FortiPAM
FortiPAM allows you to protect, isolate and secure privileged account credentials, manage and control privileged user access, and monitor and record privileged account activity.
rbraha
Staff
Staff
Article Id 363925
Description

 

This article describes the possibilities of upgrading the firmware on FortiPAM from the GUI and CLI. While the GUI upgrade is commonly used, it is also possible to upgrade the FortiPAM image through the FTP/TFTP server.

 

Scope

 

FortiPAM, FortiSRA.

 

Solution

 

Always back up the FortiPAM configuration, then follow the procedure below to upgrade the firmware.

Before installing FortiPAM firmware, download the firmware image from the Fortinet Support website: Support, then upload it from the PC to the FortiPAM.

 

Before firmware upgrade:

 

Always check the Release notes for any known and resolved issues before moving to the latest version of FortiPAM.

 

In order to upgrade FortiPAM to a newer version, select Maintenance Mode.

 

In the top-right corner, select Admin account -> System -> Activate Maintenance Mode.

 

Figure 1. Activate Maintenance ModeFigure 1. Activate Maintenance Mode

 

 From CLI:

 

config system maintenance

    set mode enable

end

 

  1. Go to System -> Firmware -> Upgrade, select the image of FortiPAM downloaded from Support.

 

Figure 2.Upgrade from GuiFigure 2.Upgrade from Gui

 

  1. To install an image from a TFTP/FTP server, use the following command on FortiPAM CLI:

     

execute restore image tftp <filename> <server fqdn| ipaddress>

execute restore image ftp <filename> <server fqdn| ipaddress>

 

Figure 3. Installing image through TFTPFigure 3. Installing image through TFTP

 

  1. To back up the current configuration through FortiPAM CLI:

 

execute backup full-config tftp <filename> <server fqdn|ipaddr>

execute backup full-config ftp <path><server fqdn|ipaddr>[:port] [ftp_user] [ftp_password]

 

  1. To restore configuration through FortiPAM CLI (in Maintenance mode):

 

execute restore config tftp <filename><server fqdn|ipaddr>

execute restore config ftp <filename><server fqdn|ipaddr>[:port] [ftp_user] [ftp_password]

 

After the procedure, deactivate the maintenance mode again.