[Update] Button Missing On Dashboard

[SecurityPlus]

Working to update a FortiWiFi 60D. It is currently on FortiOS 5.4.5. In the System Information section on the Dashboard it says:

Firmware Version: v5.4.5,build1138 (GA).

There is no [Update] Button. In the License information it says that Registration, IPS, AntiVirus, etc. expires 2018-03-30.

Any ideas why the [Update] link is missing? Any suggestions on updating the FortiOS without the button?

Thanks,

[Jordan_Thompson_FTNT · Accepted solution]

Are you using a restricted administrator profile (no write permission to "maintenance" or "system" groups)? Or is the device managed by FortiManager?

[rwpatterson]

Also is the browser & version accepted by the FortiOS version? (see release notes for compatibility)

[SecurityPlus]

Concerning the browser I have tried an updated version of Firefox and IE 11. Same story in both cases.

Concerning Jordan's question. Somehow there are two administrators on this FortiGate, both are prof_admin. There was an admin user with super_admin privileges but this appears to have been disabled. It sounds as though this could be the problem. What is the solution to this? A trip on-site would take about 1 hour of driving.

[Jordan_Thompson_FTNT]

SecurityPlus wrote:

Concerning Jordan's question. Somehow there are two administrators on this FortiGate, both are prof_admin. There was an admin user with super_admin privileges but this appears to have been disabled. It sounds as though this could be the problem. What is the solution to this? A trip on-site would take about 1 hour of driving.

An administrator with super_admin permissions is required, as other users do not have access to update the firmware.

You could try via the CLI, although I expect the result would be the same (unless you are not using VDOMs).

[SecurityPlus]

No VDOMs are in use.

When you say try via the cli, what do you think that we could try via the CLI?

I know that there is a way to reset the admin password via the maintainer account. This to my knowledge has not been disabled. Neither of the two users are "admin" and neither are super_admin's. What do you think accessing the maintainer to reset the password will do? If all we do is reset a prof_admin account from "username" to "admin" and reset the password, we still won't be able to update the firmware. If this reactivates the admin account with role of super_admin and lets us reset the password we will be all set.

[rwpatterson]

Log in with the maintainer account, then you can change the role of the other two admins or reset the password and enable the single super_admin account. Either way, it will raise your privilege.

[SecurityPlus]

Great. Thanks. Will do!

[SecurityPlus]

Onsite at the firewall. Connected console cable. Started Putty. Rebooted firewall. During boot I could see the firewall boot progress in Putty terminal. When I tried to enter maintainer as username no keyboard input is detected in Putty terminal. Pressing Enter does nothing.

To get back to a super_admin account we modified the configuration backup resetting the admin password and restored to this configuration file. We were then able to log in as super_admin again.

After this we were able to update the firmware.

We still can not log in using the Putty terminal. Still can't type the user name or use the Enter key. Any idea why this would be?

[SMabille]

Are you using the Fortinet cable? (http://kb.fortinet.com/kb/viewContent.do?externalId=11344).

Some Cisco cable (not sure which model) the Tx is not on the same pin (2 to 6 instead of 3 to 6), explaining why you can't send anything.