Description
Solution:
Check if Fortigate can connect to FortiGuard servers
# exec ping fds1.fortinet.com
# exec ping directregistration.fortinet.com
If above pings are successful, then run below debugs and import the license in CLI
# diag debug console timestamp enable
# diag debug app forticldd -1
# diag fortitoken debug enable
# diag debug enable
Mobile/Soft FortiToken has to be imported in the FortiGate with the help of activation code that is received et License purchase.
FG500SJKIA # exec fortitoken-mobile import EEEE-DDDD-CCCC-BBBB-AAAA
2019-08-15 11:22:38 ftm_cfg_import_license[317]:import license EEEE-DDDD-CCCC-BBBB-AAAA
2019-08-15 11:22:38 ftm_fc_cfg_set_fd_mgmt_vdom[47]:Using vfid=0 (mgmt:0 ha:2)
2019-08-15 11:22:39 ftm_fc_comm_send_request[315]:send packet to forticare success.
POST /SoftToken/Provisioning.asmx/Process HTTP/1.1
Accept: application/json, text/javascript, */*, q=0.01
Content-Type: application/json;charset=utf-8
X-Requested-With: XMLHttpRequest
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Host: fortinet-ca2.fortinet.com
Content-Length: 305
Connection: Keep-Alive
Cache-Control: no-cache
{ "d": { "__type": "SoftToken.ActivationLicenseRequest", "__version": "4", "license_activation_code": " EEEE-DDDD-CCCC-BBBB-AAAA ", "serial_number": "FG5H0E5818******", "__device_version": "6.0", "__device_build": "0932", "__clustered_sns": [ { "sn": "FG5H0E5818******" }, { "sn": "FG5H0E5818******" } ] } }
2019-08-15 11:22:40 ftm_fc_comm_recv_response[501]:receive packet from forticare success.
{"d":{"__type":"SoftToken.ActivationLicenseResponse","__version":"4","serial_number":"FG5H0E12******","__device_version":"6.0","__device_build":"0932","__clustered_sns":
[{"sn":"FG5H0E5818******","error":null},{"sn":"FG5H0E5818******","error":null}],"license_activation_code":" EEEE-DDDD-CCCC-BBBB-AAAA ","license":"EFTM050040******","tokens":null,"result":0,"error":{"error_code":1,"error_message":"runtime error"}}}
2019-08-15 11:22:40 ftm_fc_command[564]:received error from forticare [-7551]
import fortitoken license error: -7551
Send an e-mail to “ftms_admin@fortinet.com” with logs to check the license.
b) If error 'import fortitoken license error: -7561', check with Reseller/Distributor if they have already activated.
# execute fortitoken-mobile import AAAA-BBBB-CCCC-DDDD-EEEE
POST /SoftToken/Provisioning.asmx/Process HTTP/1.1
Accept: application/json, text/javascript, */*, q=0.01
Content-Type: application/json;charset=utf-8
X-Requested-With: XMLHttpRequest
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
Host: 208.91.113.53:443
Content-Length: 305
Connection: Keep-Alive
Cache-Control: no-cache
{ "d": { "__type": "SoftToken.ActivationLicenseRequest", "__version": "4", "license_activation_code": " AAAA-BBBB-CCCC-DDDD-EEEE ", "serial_number": "FGT81F*******", "__device_version": "7.0", "__device_build": "0366", "__clustered_sns": [ { "sn": "FGT81F*******" }, { "sn": "FGT81F*******" } ] } }
2022-09-16 09:36:40 ftm_fc_comm_recv_response[501]:receive packet from forticare success.
{"d":{"__type":"SoftToken.ActivationLicenseResponse","__version":"4","serial_number":"FGT81F*******","__device_version":"7.0","__device_build":"0366","__clustered_sns":
[{"sn":"FGT81F*******","error":null},{"sn":"FGT81F*******","error":null}],"license_activation_code":" AAAA-BBBB-CCCC-DDDD-EEEE ","license":"","tokens":null,"result":0,"error":{"error_code":11,"error_message":"forticare license already activated"}}}
2022-09-16 09:36:40 ftm_fc_command[615]:received error from forticare [-7561]
import fortitoken license error: -7561
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.