FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes how to successfully add newly purchased UTM licenses in a new HA cluster setting and why the process may fail.
Scope
FortiGate in an HA cluster.
Solution
Introduction:
In a new HA cluster setting, to apply the newly purchased UTM license entitlements on both HA cluster units some considerations need to be taken into account.
In the HA cluster setting need to consider the following:
Both cluster units are of the same model and firmware version.
Both cluster units have the same license entitlements and validity date.
Both cluster units must be registered under the same FortiCare account.
Problem:
There are some scenarios where applying for the newly purchased UTM licenses on the primary unit in the HA cluster and still show expired and/or the license will not apply successfully, even with both units having the same model and firmware version, and UTM license entitlements and validity date.
Solution:
Make sure the other HA cluster unit is already registered under the same FortiCare account as the primary unit. Once both units are listed under the same FortiCare account, then licenses will apply successfully on the primary unit and the process will succeed.
For checking if the licenses are not showing the valid date on the HA cluster, refer to the technical tip below for further checking and understand the license behavior of the HA cluster: Troubleshooting Tip: Licenses do not show valid dates in HA
