failed to install FortiClientInstallerService service on EMS rollout

[ForgetItNet]

Hi all,

We're trialling on premise EMS and I'm struggling to get the FortiClient installed. I've got 2 domain joined laptops and I've made sure that all of the ports are open in the Firewalls (and I've tried it with the Firewalls off) and made sure that the EMS server can reach the required folders etc and the laptops back to the EMS server along with making sure the credentials are correct (and i've tried local admin creds) but it keeps failing. It does create the FortiEMSinstaller_logs folder along with the FortiEMSinstaller folder on the laptops and in the logs the only error I can see is this:

[2025-05-28 15:57:59.5684027 UTC+01:00] [ info] [service:0 ] [27800:13432] [ 154] [WinMain] installing FortiClientInstallerService service
[2025-05-28 15:57:59.5687825 UTC+01:00] [ info] [service:0 ] [27800:13432] [ 34] [orchestrator::service::install_service] service is installed - replacing it
[2025-05-28 15:58:00.6898569 UTC+01:00] [ error] [service:0 ] [27800:13432] [ 50] [orchestrator::service::install_service] failed to install FortiClientInstallerService service

I can't seem to find any posts about this error and so I'm a little stuck but I have read that the EMS doesn't support initial roll out, it only supports upgrades so I'm not sure whether to take this that there's no "technical support" on the roll out due to a lot of different variables in peoples networks OR if it means I have to install the "first" install myself and then EMS will take over ?

If anyone can clarify this last point at least then I know it "should" work this way rather than me trying to fix something that's not going to work anyway ?

Thanks in advance.

[xshkurti]

If you have a FortiEMS backup, you can fresh install a new instance of FortiEMS and restore database and config:

Backing up and restoring the database | FortiClient 6.0.3 | Fortinet Document Library

[ForgetItNet]

Thanks, so should EMS be able to install FortiClient to Windows machines initially (i.e. when they've never had any Fortinet product on them) ?