Troubleshooting Tip: FortiGate shows EMS cloud license is expired but FortiClient EMS license is valid

[samandeep]

Description	This article describes the steps to take when FortiGate and FortiClient EMS cloud have valid licenses but the FortiGate side displays 'EMS cloud license Expired'.
Scope	FortiOS 7.x.x.
Solution	One common cause of this issue is an expired EMS certificate, which can trigger the 'EMS cloud license expired' error message on the FortiGate side. To isolate the issue, follow these steps: Verify internet connectivity for EMS cloud. exe ping forticlient-emsproxy.forticloud.com Document Referred: Technical Tip: FortiClient EMS Basic Troubleshooting. Verify the license status on the FortiGate side using the CLI command: diagnose test update info | grep Account\ contracts -A2 Output: Account contracts:     FCEM,Thu Apr 17 2025 If the issue remains, recreate the EMS connector to restore connectivity. See Establish connectivity on the EMS connector. If the issue remains unresolved, open a ticket with TAC and provide the following debugs: execute ping forticlient-emsproxy.forticloud.com execute fctems verify <connector ID> diagnose endpoint fctems test-connectivity <connector ID> Note: If the command 'diagnose test update info | grep Account\ contracts -A2' shows the contract expired, run execute update-now and wait for two minutes. Related article:  Technical Tip: The FortiCloud EMS connector shows disconnected after the license or contract renewal