Migration from 60C to 60E

[aseques]

I have several 60C firewalls that I want to upgrade to 60E, I would normally upgrade the origin firewall to a compatible version and move a backup of the configuration.

In this case I can't upgrade the 60C to 5.4 neither downgrade the 60E to 5.2. What I tried so far:

[ul]

I used a backup of the 60C (5.2 version) and changed the first line so the firewall would accept it as a backup (this usually works when restoring across models)

Unfortunately it synced the config (apparently at least), but I can't login using the credentials I had, neither use the blank password from the default config.[/ul]

The message in the console doesn't give any special error (other than the startup log)

The system is going down NOW !! Please stand by while rebooting the system. Restarting system. FortiGate-60E (16:57-06.07.2016) Ver:05000009 Serial number: FGT60E4QXXXXXXX CPU: 1000MHz Total RAM: 2 GB Initializing boot device... Initializing MAC... nplite#0 Please wait for OS to boot, or press any key to display configuration menu...... Booting OS... Reading boot image... 2622723 bytes. Initializing firewall... System is starting... The config file may contain errors, Please see details by the command 'diagnose debug config-error-log read'

Did any of you find this issue? I tried with both 5.4.1 and 5.4.6 in case it would fix something. It seems that this might be related to a password hashing change, but I haven't found anything on the documentation.

[BADavis_FTNT]

There is no easy way to do what you are describing. Although it appears that there is only a letter change, you are trying to migrate to a different model of the device with a different hardware configuration.

2 articles that may be useful as far as the migration of the configuration goes:

http://cookbook.fortinet.com/sysadmins-notebook/supported-upgrade-paths-fortios/ 

http://cookbook.fortinet.com/transferring-configuration-file-one-model-another/

Something to help with the password issue:

http://cookbook.fortinet.com/resetting-a-lost-admin-password/

[loic]

why don't you use the forticonverter ?

https://www.fortinet.com/...ll/forticonverter.html

[aseques]

loic wrote:

why don't you use the forticonverter ?

https://www.fortinet.com/...ll/forticonverter.html

Never heard of it, I'll have a look, thanks

[aseques]

At the end the password not workin was my fault, I am using scp to backup the configurations, and I was using a readonly account, the problem is that those accounts can't read the admin password, so my backup file was incomplete, I just fixed that and the main password is working without issues.

I'll have to check if the other passwords are working or broken..