Troubleshooting Tip: Firmware Template Upgrade Fails with Error 'no valid FMWR license'

[FortiZiq]

Description	This article describes the troubleshooting steps when encountering the error 'no valid FMWR license'.
Scope	FortiManager.
Solution	Ensure the FortiGate that is being upgraded has valid licenses. This can be checked from the Support Portal, or via the Licenses widget in FortiGate under FortiGate -> Dashboard -> Status -> Licenses widget: Verify that the FortiGate’s license in FortiManager is valid. This can be checked under FortiGuard -> Device Licenses: If the FortiGate’s license in FortiManager shows as 'No Support' or 'Expired', most likely there is a connection issue between the FortiManager and the FortiGuard server(s). Ensure that traffic from FortiManager is allowed to FortiGuard servers (fds1.fortinet.com) or FortiGuard FQDN (*.fortinet.com , *.fortinet.net) on port 443. Here is how the configuration should be on the FortiManager and FortiGate sides: Technical Tip: Configure FortiManager as a local FDN server for FortiGates. Further troubleshooting steps are explained in Technical Tip: Verifying FortiGuard connectivity on FortiManager. If the FortiManager is operating in an air-gapped environment, users may upload the Entitlement File to FortiManager to update the contract information. The steps to upload the Entitlement File to FortiManager are explained in the following document: Uploading account entitlement files. If all steps have been followed and the error persists, consider raising a Technical Support ticket for further troubleshooting by sharing the output of below commands from FortiGate and FortiManager: FortiGate debug: get system status get system central-management diagnose debug application update -1 diagnose debug console timestamp enable diagnose debug enable exec update-now FortiManager debug: show system interface diagnose fmupdate dbcontract <FortiGate_serialnumber> diagnose fmupdate show-dev-obj <FortiGate_serialnumber> diagnose fmupdate view-serverlist fds diagnose fmupdate view-linkd-log fds diagnose fmupdate fds-dump fds-log diagnose fmupdate fds-dump subs diagnose fwmanager fwm-log dump Related article: Technical Tip: Upgrading FortiManager/FortiAnalyzer