FortiNAC-F
FortiNAC-F is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks. For legacy FortiNAC articles prior to FortiNAC-F 7.2, see FortiNAC.
ndumaj
Staff
Staff
Article Id 344227
Description This article describes how to perform a FortiNAC upgrade after facing the upgrade failure, Errors occurred during image upgrade. ret='-1'.
Scope FortiNAC CentOS, FortiNAC-OS.
Solution Performing the upgrade of the system via GUI referring guide System update settings:
 
Update System.png

 

Select firmware version to download:


Version-download.png


Downloading firmware in process page will open in another tab:


Downloading in process.png

 

Once the download process is completed the following message will appear:


Download complete.png

 After the complete download select 'Install' button:


Install.png


Select the download version to install:


Install version.png

 

After hitting the Update button, upgrade process will start.
Important: Do not close the tab browser.

In case of the following error during upgrade check the downloaded file:


Upgrading 10.1.12.42 with /bsc/campusMgrUpdates/FNAC_KVM-v7.2.7-build0127-FORTINET.out...
Check firmware file ...
Upgrading firmware image from version 7.2.5.101 to 7.2.7.127
Start to restore firmware image..
Cannot read from file /bsc/campusMgrUpdates/FNAC_KVM-v7.2.7-build0127-FORTINET.out
Begin write image to disk...
Errors occured during image upgrade. ret='-1'
Flush firmware failed

 

This error occurs when FortiNAC server has limited bandwidth connection, and it takes too long to download the Firmware from the FortiNAC repository.

Perform the following checks from CLI to verify if the download file is completed successfully:

 

  1. FortiNAC-CLI$gzip --test /bsc/campusMgrUpdates/FNAC_KVM-v7.2.7-build0127-FORTINET.out && echo good
    good 
    <----- Command should return good output.

  2. FortiNAC-CLI$md5sum /bsc/campusMgrUpdates/FNAC_KVM-v7.2.7-build0127-FORTINET.out

636b94047b5257f5308ea6276d196441 FNAC_KVM-v7-build0127-FORTINET.out<----- Command should return the MD5 sum.

Ensure that the FortiNAC server has internet access and can reach the FortiNAC repository fnac-updates.fortinet.net on port Http/Https.
If there is a limited bandwidth connection the download process will take time and that might cause a compromised downloaded file.

Related Articles:
Technical Tip: How to upgrade FortiNAC from GUI
Technical Tip: Upgrade FortiNAC from CLI 

Technical Tip: Upgrade FortiNAC-F through the CLI