Description
This article describes that it is sometimes necessary to upgrade the ADOM and it is not possible to do it due to an unsupported firmware version according to the compatibility.
This blocks the way to upgrade the ADOMs. Or sometimes it is just necessary to reset ADOM settings so there are the default values of it.
Scope
FortiManager, FortiAnalyzer.
Solution
Note: Before resetting the ADOM version, all devices in that ADOM must be removed. This can be done from the GUI. The syntax for deleting devices using the CLI is found at the bottom of this article.
Warning:
Deleting a FortiGate in FortiManager will cause the FortiManager to attempt to remove all references to the FortiManager from the FortiGate. To keep the FortiGate's configuration, be sure to place FortiManager in Offline Mode before deleting the devices from the ADOM.
Afterward, it is possible to exit Offline Mode.
To reset an ADOM, run the following command:
execute reset adom-settings <adom> <version> <m>
Example
To reset the ADOM root to firmware version 6.4, run the following command.
execute reset adom-settings root 6 4
Where:
root is the ADOM
6 is Firmware version 6
4 is MR version 4
This will set the ADOM root to firmware version 6.4.
To reset a Global ADOM to firmware version 6.4, run the following command:
execute reset adom-settings Global 6 4
Where:
Global is the Global ADOM
6 is Firmware version 6
4 is MR version 4
If it is necessary to remove a unit and it is not possible to do this from GUI, delete them through the CLI with the following command:
diagnose dvm device delete <adom> <Device name>
For example, to delete a FortiGate named 'FWF60D' from ADOM 'root_64':
diagnose dvm device delete root_64 FWF60D
Where:
root_64 is the ADOM root_64
FWF60D is the name of the FortiGate to delete
Related document: