FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
amalik
Staff
Staff
Article Id 317764

 

Description

This article describes how to resolve an issue that occurs in some cases after an upgrade between major versions of FortiOS where the ISDB database may have no entries and may fail to update due to possible corruption in the package.

Scope FortiOS v6.0 - 6.4.
Solution

The following errors can be seen in updated debug when attempting an update (exec update-now):

 

[473] __parse_sig_data: Unrecognized digital signature.
installUpdateObject[310]-Signature verified for obj 31, ret=0, data_len=9160864, obj_len=9160864, sig_len=0.
installUpdateObject[346]-Step 2:Prepare temp file for obj 31
installUpdateObject[440]-Failed validation of obj 31
doInstallUpdatePackage[1019]-Full obj found for ALCI000
doInstallUpdatePackage[1029]-Updating obj ALCI
...............
upd_act_update[553]-won't retry due to install error
do_update[518]-UPDATE failed

 

A reboot should be attempted before trying the following. In case a reboot does not help, removing and manually updating the ISDB package may be required:

 

diagnose internet-service clear /data2/ffdb_app
diagnose internet-service clear /data2/ffdb_map

execute update-now

 

If the reboot or clearing of the ISDB package does not solve the issue, check the internet service database being used. If 'Full Database' is present, change it to 'Mini' by using the following command:

 

config system global

    set internet-service-database mini

    mini Small sized Internet Service database with very limited IP addresses.

    standard Medium sized Internet Service database with most IP addresses.

    full Full sized Internet Service database with all IP addresses.

    on-demand Internet Service database with customer selected IP addresses.

end


Perform the manual update by using the command :

   

    exe update-now

 

After a successful update, revert the changes back to the 'Full' database.