Subscription-based VDOM license for FortiGate-VM S-series 7.0.2

The FortiGate-VM S-series licensing now supports subscription-based virtual domain (VDOM) licensing, using the new stackable subscription-based SKU.

The following describes the process for purchasing and applying the subscription-based VDOM license with FortiGate-VM S-series. The following assumes that the FortiGate-VM with the S-series license applied can connect to FortiGuard:

1. Purchase the VDOM subscription license (SKU FC1-10-FGVVS-498-02-DD). This license adds five VDOMs to a FortiGate-VM S-series running FortiOS 7.0.1 or a later version. You can stack this SKU to add more VDOMs.
2. Register the VDOM subscription license to the FortiGate-VM S-series license:
   1. In FortiCloud Asset Management, go to Products > Product List.
   2. View the desired FortiGate-VM.
   3. In Registration, click Add Licenses.
   4. Complete the steps to register the VDOM subscription license.

   

3. FortiGate-VM retrieves the VDOM subscription license from FortiGuard. This can take up to two hours. Confirm that the FortiGate-VM has retrieved the license using the get system status command. The following shows example output when FortiOS has successfully retrieved the license:

   Version: FortiGate-VM64 v7.0.2,build0227,211006 (interim)
   Virus-DB: 88.05870(2021-08-23 08:59)
   Extended DB: 88.05870(2021-08-23 08:58)
   Extreme DB: 1.00000(2018-04-09 18:07)
   AV AI/ML Model: 2.00033(2021-07-29 11:18)
   IPS-DB: 6.00741(2015-12-01 02:30)
   IPS-ETDB: 6.00741(2015-12-01 02:30)
   APP-DB: 6.00741(2015-12-01 02:30)
   INDUSTRIAL-DB: 6.00741(2015-12-01 02:30)
   IPS Malicious URL Database: 1.00001(2015-01-01 01:01)
   Serial-Number: FGVMSLTM210...
   License Status: Valid
   License Expiration Date: 2022-08-20
   VM Resources: 1 CPU/2 allowed, 2007 MB RAM
   Log hard disk: Available
   Hostname: FortiGate-VM64
   Private Encryption: Disable
   Operation Mode: NAT
   Current virtual domain: root
   Max number of virtual domains: 6
   Virtual domains status: 1 in NAT mode, 0 in TP mode
   Virtual domain configuration: disable
   FIPS-CC mode: disable
   Current HA mode: standalone
   Branch point: 0227
   Release Version Information: interim
   FortiOS x86-64: Yes
   System time: Thu Oct  7 16:16:19 2021
   Last reboot reason: warm reboot

   You can also use the diagnose debug vm-print-license. The following shows example output for this command:

   SerialNumber: FGVMSLTM210...
   CreateDate: Thu Aug 19 06:27:38 2021
   License expires: Sat Aug 20 17:00:00 2022
   Key: yes
   Cert: yes
   Key2: yes
   Cert2: yes
   Model: SL (18)
   CPU: 2 (FDS:2)
   MEM: 2147483647
   VDOM license:
     permanent: 1
     subscription: 5
     expires: Wed Oct 20 17:00:00 2021

4. Enable multiple VDOMs:

   config system global

   set vdom-mode multi-vdom

   end

5. Use the following commands to debug the configuration:

   diagnose debug application update -1

   diagnose debug enable

   execute update-now

   The following shows the example output:

   upd_status_extract_contract_info[1104]-Extracting contract...(SerialNumber=FGVMSLTM210...|Contract=AVDB-1-06-20220821:0:1:1:0*AVEN-1-06-20220821:0:1:1:0*NIDS-1-06-20220821:0:1:1:0*SPRT-1-20-20220821:0:1:1:0*ISSS-1-06-20220821:0:1:1:0*SPAM-1-06-20220821:0:1:1:0*SWNC-1-06-20220821:0:1:1:0*SWNM-1-06-20220821:0:1:1:0*SWNO-1-06-20220821:0:1:1:0*VMLS-1-06-20220821:0:2:2:0*IPMC-1-06-20220821:0:1:1:0*IOTH-1-06-20220821:0:1:1:0*FAZC-1-06-20220821:0:1:1:0*FGSA-1-06-20220821:0:1:1:0*FMGC-1-06-20220821:0:1:1:0*FMWR-1-06-20220821:0:1:1:0*FRVS-1-06-20220821:0:1:1:0*FURL-1-06-20220821:0:1:1:0*ZHVO-1-06-20220821:0:1:1:0*VDOM-1-06-20211021:0:5:5:0*