Autoupgrade firmware for expired support

[chrisgdg]

My Fortigate device is out of support, and is currently running 7.4.8.

It has started to attempt upgrading to the latest patch (7.4.9) as per the new upgrade mechanism:

https://docs.fortinet.com/document/fortigate/7.4.0/new-features/320693/automatic-firmware-upgrades-f...

However it keeps failing and sending emails that it has failed.

logdesc="A federated upgrade could not be completed by the root FortiGate" msg="Federated upgrade failed after reaching state downloading" reason="download failed"

Its sent that one a few times, is now also sendning emails regarding the schedule being changed:

logdesc="Automatic firmware upgrade schedule changed" user="system" msg="System patch-level auto-upgrade new image installation (re)scheduled to between local time Thu Oct 23 01:42:23 2025 and local time Thu Oct 23 04:00:00 2025. This installation is forced and cannot be cancelled."

Does anyone know how I can fix it so it is abel to upgrade it, or to disable the upgrades that keep erroring?

Many Thanks,

Chris

[funkylicious]

hi,

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-cancel-FortiGate-upgrade-using-Fabr...

try doing a execute federated-upgrade cancel , then 

config system federated-upgrade

set status disabled

end

[chrisgdg]

Thanks.

The cancel command fails stating "The existing upgrades cannot be cancelled"

[funkylicious]

try execute auto-upgrade delay-installation and then cancel.

[chrisgdg]

tried that, the cancel still reports that existing upgrades cannot be cancelled

[Toshi_Esumi]

I would try disabling upgrade first.
<if managed by FMG>
config sys central-management
  set allow-pur-firmware disable
end
<for all>
config sys fortiguard
  set auto-firmware-upgrade disable

  set gui-prompt-auto-upgrade disable
end

If it still rejects because a schedule exists, I would try manually upgrade it to 7.4.9 that can be done without a valid license. Then if necessary, swap back the boot partition to the previous one with 7.4.8 image&config later.

Toshi

[chrisgdg]

Unfortunately that doesn't help. It also appears that in 7.4.8 they now disable the manual upgrade option if you are not in support, nor can I find the download for it anyway :(

[syordanov]

Dear chrisgdg,

It's expected behavior. If the device has expired support contract or EOF starting from FortiOS 7.4.8 GA, an automatic firmware upgrade is forced once there is a new GA release. 

This upgraded can't be cancelled, it can be only postponed for 7 days , this can be done unlimited:

# execute auto-upgrade delay-installation.

Regards,

Fortinet

[chrisgdg]

Hi,

I don't want to have to keep extending it, I'm happy for the firmware to be applied, but it errors when downloading automatically:

logdesc="A federated upgrade could not be completed by the root FortiGate" msg="Federated upgrade failed after reaching state downloading" reason="download failed"