General Discussions

Expand all | Collapse all

HA cluster licensing

Jump to Best Answer
  • 1.  HA cluster licensing

    Posted Apr 26, 2021 02:14 PM

    I have a HA cluster of 100E model and I want to renew the license on it (it will soon expire). We have purchased two licenses with same features in order to apply on these two fortigates separately.

    Is it ok if I apply the license on the master first, and then change the prio and make the slave, a master, and then reboot. After that apply the license on the other fortigate?

    thanks in advance

  • 2.  RE: HA cluster licensing

    Posted Apr 27, 2021 08:15 AM

    A cluster normally sync's the license.  That is at least my experience.  All the clusters I am working with retrieve their licensing directly from the FortiGuard portal.


  • 3.  RE: HA cluster licensing
    Best Answer

    Posted Apr 28, 2021 12:17 PM

    After your licensing renew, Fortinet will update their servers with new expiration dates and licensed services. When your FortiGate checks against FortiGuard server, it will retrieve those new values automatically. You dont have to do nothing.

    If you want to force an update: execute update-now

    If you want to be sure that everything is correct, you can run a debug and see exactly what FortiGuard is replying:

    diagnose debug application update -1
    diagnose debug enable
    execute update-now

    You will see the contract for both members.

    More info: Verifying FortiGuard licenses and troubleshooting

    If you dont have Internet connection and need to apply the license file manually, just reset the uptime and the slave member will assume as master:

    diag sys ha reset-uptime