Perpetual Endpoint License Upgrade

Step 1: Obtain New License Information

After additional licenses are purchased, an email is sent containing two document files with SKU’s and their registration codes. This email will be required to register the additional licenses.

• One document contains product SKU containing the additional licenses (LIC-FNAC).

• The other document contains the co-term support contract. This contract combines the existing licenses for the control Serial Number with the additional licenses to create a new total quantity.

Example: Adding 300 license to an existing PRO level license count of 400

SKU: LIC-FNAC-PRO-100
Units of License: 300

SKU: FC3-10-FNAC0-240-02-36
Units of Contract: 700 ß 400 existing + 300 purchased

If the "Units of Contract" value does not reflect the new total license count, do not proceed. Contact your sales representative to correct.

Step 2: Identify Serial Number with License Support

The Endpoint License Key is installed on the “managing” server. The remaining servers in multiple appliance deployments are installed with an Appliance (Base) License Key. See chart below to determine which product requires the Endpoint License Key.

Endpoint License Key

Deployment Configuration	Managing Server	Part Number
Standalone	CA Server	FNC-CAX-VM
Standalone with High Availability (HA)	Primary CA Server	FNC-CAX-VM
Multiple Independent Standalones	Each CA Server	FNC-CAX-VM
Multiple Independent with High Availability (HA)	Each Primary CA Server	FNC-CAX-VM
Distributed	Control Manager	FNC-MX-VM
Distributed with High Availability (HA)	Primary Control Manager	FNC-MX-VM

For more information on how licenses are distributed for each system configuration, see section License Distribution in Multiple Appliance Deployments in the Appendix of the Deployment Guide.

Identify the serial number of the appliance currently running with the existing endpoint license key. This information will be required to register the new licenses.

1. Login to the Customer Support Portal at http://Support.Fortinet.com

2. Under the Asset Management panel, click Product List.

   

3. Click View Options and select Show Entitlement and click Apply.

   

   The Support Type column should now display.

4. In the Search bar at the top of the view, type License Support. The resulting entries are the products with endpoint license keys.

5. To view the MAC address and UUID, click on the serial number.

6. Note the serial number of the appliance having the endpoint license upgraded.

Step 3: Register Licenses

Register the new license product SKU following the email instructions using the registration codes included in the instructions.

• Use the product serial number noted in previous step

• Use the support contract number that came with the license

Once registration of the new licenses and license support is complete, click on the appliance serial number again. Under Entitlement, License Support should be listed.

Under License & Key, the endpoint license type should be listed along with the number of concurrent licenses.

If assistance is needed with the registration process, contact Customer Service.

Step 4: Download New Key

1. Under Key, select Get the License File next to FortiNAC License File Download to download the key file. File will have a .lic extension.

   Important: Network Sentry Key File is only to be used for Network Sentry branded appliances.

   

2. Download the license key file (<serial number>.lic) and save to a folder. This will be used in the next section.

   Important: This license key can only be applied to the appliance owning the serial number in the .lic filename.

3. Logout of Customer Support Portal.

Step 5: Install New Key

Install the key file on the FortiNAC appliance owning the serial number associated to the license.

Important:

• Application of license key requires a restart of management processes. During this time...

  • Wireless clients will be unable to connect (Radius requests will not be answered)

  • Captive portal will be unavailable (Devices in isolation will be unable to register or remediate)

  • VLANs will not be changed

• High Availability environments without a Control Manager:

  • Primary Server status must be Running – In Control before applying licenses. This can be verified in the Administration UI under the System Summary widget in the Dashboard.

  • Application of license key in a High Availability environment requires a second restart of management processes.

1. In the Administration UI, navigate to System > Settings > System Management > License Management.

2. From the drop-down list, select the server containing the endpoint license key. The server can be identified using the Port1 (Eth0) MAC address, serial number or UUID (if VM).

   

3. Click Modify License Key.

   

4. Apply key using one of the following methods:

   Option 1 (recommended): Click Upload, browse to .lic key file, and click Open.

   Option 2: Copy and paste the entire content of the .lic file in the field under “Enter New Key:” Important: If any characters are missing from the pasted content, the license will not apply correctly.

5. Click OK to apply the new license key. The existing key detail is displayed in a pop-up window along with the new key detail.

6. Review the details. The new key detail should reflect the total of the original plus new license count.

   Example:

   Original license count – 9000

   Additional license count - 1000

   New license count should show 10,000

7. If the new total is not correct, click Undo to revert to the existing license key and contact Customer Service. Installing a license with a count that is smaller than expected will prevent new registrations from completing.

   If the new total is correct, click OK to apply the new endpoint license key.

8. To restart the server immediately, click OK on the dialog box.

9. To restart the server later, click Cancel on the dialog box. Another dialog box appears stating that the new key will not be applied until the server is restarted. New features or license counts contained in the new license cannot be accessed until the server is restarted. The new license is saved on the server, but is not read until the server is restarted.

10. Click OK to confirm. The new license is applied once the appliance restarts.

Step 6: Validate

Review the Administration UI to verify new entitlements:

License Information Dashboard panel

System > Settings > System Management > License Management

Subscription and Perpetual Licenses (Combined)

Subscription license count is added to the Perpetual License count. Example:

(Perpetual License PRO count=200) + (Subscription License PRO count=25) = (PRO count=225)

If the entitlements are not displaying as expected, see Troubleshooting.

If key was applied to a standalone appliance, the license upgrade is now complete.

If key was applied to a Primary Server, proceed to Distribute New Perpetual Licensing – High Availability to complete license upgrade.

If key was applied to a Manager, proceed to Distribute New Perpetual Licensing – Distributed Deployment to complete license upgrade.