Updating the system firmware

To take advantage of the latest features and fixes, you can update FortiManager firmware. From the System Settings module in FortiManager, you can access firmware images on FortiGuard and update FortiManager. Alternately you can manually download the firmware image from the Customer Service & Support site, and then upload the image to FortiManager.

For information about upgrading your FortiManager device, see the FortiManager Upgrade Guide, or contact Fortinet Customer Service & Support.

Back up the configuration and database before changing the firmware of FortiManager. Changing the firmware to an older or incompatible version may reset the configuration and database to the default values for that firmware version, resulting in data loss. For information on backing up the configuration, see Backing up the system.

Before you can download firmware updates for FortiManager, you must first register your FortiManager unit with Customer Service & Support. For details, go to https://support.fortinet.com/ or contact Customer Service & Support.

Installing firmware replaces the current network vulnerability management engine with the version included with the firmware release that you are installing. After you install the new firmware, make sure that your vulnerability definitions are up-to-date. For more information, see FortiGuard.

After updating FortiManager firmware, you should update the following items in the following order:

1. Update firmware for managed FortiGates.
2. Upgrade the ADOM version.
3. Upgrade the global ADOM version.

To update FortiManager firmware using FortiGuard:

1. Go to System Settings.
2. In the System Information widget, beside Firmware Version, click Update Firmware.

   The Firmware Management dialog box opens.

   

3. Before upgrading your firmware, you can choose to enable or disable Backup Configuration. When this setting is enabled, you will automatically download a backup copy of your FortiManager configuration when performing a firmware upgrade.

   If you want to encrypt the backup file, enable Encryption, then type and confirm the password you want to use. The password can be a maximum of 63 characters.

4. From the FortiGuard Firmware box, select the version of FortiManager for the upgrade, and click OK.

   The FortiGuard Firmware box displays all FortiManager firmware images available for upgrade. A green checkmark displays beside the recommended image for FortiManager upgrade.

   

   If you select an image without a green checkmark, a confirmation dialog box is displayed. Click OK to continue.

   

   FortiManager downloads the firmware image from FortiGuard.

   

   FortiManager uses the downloaded image to update its firmware, and then restarts.

   

   After FortiManager restarts, the upgrade is complete.

   

To manually update FortiManager firmware:

1. Download the firmware (the .out file) from the Customer Service & Support website, https://support.fortinet.com/.
2. Go to System Settings > Dashboard.
3. In the System Information widget, in the Firmware Version field, click Upgrade Firmware. The Firmware Upload dialog box opens.

4. Before upgrading your firmware, you can choose to enable or disable Backup Configuration. When this setting is enabled, you will automatically download a backup copy of your FortiManager configuration when performing a firmware upgrade.

   If you want to encrypt the backup file, enable Encryption, then type and confirm the password you want to use. The password can be a maximum of 63 characters.

5. Drag and drop the file onto the dialog box, or click Browse to locate the firmware package (.out file) that you downloaded from the Customer Service & Support portal and then click Open.
6. Click OK. Your device will upload the firmware image and you will receive a confirmation message noting that the upgrade was successful.

   Optionally, you can upgrade firmware stored on an FTP or TFTP server using the following CLI command: execute restore image {ftp | tftp} <file path to server> <IP of server> <username on server> <password> For more information, see the FortiManager CLI Reference.

7. Refresh the browser and log back into the device.
8. Launch the Device Manager module and make sure that all formerly added devices are still listed.
9. Launch other functional modules and make sure they work properly.

You can also update FortiManager firmware images by using the FortiGuard module. For more information, see Firmware images.