|
This message says the database signature of the FortiGate is mismatched with the checksum.
logid="0100041009" type="event" subtype="system" level="critical" vd="root" logdesc="FortiGate database signature invalid" status="database-check"
Since the database version does not match the particular checksum, it could be possible that it is tampered with.
Important Notes:
For any device with v7.2.5 and above, the system could reboot after some time to check the system. The message will be removed only if the checking is passed. Otherwise, it will show the same message again under the system event logs after the reboot.
Solution:
- Collect the following debug command output:
diagnose autoupdate version
diagnose autoupdate signature check-all
-
Initiate a ticket with TAC support and provide the debug output to check whether this is a false positive or not.
Note:
To validate the signatures or for more information regarding each signature of the FortiGuard database: Technical Tip: Validating common FortiGuard update package objects signature
Workaround:
TFTP firmware reloads the firmware completely to erase the existing firmware on the hardware model if any quick solution is required without checking with Fortinet TAC. The factory reset command from the CLI will not work. Once TFTP reloaded the firmware, restore the backup configuration.
|
