Troubleshooting Tip: Firmware Template Upgrade Fails with Error 'no valid FMWR license'

[haziqsulaiman]

Description	This article describes the troubleshooting steps when encountering the error 'no valid FMWR license'.
Scope	FortiManager.
Solution	Ensure the FortiGate that is being upgraded has valid licenses. This can be checked from the Support Portal, or via the Licenses widget in FortiGate under FortiGate -> Dashboard -> Status -> Licenses widget: Verify that the FortiGate’s license in FortiManager is valid. This can be checked under FortiGuard -> Device Licenses: If the FortiGate’s license in FortiManager shows as 'No Support' or 'Expired', most likely there is a connection issue between the FortiManager and the FortiGuard server(s). Ensure that traffic from FortiManager is allowed to FortiGuard servers (fds1.fortinet.com) or FortiGuard FQDN (*.fortinet.com , *.fortinet.net) on port 443. Here is how the configuration should be on the FortiManager and FortiGate sides: Technical Tip: Configure FortiManager as a local FDN server for FortiGates Further troubleshooting is explained in the following KB ARTICLE: Technical Tip: Verifying FortiGuard connectivity on FortiManager If the FortiManager is operating in an air-gapped environment, users may upload the Entitlement File to FortiManager to update the contract information. The steps to upload the Entitlement File to FortiManager are explained in the following document: Uploading account entitlement files. If all steps have been followed and the error persists, consider raising a Technical Support ticket for further troubleshooting by sharing the output of below commands: diagnose fmupdate dbcontract <FortiGate_serialnumber> diagnose fmu show-dev-obj <FortiGate_serialnumber> diagnose fmupdate view-linkd-log fds Related article: Technical Tip: Upgrading FortiManager/FortiAnalyzer