You can use the diagnose sys ha uninterruptible-primary-wait {set | get} command to view and change the timer that controls how long the primary FortiGate-6000 or 7000 waits for the secondary FortiGate-6000 or 7000 to complete the firmware upgrade process before upgrading its own firmware. In some configurations, the secondary FortiGate-6000 or 7000 may take more time than expected to upgrade its firmware. If the default timer is exceeded the firmware upgrade will fail. Extending the timer can solve this problem.