Installing VM licenses on managed devices

You can install VM licenses on managed FortiGate and FortiWeb VMs using the FortiManager Device Manager, enabling management and replacement of license files without having to directly access the VM.

FortiManager retrieves the license information from a provided license file or FortiFlex configuration, and then provides the license to the managed device. Because the managed device gets the license information directly from FortiManager, this feature can be used to install licenses on VMs that are operating in an air-gapped environment.

The device manager supports VM license installation with two options:

• Installing licenses using a BYOL license file
• Installing licenses using the FortiFlex connector

Installing licenses using a BYOL license file

To install a FortiGate BYOL VM license file:

1. Go to Device Manager > Device & Groups.

2. In the toolbar, make sure Table View is selected.

3. Select a managed device from the table, and right-click on it to view the context menu.

4. Select Install VM License. The Install VM License wizard opens.
   Select License File, and drag-and-drop your license file into the Upload License File field.
   

5. You can preview the license file selected, and click OK.

Installing licenses using the FortiFlex connector

When you are installing VM licenses using a FortiFlex connector, you must first configure the FortiFlex connector as well as created a Configuration and Flex Entitlement for the device on FortiFlex. See Creating FortiFlex connectors and the FortiFlex documentation.

To install a FortiGate license using the FortiFlex connector:

1. Go to Device Manager > Device & Groups.

2. In the toolbar, make sure Table View is selected.

3. Select a managed device from the table, and right-click on it to view the context menu.

4. Select Install VM License.The Install VM License wizard opens.
   

5. Select FortiFlex Connector, and select the previously configured FortiFlex connector in the dropdown menu.

6. Select a FortiFlex Configuration. Available configurations are pulled automatically from FortiFlex using the selected connector.

7. Click OK.

After a license has been installed onto the device using FortiManager, the device will reboot to complete the installation.

To install a FortiWeb license using the FortiFlex connector:

1. Configure the FortiManager update service on port 443.
   For example:
   

   config system interface

   edit <port>

   set ip <ip & netmask>

   set serviceaccess fgtupdates webfilter-antispam

   set update-service-ip <ip & netmask>

   next

   end

2. Go to Device Manager > Device & Groups.

3. In the toolbar, make sure Table View is selected.

4. Select a managed device from the table, and right-click on it to view the context menu.

5. Select Install VM License.The Install VM License wizard opens.
   

6. Select FortiFlex Connector, and select the previously configured FortiFlex connector in the dropdown menu.

7. Select a FortiFlex Configuration. Available configurations are pulled automatically from FortiFlex using the selected connector.

8. Click OK.

After a license has been installed onto the device using FortiManager, the device will reboot to complete the installation.