config system device-upgrade

Independent upgrades for managed devices.

config system device-upgrade
    Description: Independent upgrades for managed devices.
    edit <serial>
        set device-type [fortigate|fortiswitch|...]
        set failure-reason [none|internal|...]
        set ha-reboot-controller {string}
        config known-ha-members
            Description: Known members of the HA cluster. If a member is missing at upgrade time, the upgrade will be cancelled.
            edit <serial>
            next
        end
        set maximum-minutes {integer}
        set setup-time {user}
        set status [disabled|initialized|...]
        set time {user}
        set timing [immediate|scheduled]
        set upgrade-path {user}
    next
end

config system device-upgrade

Parameter

Description

Type

Size

Default

device-type

Fortinet device type.

option

fortigate

Option	Description
fortigate	This device is a FortiGate.
fortiswitch	This device is a FortiSwitch.
fortiap	This device is a FortiAP.
fortiextender	This device is a FortiExtender.

failure-reason

Upgrade failure reason.

option

none

Option	Description
none	No failure.
internal	An internal error occurred.
timeout	The upgrade timed out.
device-type-unsupported	The device type was not supported by the FortiGate.
download-failed	The image could not be downloaded.
device-missing	The device was disconnected from the FortiGate.
version-unavailable	An image matching the device and version could not be found.
staging-failed	The image could not be pushed to the device.
reboot-failed	The device could not be rebooted.
device-not-reconnected	The device did not reconnect after rebooting.
node-not-ready	A device in the Security Fabric tree was not ready.
no-final-confirmation	The coordinating FortiGate did not confirm the upgrade.
no-confirmation-query	A downstream FortiGate did not initiate final confirmation.
config-error-log-nonempty	Configuration errors encountered during the upgrade.
csf-tree-not-supported	The Security Fabric is disabled on the root FortiGate
node-failed	A device in the Security Fabric tree failed.

ha-reboot-controller

Serial number of the FortiGate unit that will control the reboot process for the federated upgrade of the HA cluster.

string

Maximum length: 79

maximum-minutes

Maximum number of minutes to allow for immediate upgrade preparation.

integer

Minimum value: 5 Maximum value: 10080

serial

Serial number of the node to include.

string

Maximum length: 79

setup-time

Upgrade preparation start time in UTC (hh:mm yyyy/mm/dd UTC).

user

Not Specified

status

Current status of the upgrade.

option

disabled

Option	Description
disabled	No federated upgrade has been configured.
initialized	The upgrade has been configured.
downloading	The image is downloading in preparation for the upgrade.
device-disconnected	The image downloads are complete, but one or more devices have disconnected.
ready	The image download finished and the upgrade is pending.
coordinating	The upgrade is coordinating with other running upgrades.
staging	The upgrade is confirmed and images are being staged.
final-check	The upgrade is ready and final checks are in progress.
upgrade-devices	The upgrade is ready and devices are being rebooted.
cancelled	The upgrade was cancelled due to the tree not being ready.
confirmed	The upgrade was confirmed and reboots are running.
done	The upgrade completed successfully.
failed	The upgrade failed due to a local issue.

time

Scheduled upgrade execution time in UTC (hh:mm yyyy/mm/dd UTC).

user

Not Specified

timing

Run immediately or at a scheduled time.

option

immediate

Option	Description
immediate	Begin the upgrade immediately.
scheduled	Begin the upgrade at a configured time.

upgrade-path

Fortinet OS image versions to upgrade through in major-minor-patch format, such as 7-0-4.

user

Not Specified

config known-ha-members

Parameter	Description	Type	Size	Default
serial	Serial number of HA member	string	Maximum length: 79

config system device-upgrade

Independent upgrades for managed devices.

config system device-upgrade
    Description: Independent upgrades for managed devices.
    edit <serial>
        set device-type [fortigate|fortiswitch|...]
        set failure-reason [none|internal|...]
        set ha-reboot-controller {string}
        config known-ha-members
            Description: Known members of the HA cluster. If a member is missing at upgrade time, the upgrade will be cancelled.
            edit <serial>
            next
        end
        set maximum-minutes {integer}
        set setup-time {user}
        set status [disabled|initialized|...]
        set time {user}
        set timing [immediate|scheduled]
        set upgrade-path {user}
    next
end

config system device-upgrade

Parameter

Description

Type

Size

Default

device-type

Fortinet device type.

option

fortigate

Option	Description
fortigate	This device is a FortiGate.
fortiswitch	This device is a FortiSwitch.
fortiap	This device is a FortiAP.
fortiextender	This device is a FortiExtender.

failure-reason

Upgrade failure reason.

option

none

Option	Description
none	No failure.
internal	An internal error occurred.
timeout	The upgrade timed out.
device-type-unsupported	The device type was not supported by the FortiGate.
download-failed	The image could not be downloaded.
device-missing	The device was disconnected from the FortiGate.
version-unavailable	An image matching the device and version could not be found.
staging-failed	The image could not be pushed to the device.
reboot-failed	The device could not be rebooted.
device-not-reconnected	The device did not reconnect after rebooting.
node-not-ready	A device in the Security Fabric tree was not ready.
no-final-confirmation	The coordinating FortiGate did not confirm the upgrade.
no-confirmation-query	A downstream FortiGate did not initiate final confirmation.
config-error-log-nonempty	Configuration errors encountered during the upgrade.
csf-tree-not-supported	The Security Fabric is disabled on the root FortiGate
node-failed	A device in the Security Fabric tree failed.

ha-reboot-controller

Serial number of the FortiGate unit that will control the reboot process for the federated upgrade of the HA cluster.

string

Maximum length: 79

maximum-minutes

Maximum number of minutes to allow for immediate upgrade preparation.

integer

Minimum value: 5 Maximum value: 10080

serial

Serial number of the node to include.

string

Maximum length: 79

setup-time

Upgrade preparation start time in UTC (hh:mm yyyy/mm/dd UTC).

user

Not Specified

status

Current status of the upgrade.

option

disabled

Option	Description
disabled	No federated upgrade has been configured.
initialized	The upgrade has been configured.
downloading	The image is downloading in preparation for the upgrade.
device-disconnected	The image downloads are complete, but one or more devices have disconnected.
ready	The image download finished and the upgrade is pending.
coordinating	The upgrade is coordinating with other running upgrades.
staging	The upgrade is confirmed and images are being staged.
final-check	The upgrade is ready and final checks are in progress.
upgrade-devices	The upgrade is ready and devices are being rebooted.
cancelled	The upgrade was cancelled due to the tree not being ready.
confirmed	The upgrade was confirmed and reboots are running.
done	The upgrade completed successfully.
failed	The upgrade failed due to a local issue.

time

Scheduled upgrade execution time in UTC (hh:mm yyyy/mm/dd UTC).

user

Not Specified

timing

Run immediately or at a scheduled time.

option

immediate

Option	Description
immediate	Begin the upgrade immediately.
scheduled	Begin the upgrade at a configured time.

upgrade-path

Fortinet OS image versions to upgrade through in major-minor-patch format, such as 7-0-4.

user

Not Specified

config known-ha-members

Parameter	Description	Type	Size	Default
serial	Serial number of HA member	string	Maximum length: 79

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

CLI Reference

config system device-upgrade

config system device-upgrade

config system device-upgrade

config known-ha-members

config system device-upgrade

config system device-upgrade

config system device-upgrade

config known-ha-members