FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
pdelapena
Staff
Staff
Article Id 250429
Description

This article describes the error encountered while deploying a FortiGate KVM due to an inappropriate FortiGate KVM image. 

 

Upon configuring the WAN interface and the static route for Internet connectivity of the FortiGate KVM, it will be necessary to upload the license file that can be downloaded in the support portal, support.fortinet.com: Asset Management -> Products -> Product List -> FGVM serial number and select the 'License File Download'.

 

After uploading a valid license file for the VM, an error will appear if a wrong image has been mistakenly used.

This is regardless if the correct amount of vCPU and RAM have been specified for the FortiGate VM.

 

FortiGate VM License page.png

 

Further checking in the FortiGate CLI/serial console, the error: 'License invalid due to exceeding allowed 0 CPUs and 0 MB RAM.' will appear and the version used is FortiFirewall-VM64-KVM which is an incorrect image for the planned FortiGate VM to be provisioned. 

 

It will also show that the FortiGate VM's serial number is FGVM00UNLICENSED and will have a license status of 'No License'.

FGVM error.JPG

Scope FortiGate KVM.
Solution

Make sure that the correct image has been downloaded to be used to provision the FortiGate VM. Download the compressed file that contains the image in the links below :
https://support.fortinet.com/Download/VMImages.aspx: new and latest versions.
https://support.fortinet.com/Download/FirmwareImages.aspx: older versions,

In this case, it will be the compressed file that has the filename pattern below that I'll need to download and add on my instance.
FGT_VM64_KVM-vX.X.X.X-buildXXXX-FORTINET.out.kvm.zip


Note: This FortiGate VM was deployed in EVE-NG emulator via VMWare WorkStation. The filename may vary if you are using other VM platforms.

 

Once the KVM image has been loaded in the instance, repeat the FortiGate VM license upload process and it will now be possible to see the FortiGate VM successfully licensed and provisioned.

 

SuccessfulProvisioning.png

 

Related Document:

https://docs.fortinet.com/document/fortigate-private-cloud/7.2.0/kvm-administration-guide/388201

Contributors