Troubleshooting Tip: License/Subscription fail to update

[Renante_Era]

Description	This article describes how to fix an issue where the license/subscription of FortiGate in HA cluster is not updating.
Scope	FortiGate.
Solution	Verify that the FortiGates are in an HA cluster. get system ha status Confirm that the cluster member licenses/subscriptions were renewed. Ensure that both devices can reach FortiGuard. execute ping update.fortiguard.net execute ping service.fortiguard.net execute ping guard.fortiguard.net Command 'diagnose debug rating' can also be used to troubleshoot FortiGuard connectivity. This will provide information about the status of FortiGuard servers and FortiGate's ability to communicate with them.  Once reachability with the FortiGuard server is confirmed, the command below can be executed to compel a manual update: execute update-now View the Dashboard and confirm whether the license was updated. If necessary, fail-over to the secondary device and execute update-now. execute ha manage <index-ID> <admin-username> Find the index number by following the CLI command that shows the index number of the secondary when it is run in the primary: execute ha manage ? <id> please input peer box index. <1> Subsidiary unit FWXXFDTK0000000 execute ha manage 1 admin Press the Enter key, and a prompt will appear for a Password. Once the password is entered, access will be granted to the Secondary unit.  execute update-now Note: Make sure both FortiGates are running the same FortiOS firmware version. All FortiGates in the cluster must have the same level of licensing (Setting up registration and licensing) for FortiGuard, FortiCloud, FortiClient, and VDOMs. FortiToken licenses can be added at any time because they are synchronized with all cluster members. Ensure that not only the FortiGates have an Internet connection but also public hostnames, especially the FortiGuard FQDN, can also be resolved by the DNS servers configured. If FortiGate is in an air-gap environment, the solution is to manually upload the entitlement file on each FortiGate unit before initiating the upgrade. Make sure that FortiGate Cluster members are registered to one FortiCloud account. Note: Devices on or below the 200 series will require a cloud key to register the secondary device to support the portal for FortiGuard licenses if they are in HA.  Related articles: Technical Tip: The license still shows as expired after renewal Technical Tip: Device License is not reflecting in FortiGate dashboard Troubleshooting Tip: License not reflected in the GUI Technical Tip: FortiGate license expiry date incorrect Technical Tip: Entitlement File for Device in Air-Gap Environment  Troubleshooting Tip: License not updating when FortiGate on HA have Different Account Registration

[Renante_Era]

Press the Enter key, and a prompt will appear for a Password. Once the password is entered, access will be granted to the Secondary unit. 

execute update-now