FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes a possible scenario where the user is trying to upgrade FGT_VM64_AZURE (PAYG) from v7.2.3 to v7.2.6 following the recommended upgrade path. However, upon upgrading system halts and becomes unresponsive as shown in the below output and the only way to recover it is by shutting down the VM and restoring from a previous snapshot.
###################################### Firmware upgrade in progress ... Done. The system is going down NOW !! Please stand by while rebooting the system. Restarting system. System is starting... Serial number is FGTAZRXXXXXXXXX az-fgt01 login: The system is going down NOW !! The system is halted. Power down
##########################
Scope
FortiGate.
Solution
Run the 'dia test app azd 6':
command and check the SKU of the VM metadata.
If the SKU is empty, <<"sku": "",>> it is because starting from v7.2.4, the PAYG validation has been tightened and requires PAYG VM to carry valid SKU.
Only VMs that were created from the official Azure marketplace will carry this type of SKU.
The solution is to recreate the VM from the official Azure marketplace to be able to upgrade successfully.
