Lost Web GUI after upgrade

[#1]

I upgraded my FortiAnalyzer from MR6P1 to MR6P3 but then I lost the web interface. Is there a console command to re-enable it? UPDATE: The following did not work: config system interface edit port1 set allowaccess https end

[rwpatterson]

This is a popular thread, but usually only after upgrading to MR7. Search through the threads. Has something to do with the certificate.

[abelio]

Hi, from FAZ MR7 release notes pdf files: Upon upgrading from v3.00 MR7 B0717 GA Release or B0718 Patch Release 1 to MR7 B0726 Patch Release 3, the system may become inaccessible from the web UI as a result of the new build being written incorrectly to the flash card. This behaviour is limited to the FA-100B, FA-2000, FA-2000A, FA-4000, and FA-4000A. When this problem happens, the workarounds are: 1. Log in to CLI and run the command " execute admin-cert self-sign" , or 2. Reload the new build using TFTP from the BIOS menu and then restore the configuration file either from the CLI or web UI.

[#4]

It looks like the " execute admin-cert self-sign" command isn' t available in MR6. If I type in " execute ?" , the admin-cert command is not in the list. How do I access the BIOS menu?

[abelio]

It looks like the " execute admin-cert self-sign" command isn' t available in MR6. If I type in " execute ?" , the admin-cert command is not in the list.

indeed, the post referred to MR7 version; there' s no such command for MR6 However, I' ve read your signature and you' re talking about FAZ-100B Re-read the MR6 p3 release notes and note the following: [Upgrade of FA-100B] For FortiAnalyzer platform FA-100B, upon upgrading from v3.00 MR6 B0648 Patch Release 2 to MR6 B0650 Patch Release 3, the system may become inaccessible from the web UI as a result of the new build being written incorrectly to the flash card. To avoid this problem, an upgrade helper program has been provided for the FA-100B running MR6 B0648 Patch Release 2. 1.Ensure the FA-100B device is running FortiAnalyzer firmware v3.00 B0648 Patch Release 2. 2.Backup the configuration file. 3.Using the web UI, upload the upgrade helper program " FLG_100B-v300-build0648-UPDATE-smit.out" . 4.Once the update is complete, upgrade the FA-100B to MR6 B0650 Patch Release 3. So, your situation seems to be described there.

How do I access the BIOS menu?

at boot time, connected with a console cable, you have a few seconds to break the normal boot procedure and enter in the menu regards,

[#6]

Success! Thanks abelio!

[#7]

This same thing has happened to me except I wasnt upgrading from MR6p2 to mr6p3, I was upgrading from MR6 to MR6p3. The release notes dont say to go MR6 ->MR6P2->Upgrade Helper->MR6P3 but apparently i should have done that. I presume now that my only option to upload a fresh firmware via tftp? By the way SSH access initially worked but that has stopped working as well, I am able to log in but I immediately get my connection dropped.

[venki_me]

Hi all, Update patches one by one don' t skip patches. if you skip a patch probably u will lose logs. ex. you have v3.00 MR6 B0648 and wanted to upgrade to v3.00 MR6 B0650. First update your box with v3.00 MR6 B0649 then do with v3.00 MR6 B0650. If you miss 0649 you will be .........