702: virus-html table utm iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafd43f0:0x7fc8d47c30a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.icap.msg-type, key=[icap-req-resp]
Can not add table entry, createTable,702: icap-req-resp table icap iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafdc400:0x7fc8d47bf0a8 duplicated action=find-dup, vdom=root, node=system.replacemsg.automation.msg-type, key=[automation-email]
Can not add table entry, createTable,702: automation-email table automation iter 0
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf723b0:0x7fc8d47b70f0 duplicated action=find-dup, vdom=root, node=system.accprofile.name, key=[super_admin]
error at cmd_query_table_append (super_admin) 1194
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf72920:0x7fc8d47b71a8 duplicated action=find-dup, vdom=root, node=system.accprofile.name, key=[super_admin_readonly]
error at cmd_query_table_append (super_admin_readonly) 1194
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf72d30:0x7fc8d47b7260 duplicated action=find-dup, vdom=root, node=system.accprofile.name, key=[admin_no_access]
error at cmd_query_table_append (admin_no_access) 1194
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xaf73140:0x7fc8d47b7318 duplicated action=find-dup, vdom=root, node=system.accprofile.name, key=[prof_admin]
error at cmd_query_table_append (prof_admin) 1194
<pid-265 /bin/cmdbsvr> [__bsearch_index:458] entry 0xafbca40:0x7fc8d477106c duplicated action=find-dup, vdom=root, node=system.standalone-cluster.cluster-peer.sync-id, key=501, attr.size=4(sync-id)
<pid-265 /bin/cmdbsvr> [__bsearch_index:458] entry 0xafeeae0:0x7fc8d476d054 duplicated action=find-dup, vdom=root, node=waf.main-class.id, key=10000000, attr.size=4(id)
<pid-265 /bin/cmdbsvr> [__bsearch_index:458] entry 0xafeeff0:0x7fc8d46ba054 duplicated action=find-dup, vdom=root, node=waf.signature.id, key=10000001, attr.size=4(id)
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafc2540:0x7fc8d46b3098 duplicated action=find-dup, vdom=root, node=antivirus.filetype.name, key=[7z]
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafc1ee0:0x7fc8d46ac0d8 duplicated action=find-dup, vdom=root, node=system.sso-admin.name, key=[fabric-admin]
error at cmd_query_table_append (fabric-admin) 1342
<pid-265 /bin/cmdbsvr> [__bsearch_index:432] entry 0xafc0f10:0x7fc8d46ac208 duplicated action=find-dup, vdom=root, node=system.sso-admin.name, key=[fabric-admin-readonly]
error at cmd_query_table_append (fabric-admin-readonly) 1342
Initialize config error 44010
<pid-265 /bin/cmdbsvr> [__bsearch_index:458] entry 0xb66a610:0x7fc8d3b9b054 duplicated action=find-dup, vdom=root, node=firewall.internet-service-reputation.id, key=1, attr.size=4(id)
<pid-265 /bin/cmdbsvr> [__bsearch_index:458] entry 0xb66a610:0x7fc8d3b9b0e4 duplicated action=find-dup, vdom=root, node=firewall.internet-service-reputation.id, key=2, attr.size=4(id)
<pid-265 /bin/cmdbsvr> [__bsearch_index:458] entry 0xb66a610:0x7fc8d3b9b174 duplicated action=find-dup, vdom=root, node=firewall.internet-service-reputation.id, key=3, attr.size=4(id)
<pid-265 /bin/cmdbsvr> [__bsearch_index:458] entry 0xb66a610:0x7fc8d3b9b204 duplicated action=find-dup, vdom=root, node=firewall.internet-service-reputation.id, key=4, attr.size=4(id)
<pid-265 /bin/cmdbsvr> [__bsearch_index:458] entry 0xb66a610:0x7fc8d3b9b294 duplicated action=find-dup, vdom=root, node=firewall.internet-service-reputation.id, key=5, attr.size=4(id)


This invalid string parsing issue has been resolved for double quotation marks in v7.4.5 and v7.6.1, and the same parsing issue will be resolved for single quotation marks in v7.4.8 and v7.6.3.

Console logs are required by FortiGate TAC for investigation along with configuration files.

 

Note:

In the case where the FortiGate cannot be accessed and the following error 'Initialize config error 44010' is observed in the console logs after booting; try rebooting the device to access the configuration menu and 'Boot with backup firmware and set as default'. This option will attempt to boot FortiGate on the previous working firmware version.

Related article:

Technical Tip: Boot the backup firmware and config via console