Recently, we have seen an increasing number of support cases where resellers are unable to register their newly purchased FortiGate through the GUI during the initial login, even though the device has already been registered in the FortiCloud portal.
To troubleshoot this issue, we recommend the following steps via SSH or serial console:
1. Verify Connectivity to FortiGuard Servers
execute ping update.fortiguard.netMake sure the FortiGate can reach the update servers successfully.
2. Debug the Update and Registration Process
diagnose debug application update -1
diagnose debug enable
execute update nowThis helps identify potential issues during the update process, retrieves the licenses again from FortiCloud, and has resolved the issue in multiple cases.
3. Disable Anycast (if the issue persists)
In some cases, disabling Anycast resolves the registration issue. However, you should switch it back afterward, since Anycast is the recommended option from Fortinet.
More information:
Fortiguard not reachable – Blog Boll
4. FortiGate License File Registration
There is also the option to upload a license file to register the FortiGate device:
5. Last Resort: Disable Forced FortiCare Registration (For newer G-Models)
If the issue still persists, you can temporarily disable the enforced FortiCare registration feature.
Documentation:
Enforce FortiCare Registration After New GUI Login – Fortinet Docs
Following these steps should help to identify and resolve most FortiGate registration issues quickly and efficiently.
