Fortigate 60F HA, tokens users activate error

[dcortes]

I have a fortigate 60F in HA, I see the tokens, but when I want to assign them to users a message appears informing that the device is not registered, but if it is, the OS is 7.2.11 1740, The error appears when I want to send the email to the user

[Toshi_Esumi]

@Markus_M I didn't know about this new feature at least with 7.4.6. But the OP has 7.2.11 running so it probably doesn't work until they're upgraded to 7.4.6 or above.

But what is exactly the new feature doc is talking about "cannot be manged":
"The vSN is registered in Asset Management with service entitlement. The individual FortiGates cannot be managed."
Also can we get the vSN retrospectively for two of those F-series models purchased separately and formed in HA then ungraded to 7.4.8?
Then, are any G-series models covered as well?

Toshi

[Toshi_Esumi]

Actually it's covered even with 7.2.9 or above. So it should work @dcortes if it's applied to the vSN.

Toshi

[dcortes]

The strange thing is that the version is 7.2.11, and the registration has been done with the vSN which is the one ending in 664

[Markus_M]

Try with the debug here:
diag debug console timestamp enable
diag debug app forticldd -1
diag debug app alert -1
diag fortitoken debug enable
diag debug enable
<assign a token>
As you said you already have the tokens visible, the registration has worked (unless it is the free 2 trial tokens only).
Above contract information from docs page is only valid if this FortiGate cluster is registered with such a single contract. It would appear with a "HA" serial number, like FG60FHA ... in FortiCare. 

[Toshi_Esumi]

Or, before trying debugging, I would try 1) delete those failed token entry, 2) re-activate/install the license, then try activating a token for a user.
re-activation/installation wouldn't affect already-active user's tokens.

Toshi

[dcortes]

I will try it and let you know if it has been solved, thank you

[Markus_M]

Your FortiCare entry will only have a single entry with that vSN (that is something like FG60FHA ...). The individual serial numbers, so the ones printed on the label/get sys stat) would not appear there with contract information or at max with limited version.
For the other questions, please check with your Fortinet Sales Representative, I have no idea about contracts etc. - no CLI there :)