Technical Tip: How to register the LENC license in a FortiGate HA cluster

[adavila]

Description

This article explains how to enable encryption to LENC devices when these are in an HA cluster.

Scope

FortiGate, HA cluster.

Solution

The first step is to register the license in the Fortinet Customer Service and Support web portal at support.fortinet.com. This will generate the license key. This step must be repeated for the all members in the cluster.

The license keys must then be entered into each device.

1. Using the CLI on the master device.

execute crypto-license <high-encryption-key>

2. Change in the CLI to the slave device, where <id> is the ID for the other member of the cluster:

exec ha manage <id>

3. Enter the key in the slave device.

execute crypto-license <high-encryption-key>

4. (Optional) In order to use deep inspection with strong encryption certificates with more than 512 bites, renew all default certificates.

   Follow the steps in Technical Tip: Unable to perform deep inspection after upgrade from LENC to High Encrypt to renew them.