FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
syadav
Staff
Staff
Article Id 332451
Description This article describes the issue that users might face with the FortiClient EMS connector after renewing their FortiCloud EMS license/contract.
Scope

FortiGate, FortiCloud EMS.

Solution

The FortiClient EMS connector might show disconnected or unauthorized after the FortiCloud EMS license/ contract renewal.

This issue can arise if the contract is updated during the renewal process. For example, if the previous contract included 25 users for VPN/ZTNA and the contract was renewed for 500 users for VPN/ZTNA.

 

The renewal will change the SKU based on the new contract and this new contract will be added to the account without replacing the previous expired one.

 

The below screenshot shows the FortiClient connector giving an ‘EMS Cloud license expired’ error while authorizing it:

 

syadav_0-1723499176975.png

 

The FortiClient EMS connector verification via the CLI will show the same as shown below:

 

FGT_VM # execute fctems verify 1
Error in requesting EMS fabric connection: -7
issue in getting capabilities. License expired.
Error (-1@_get_capabilities:438). license expired
Command fail. Return code -9999

 

To verify the contract’s expiry date, use the below command:

 

diagnose test update info | grep Account\ contracts -A2

Account contracts:

    FCEM,Thu Apr 17 2024

 

If the above command indicates that the ‘FCEM’ contract expired, run the below command to update the contact information:

 

execute update-now

 

If the issue persists, contact Fortinet Support.