Upgrading from previous FortiClient versions
FortiClient version 6.0.1 supports upgrading from FortiClient versions 5.4 and later.
If you are deploying an upgrade from FortiClient 5.6.2 or earlier versions via FortiClient EMS and the upgrade fails, uninstall FortiClient on the endpoints, then deploy the latest version of FortiClient.
Deploying FortiClient upgrades to Windows 7 endpoints via FortiClient EMS
By default, EMS 6.0.1 uses TLS 1.2 for incoming SSL connections. This may cause deployment of FortiClient to Windows 7 endpoints to fail.
When deploying FortiClient upgrades to Windows 7 endpoints via FortiClient EMS, one of the following steps is necessary to ensure a successful upgrade.
Enabling support for TLS 1.0 and 1.1 in EMS
Ensure the Enable TLS 1.0/1.1 option is enabled. See the FortiClient EMS 6.0.1 Administration Guide for details.
Enabling support for TLS 1.2 in Windows 7
- Install the Windows Update Hot Fix.
Update to enable TLS 1.1 and TLS 1.2 as a default security protocol in WinHTTP (KB3140245). See the Microsoft Update Catalog.
If regular Windows Update is enabled by default, this KB is already installed.
- Create a DWORD registry entry: DefaultSecureProtocols in the path:
- On x86 architecture systems:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
- On x64 architecture systems:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
Set the value to 0x00000A00 to enable both TLS 1.1 and 1.2.
- On x86 architecture systems:
See also Update to enable TLS 1.1 and TLS 1.2 as a default secure protocols in WinHTTP in Windows.