Fortinet black logo

Upgrading the firmware for an operating cluster

Upgrading the firmware for an operating cluster

You can upgrade the firmware of an operating cluster using the GUI or CLI of the primary unit.

Note

Starting with FortiManager 7.0.0, FortiAnalyzer Features must be disabled when FortiManager HA is enabled. If you have FortiAnalyzer Features enabled on FortiManager, FortiAnalyzer Features will be automatically disabled during upgrade to FortiManager to 7.0.0 or later.

Similar to upgrading the firmware of a standalone unit, normal operations are temporarily interrupted during the cluster firmware upgrade. Therefore, you should upgrade the firmware during a maintenance window.

To upgrade an HA cluster:
  1. Log into the GUI of the primary unit using the admin administrator account.
  2. Upgrade the primary unit firmware. The upgrade is automatically synchronized between the primary device and backup devices.

    It is recommended to view the console log output during upgrade. See Checking FortiManager log output.

Administrators may not be able to connect to the GUI until the upgrade synchronization process is completed. During the upgrade, SSH or telnet connections to the CLI may also be slow. You can still use the console to connect to the CLI of the primary device.

Upgrading the firmware for an operating cluster

You can upgrade the firmware of an operating cluster using the GUI or CLI of the primary unit.

Note

Starting with FortiManager 7.0.0, FortiAnalyzer Features must be disabled when FortiManager HA is enabled. If you have FortiAnalyzer Features enabled on FortiManager, FortiAnalyzer Features will be automatically disabled during upgrade to FortiManager to 7.0.0 or later.

Similar to upgrading the firmware of a standalone unit, normal operations are temporarily interrupted during the cluster firmware upgrade. Therefore, you should upgrade the firmware during a maintenance window.

To upgrade an HA cluster:
  1. Log into the GUI of the primary unit using the admin administrator account.
  2. Upgrade the primary unit firmware. The upgrade is automatically synchronized between the primary device and backup devices.

    It is recommended to view the console log output during upgrade. See Checking FortiManager log output.

Administrators may not be able to connect to the GUI until the upgrade synchronization process is completed. During the upgrade, SSH or telnet connections to the CLI may also be slow. You can still use the console to connect to the CLI of the primary device.