Downloading a firmware image

Firmware images for all FortiGate units are available on the Fortinet Customer Service & Support website.

To download firmware:

1. Log into the support site with your user name and password.
2. Go to Support > Firmware Download.

   A list of Release Notes is shown. If you have not already done so, download and review the Release Notes for the firmware version that you are upgrading your FortiGate unit to.

3. Select the Download tab.

4. Navigate to the folder for the firmware version that you are upgrading to.
5. Find your device model on the list. FortiWiFi devices have file names that start with FWF.
6. Click HTTPS in the far right column to download the firmware image to your computer.

Firmware can also be downloaded using FTP, but as FTP is not an encrypted file transferring protocol, HTTPS downloading is recommended.

FortiOS image signing and verification

Official FortiOS firmware images are signed by the Fortinet CA. The BIOS checks the validity of an image when it is uploaded to the device. If the image is not signed by the Fortinet CA, warning messages appear in the GUI in several locations and in the CLI when the uploaded firmware fails the signature validation.

Warning message after an administrator logs in to the GUI:

Click I Understand the Risk to continue.

Sample GUI warnings

Dashboard > Status page:

Banner:

System > Firmware page:

Warning message after updating the firmware in the CLI:

# execute restore image tftp FGT_100F-v7-build0197-FORTINET.out 172.16.200.55
    This operation will replace the current firmware version!
    Do you want to continue? (y/n)y
    Please wait...
    Connect to tftp server 172.16.200.55 ...
    ############################################################################
    Get image from tftp server OK.
    Verifying the signature of the firmware image.
    ******WARNING: This firmware failed signature validation.******
    Fortinet cannot verify the authenticity of this firmware and therefore
    there may be a risk that the firmware contains code unknown to Fortinet.
    In short, Fortinet cannot validate the firmware and makes no warranties
    or representations concerning the firmware.
    Please continue only if you understand and are willing to accept the risks.
    Do you want to continue? (y/n)y

    Checking new firmware integrity ... pass
    Please wait for system to restart.

    Firmware upgrade in progress ...
    Done.