FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
pdelapena
Staff
Staff
Article Id 250429
Description

This article describes the error encountered while deploying a FortiGate KVM due to an inappropriate FortiGate KVM image. 

Scope FortiGate KVM.
Solution

Upon configuring the WAN interface and the static route for Internet connectivity of the FortiGate KVM, it will be necessary to upload the license file that can be downloaded in the support portal, support.fortinet.com: Asset Management -> Products -> Product List -> FGVM serial number and select the 'License File Download'.

 

After uploading a valid license file for the VM, an error will appear if a wrong image has been mistakenly used.

This is regardless of the correct amount of vCPU and RAM that have been specified for the FortiGate VM.

 

FortiGate VM License page.png

 

Further checking in the FortiGate CLI/serial console, the error: 'License invalid due to exceeding allowed 0 CPUs and 0 MB RAM.' will appear and the version used is FortiFirewall-VM64-KVM which is an incorrect image for the planned FortiGate VM to be provisioned. 

 

It will also show that the FortiGate VM's serial number is FGVM00UNLICENSED and will have a license status of 'No License'.

 

FGVM error.JPG

 

Make sure that the correct image has been downloaded to be used to provision the FortiGate VM. Download the compressed file that contains the image in the links below :
VMImages: new and latest versions.
FirmwareImages: older versions.

In this case, it will be the compressed file that has the filename pattern below needed to download and add to this instance:


FGT_VM64_KVM-vX.X.X.X-buildXXXX-FORTINET.out.kvm.zip


Note: This FortiGate VM was deployed in the EVE-NG emulator via VMWare WorkStation. The filename may vary if using other VM platforms.

 

Once the KVM image has been loaded in the instance, repeat the FortiGate VM license upload process and it will now be possible to see the FortiGate VM successfully licensed and provisioned.

 

SuccessfulProvisioning.png

 

Note:
If the error 'License invalid due to exceeding allowed 1 CPUs and 2 GB RAM', verify the allowed CPU and RAM using the command 'get sys status'. Example output:

 

FGT1 # get system status
Serial-Number: FGVM02XXXXXXX
License Status: Valid
License Expiration Date: 2025-05-28
VM Resources: 1 CPU/2 allowed, 3946 MB RAM/2048 MB allowed

 

This indicates the allocated RAM is over the license. Reducing the RAM will fix the issue.

Related Document:

Deployment