CLI for management extensions

You can use the CLI console to enable, disable, update, debug, and check the management extension.

To enable management extensions:

1. Enable the production registry:

   FMG-VM64 # config system docker

   (docker)# set status

   enable Enable production registry.

2. Enable the management application.

   (docker)# set

   status Enable and set registry.

   fortiauthenticator Enable/disable container.

   fortiportal Enable/disable container.

   fortisigconverter Enable/disable container.

   fortiwlm Enable/disable container.

   sdwancontroller Enable/disable container.

To disable management extensions:

config system docker

(docker)# get

(docker)# set {fortiportal|fortisigconverter|fortiwlm|sdwancontroller} disable

To update management extensions:

diagnose docker upgrade {fortiportal|fortisigconverter|fortiwlm|sdwancontroller}

To debug management extensions:

diagnose debug application docker

To clean up or check management extensions:

diagnose docker {cleanup|status}

To limit CPU and RAM resources for management extensions:

config system docker

(docker)# set cpu <integer> #Set the maximum % of CPU usage (10 - 50, default = 50).

(docker)# set mem <integer> #Set the maximum % of RAM usage (10 - 50, default = 50).

The CLI commands allow you to set the resource limit globally for all management extension applications. If management extension applications reach the limit of allocated FortiManager resource, a warning appears in the Alert Message Console widget.