Note: the “diag debug vm-print-license” command that can be used with FGT-VM to gather detailed license information is not supported in FOS-VM environment. In case the communication is re-established at some point in time, the FOS-VM will detect it, set the FortiMeter grace period back to 15 days, and re-start processing traffic again. Anyway, such situation does not stop the FOS-VM to continue sending metering data to the FortiManager periodically.

In the eventuality the FortiMeter grace period goes down to zero, the License Status would then be changed to “Invalid” and the FOS-VM will stop processing traffic. In case FortiManager cannot be contacted, the FOS-VM stores the metering information locally and decrements the FortiMeter grace period value. The FortiMeter grace period set to 1296000 seconds which corresponds to 15 days.įOS-VM (global) # diag hardware sysinfo vm fullĪfter it has been authorized by FortiMeter, the FOS-VM tries to contact its FortiManager instance every 5 minutes in order to report metering information. Typical output of the “diag hardware sysinfo full” command output once a FOS-VM has been authorized by FortiMeter. Typical output of the “get system status” command output once a FOS-VM has been authorized by FortiMeter This can be done by editing the FOS-VM into FortiMeter and authorize it to start processing traffic by assigning a license and possibly UTM services to it. For the FOS-VM to become fully operational, it has to be authorized by FortiMeter. Once the FOS-VM is added to FortiManager (promoted), it can then be managed by the FortiMeter module. If it can register, then the “FortiMeter grace period” value is set to 15 days. If the FOS-VM does not or cannot register to a FortiManager instance before the grace period timer elapses, then the license status becomes “Invalid” and the FOS-VM ceases functioning. The VM then starts to register to the FortiManager instance that is defined in its configuration file. Version: FortiOS-VM64-KVM v5.6.10,build1677,190716 (GA) <-FOS-VMįOS-VM (global) # diag hard sysinfo vm fullįortimeter grace period: 3600 seconds <-FortiMeter grace period set to 1 hour The FOS-VM license status is “Valid”, and is set with a “FortiMeter grace period” value of 1 hour. Upon instantiation, a FOS-VM is provided with a permanent Serial Number. FOS-VMs license validation process is exclusively taken care of by the FortiMeter module of FortiManager, not by FortiGuard. This article provides some technical tips regarding FortiOS-VM (FOS-VM) Licenses management, validation and troubleshooting.įOS-VMs are meant to work only in closed environments without Internet access.

Fortigate vm license validation