FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
Stephen_Daniel
Article Id 393020
Description This article describes steps to fix a license upload issue where the error message is 'Error happened: Failed to read uploaded license.'.
Scope FortiSIEM.
Solution

This error message occurs when trying to upload a FortiSIEM license to the older version of FortiSIEM. 

This issue is due to a recent change in licensing, which increased the license file size, and the older FortiSIEM versions like v7.1.x, v7.0.x, v6.x has a size limit, hence it failed to read the uploaded license.

 

error.png

 

To verify if the user is facing the same issue, perform the following steps.

 

Run grep -i license_error /opt/phoenix/log/phoenix.log to look for the error in the log file.

 

In the phoenix.log file, look for the same error as: Part 611 length should not be greater than 16384.

 

2025-05-09T18:05:54.668090+04:00 XXXXXGSIEM phMonitorSupervisor[1166443]: [PH_MONITOR_LICENSE_ERROR]:[eventSeverity]=PHL_ERROR,[procName]=phMonitorSupervisor,[fileName]=phMonitorProcess.cpp,[lineNumber]=2778,[errReason]=Part 611 length should not be greater than 16384

 

Run dmidecode | grep UUID and verify the UUID matches with the Hardware ID in the support portal for the respective serial number.

 

Run phLicenseRead FSMS01TMXXXXXXXX.lic and verify it shows below error.

 

phLicenseRead FSMS01TMXXXXXXXX.lic

Failed to read license file due to error: Part 611 length should not be greater than 16384

 

Replace 'FSMS01TMXXXXXXXX.lic' with the correct license file name in the above command.

 

To resolve the licensing issue, download the FortiSIEM License Key Legacy File from the support portal and upload it to the FortiSIEM older version. Now FortiCare provides two license files, FortiSIEM License Key File and FortiSIEM License Key Legacy File. The legacy file will work with versions before v7.2.6, and the other one will work with v7.2.6 and above.