FortiNAC
FortiNAC is a s a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
ethomollari
Staff
Staff
Description

This article describes how to change or install new licence for FortiNAC appliance via CLI,when a change in any of the following license components are required:

 

- Number of concurrent endpoint licenses.

- License type (e.g. upgrading from Plus to Pro).

- UUID or MAC address due to a FortiNAC appliance migration.

Scope

 

 

Solution

In order to acchieve this FortiNAC should be accessed via terminal emulator with the root credentials.

Steps to be followed :

 

1) Download the new license from the support portal.

 

Refer to the guide , page 14:

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/8a47ffee-d1bc-11ea-96b9-005056...

 

2) Access the FortiNAC via a terminal emulator like putty with root credentials.

 

ethomollari_0-1638725050613.png

 

3) Navigate to the directory  /bsc/campusMgr.

 

cd /bsc/campusMgr

ls -la ---> optional step to check the contents of the directory.Existing license is highlighted in yellow and  noted with the red arrow 

 

ethomollari_1-1638725640492.png

 

4) Rename the existing licenseKey to .licenseKeyOLD with the command below 

mv .licenseKey .licenseKeyOLD

 

5) Create a new file  named .licenseKey using nano or vi editor 

#nano .licenseKey

 

ethomollari_2-1638726113688.png

 

 

 

 

6) Paste the key from the license file downloaded in step 1.

Hint : It can be opened with notepad and must start with FNC: 

 

ethomollari_3-1638726279771.png

 

 

The end of the key should terminate with two delimiter characters (==).

 

It is possible to go to the end of the key text by using keyboard left,right arrows.

 

- Delete the delimiter characters   ==

- Ctrl + O to save the file 

- Ctrl +X to finish and exit the editor 

 

7) Restart FortiNAC applicate via this command : 

#restartNAC

ethomollari_4-1638726769423.png

 

8) The new license now should be applied. It can be checked via cli 

 

#licensetool

#entitlementstool

 

ethomollari_5-1638728291195.png

 

Note.

This method can be used if FortiNAC appliance is not reachable via GUI because of 'processes are down' error or the license is not applicable via ConfigWizard  like in 9.2.0 where ConfigWizard is not a separate webservice but included in the main GUI.

 

Related articles : 

https://community.fortinet.com/t5/FortiNAC/Technical-Tip-Installing-new-or-changing-license-on-Forti...)

 

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/8a47ffee-d1bc-11ea-96b9-005056...