Troubleshooting Tip: HA out-of-sync fix firmware mismatch issue without breaking cluster

[dbhavsar]

Description	This article describes how to fix the HA sync issues without breaking the cluster when both units are on different firmware.
Scope	FortiGate
Solution	The primary device must be the one with a higher firmware version. Once it is possible to access Primary FortiGate, login to the CLI of the secondary unit using the below commands: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Managing-individual-cluster-units-with-the... Configure the  TFTP server and load the image file in the directory (the image with the .out version should be the same as the primary) by using the below command to restore the image file: execute restore image tftp <file_name.out> <tftp server ip-address> <username> <password> Related document: execute restore Once uploaded, wait for a while, HA will be in-sync or run the below commands on both units: diagnose sys ha checksum recalculate Related article: Technical Tip: Procedure for HA manual synchronization