Connecting a FortiAP to FortiSASE using FortiZTP

This section requires the FortiAP device to run a supported firmware version. See SIA for FortiAP site-based remote users. If the FortiAP device runs an unsupported version, then it must be upgraded to a supported version first. See Upgrading to a supported FortiAP firmware version using alternative connection methods.

The following configuration workflow is required for connecting a FortiAP to FortiSASE:

1. Register FortiAP and FortiSASE license on FortiCloud.
2. Provision a FortiAP to FortiSASE using FortiZTP.

To register FortiAP and FortiSASE license on FortiCloud:

1. Sign in to your FortiCloud account.
2. Go to Products and click Register More.
3. In the Register Product dialog, in the Registration Code field, enter the FortiAP serial number and follow the dialogs to complete registering it. You require physical access to the FortiAP device because registration requires the cloud key on the back label. See Registering assets.
4. Repeat step 3 with the FortiSASE Subscription License registration code.
5. Go to Products and Product List to confirm that you registered the FortiAP device. Click the FortiAP serial number. Ensure that Entitlement lists FortiSASE Subscription.

   

To provision a FortiAP to FortiSASE using FortiZTP:

1. In FortiSASE, click Services. Under Cloud Services, click FortiZTP. You perform the remaining steps in FortiZTP.
2. In FortiZTP, click Setting.
3. On the FortiAP tab, ensure that FortiSASE is enabled.

   

4. Click UPDATE.
5. On the UNPROVISIONED tab, do the following:
   • To provision a single FortiAP, click Provision.
   • To provision multiple FortiAPs, select the checkboxes for the desired FortiAPs, then click PROVISION.
6. Under TARGET LOCATION in the Provision devices dialog, select FortiSASE. Only options that you have configured in Provisioning Settings appear in this dialog.
7. Click PROVISION NOW.
8. In the prompt that mentions the provision process started for devices, click OK.