FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
samandeep
Staff
Staff
Article Id 337665
Description

This article describes the steps to take when FortiGate and FortiClient EMS cloud have valid licenses but the FortiGate side displays 'EMS cloud license Expired'.

emsli.PNG
Scope FortiOS 7.x.x.
Solution

One common cause of this issue is an expired EMS certificate, which can trigger the 'EMS cloud license expired' error message on the FortiGate side.

 

To isolate the issue, follow these steps:

 

  1. Verify internet connectivity for EMS cloud.

 

exe ping forticlient-emsproxy.forticloud.com

 

Document Referred: Technical Tip: FortiClient EMS Basic Troubleshooting.

 

  1. Verify the license status on the FortiGate side using the CLI command:

     

    diagnose test update info | grep Account\ contracts -A2

     

    Output:

    Account contracts:

     

        FCEM,Thu Apr 17 2025

     

     

  2. If the issue remains, recreate the EMS connector to restore connectivity.

     

     

Document Referred: Establish connectivity on the EMS connector.

 

If the issue remains unresolved, open a ticket with TAC and provide the following debugs:

 

exe ping forticlient-emsproxy.forticloud.com

execute fctems verify <connector ID>

diagnose endpoint fctems test-connectivity <connector ID>