FortiWeb
A FortiWeb can be configured to join a Security Fabric through the root or downstream FortiGate.
shafiq23
Staff & Editor
Staff & Editor
Article Id 327939
Description This article describes how to update VM license entitlement and migrate the VM license to a new FortiWeb-VM instance.
Scope FortiWeb-VM.
Solution

Use Case 1: Update VM license.

 

Method 1:

The license widget on the GUI dashboard allows us to update new license files.

 

1.png

 

Note:

In the HA cluster setup, the ‘Update VM License’ option may not be available because the HA configuration depends on a valid license. Change to Standalone mode, update the license, and rejoin the HA cluster.

 

Method 2:

  1. Remove the existing FortiWeb-VM license. Run the below CLI command:

 

execute remove vmlicense

 

Note:

FortiWeb will reboot to effectively remove its license.

 

  1. After the reboot is completed, access the FortiWeb GUI. The upload license page will appear.
  2. Upload the new license file. The FortiWeb requires an Internet connection to verify the uploaded license. Once verified, FortiWeb will reboot again to apply for the license.

 

2.png

 

3.png

 

  1. After the reboot is completed, access the FortiWeb GUI and verify the Serial Number on the System Information widget.

 

Use Case 2: Migrate the VM license to another VM instance.

 

  1. Remove the existing FortiWeb-VM license. Run the below CLI command:

 

execute remove vmlicense

 

Note:

FortiWeb will reboot to effectively remove its license.

 

  1. After the reboot is completed, shut down the instance or decommission it later.
  2. Upload the existing license file to the new FortiWeb-VM instance. The FortiWeb requires an Internet connection to verify the uploaded license. Once verified, FortiWeb will reboot to apply for the license.

 

2.png

 

3.png

 

Note:

In case of a duplicate license error prompt during license verification, it may take 90 minutes or more before the old VM association is cleared. Follow the article below for more information.

Troubleshooting Tip: 'Duplicate license has been detected' 

 

  1. After the reboot is completed, access the FortiWeb GUI and verify the Serial Number on the System Information widget.

 

Note:

 

The admin could report that the FortiWeb VM does not provide the option to upload the license. The admin could have deployed the wrong VM ('Pay-As-You-Go').

 

13-fortiweb license not upload.png

 

Only the BYOL ('Bring Your Own License') version of FortiWeb-VM supports importing a license. FortiWeb-VM BYOL licenses specify the size of the virtual appliance that can be deployed. It is not possible to import a license to a virtual machine with a greater number of vCPUs than specified in the license.

 

Related articles:
Technical Tip: How to upgrade the FortiWeb-VM license for more vCPUs 
Troubleshooting Tip: Unable to connect to FDS servers