Appendix A - FortiFlex licensing

FortiManager Cloud can be purchased with FortiFlex (pre-paid and post-paid) licenses.

When users deploy a FortiManager Cloud instance with a FortiFlex entitled FortiManager Cloud serial number, the FortiManager Cloud instance functions in the same way as a normal FortiManager Cloud instance.

The new serial number patterns that identify FortiFlex entitled FortiManager Cloud are as follows:

• FMGCPR: FortiManager pre-paid FortiFlex entitlement

• FMGCPO: FortiManager post-paid FortiFlex entitlement

After users have purchased a FortiFlex license for the FortiFlex service, they can add FortiManager Cloud using the FortiFlex portal. For more information, see the FortiFlex Administration Guide.

FortiFlex entitled FortiManager Cloud also supports the FortiAI add on service.

Please note that if your FortiCloud account has both a FortiFlex FortiManager Cloud entitlement and regular FortiManager Cloud entitlement valid at the same time, FortiManager Cloud will give priority to the FortiFlex serial number for instance provisioning.

License migration

Users can migrate their FortiManager Cloud instance between license types (for example, from a FortiFlex to normal FortiManager Cloud serial number, or from a normal FortiManager Cloud serial number to a FortiFlex serial number).

To migrate your FortiManager license:

1. Add your new serial number to your managed FortiGate(s). On FortiManager Cloud 7.6 and later, you can use the following command to ensure that the FortiGate(s) can identify the new serial number and can connect to it for central management after migration:

   exec fgfm migrate-license {new serial number}
   exec fgfm verify-migrate-license

   These commands are not supported on FortiManager Cloud 7.4 and earlier versions. When migrating the license of FortiManager Cloud 7.4 and earlier, you can request to switch your license without first running the command. If you experience any connection issues after switching serial numbers, you can reconnect the FortiGate to FortiManager Cloud or contact Fortinet support for additional assistance.

2. After the command has been executed successfully, confirm that the FortiGate displays two serial numbers in its central-management settings using the get system central-management command.

   get sys central-management
   mode                : normal
   type                : fortimanager
   schedule-config-restore: enable
   schedule-script-restore: enable
   allow-push-configuration: enable
   allow-push-firmware : enable
   allow-remote-firmware-upgrade: enable
   allow-monitor       : enable
   serial-number       : "FMGCPOT000000002" "FMGVC00000000003"
   fmg                 : "fortimanager.forticloud.com"
   fmg-source-ip       : 0.0.0.0
   fmg-source-ip6      : ::
   local-cert          :
   ca-cert             :
   vdom                : root
   server-list:
       == [ 1 ]
       id:     1       server-type: update rating
   fmg-update-port     : 443
   include-default-servers: enable
   enc-algorithm       : high
   interface-select-method: auto
   
   

3. Contact the Fortinet Support team to begin the migration. The migration process is handled by the cloud portal backend team.

   After the migration is completed, your FortiManager Cloud instance will show the migrated serial number, and the expiration date and seat number is synchronized to the new serial number entitlement.
   Your managed FortiGate(s) will connect to your FortiManager Cloud instance using the new serial number.

   get sys central-management
   mode                : normal
   type                : fortimanager
   schedule-config-restore: enable
   schedule-script-restore: enable
   allow-push-configuration: enable
   allow-push-firmware : enable
   allow-remote-firmware-upgrade: enable
   allow-monitor       : enable
   serial-number       : "FMGVC00000000003"
   fmg                 : "fortimanager.forticloud.com"
   fmg-source-ip       : 0.0.0.0
   fmg-source-ip6      : ::
   local-cert          :
   ca-cert             :
   vdom                : root
   server-list:
       == [ 1 ]
       id:     1       server-type: update rating
   fmg-update-port     : 443
   include-default-servers: enable
   enc-algorithm       : high
   interface-select-method: auto