Description
This article explains how to enable encryption to LENC devices when these are in an HA cluster.
Scope
FortiGate, HA cluster.
Solution
The first step is to register the license in the Fortinet Customer Service and Support web portal at support.fortinet.com. This will generate the license key. This step must be repeated for the all members in the cluster.
The license keys must then be entered into each device.
- Using the CLI on the master device.
execute crypto-license <high-encryption-key>
- Change in the CLI to the slave device, where <id> is the ID for the other member of the cluster:
exec ha manage <id>
- Enter the key in the slave device.
execute crypto-license <high-encryption-key>
- (Optional) In order to use deep inspection with strong encryption certificates with more than 512 bites, renew all default certificates.
