Fortinet black logo

Upgrading FortiManager Firmware

Upgrading FortiManager Firmware

This section describes how to upgrade FortiManager firmware. You can use the following methods to upgrade firmware:

  • From the FortiManager GUI, download the firmware from FortiGuard and upgrade the unit.
  • From the FortiManager GUI, upload the firmware that you previously downloaded from the Customer Service & Support portal.

Fortinet recommends uploading firmware to FortiManager by using a server that is in the same location as the FortiManager. This helps avoid timeouts.

After updating FortiManager firmware, you should update the following items in the following order:

  1. Update firmware for managed FortiGates.

    FortiManager automatically retrieves the FortiGate configuration after upgrading FortiOS.

  2. Upgrade the ADOM version as necessary.
  3. Upgrade the global ADOM version as necessary.

For information about updating firmware for FortiGates and ADOM versions, see the FortiManager Administration Guide.

To upgrade firmware using FortiGuard:
  1. In System Settings > Advanced > Advanced Settings, enable Offline Mode.

    Offline mode stops automatic firmware updates during the upgrade.

  2. Go to System Settings > Dashboard.
  3. In the System Information widget, go to the Firmware Version field, and click the Upgrade Firmware icon.

  4. Before upgrading your firmware, you can choose to enable or disable Backup Configuration. When this setting is enabled, you will automatically download a backup copy of your FortiManager configuration when performing a firmware upgrade. If you want to encrypt the backup file, enable Encryption, then type and confirm the password you want to use. The password can be a maximum of 63 characters.

  5. In the FortiGuard Firmware list, select the version of FortiManager for upgrade, and click OK.

    The FortiGuard Firmware box displays all FortiManager firmware images available for upgrade. A green checkmark displays beside the recommended image for FortiManager upgrade.

    If you select an image without a green checkmark, a confirmation dialog box is displayed. Click OK to continue.

    FortiManager downloads the firmware image from FortiGuard.

    FortiManager uses the downloaded image to update its firmware, and then restarts.

    It is recommended to view the console log output during upgrade. See Checking FortiManager log output.

  6. When the login window displays, log into FortiManager.

    When the upgrade completes, you might have to refresh your web browser to see the login window.

    The FortiManager Setup wizard is displayed.

  7. Click Begin to start the FortiManager Setup wizard.

    Alternately, you can click Later to complete the wizard later.

  8. In System Settings > Advanced > Advanced Settings, disable Offline Mode.
  9. Review the System Settings > Event Log for any additional errors. See Checking FortiManager events.
To upgrade firmware using an image downloaded from the Customer Service & Support portal:
  1. In System Settings > Advanced > Advanced Settings, enable Offline Mode.

    Offline mode stops automatic firmware updates during the upgrade.

  2. Go to System Settings > Dashboard.
  3. In the System Information widget, go to the Firmware Version field, and click the Upgrade Firmware icon.
  4. Before upgrading your firmware, you can choose to enable or disable Backup Configuration. When this setting is enabled, you will automatically download a backup copy of your FortiManager configuration when performing a firmware upgrade. If you want to encrypt the backup file, enable Encryption, then type and confirm the password you want to use. The password can be a maximum of 63 characters.

  5. In the Firmware Upload dialog box, click Browse to locate the firmware package (.out file) that you downloaded from the Customer Service & Support portal, and click Open.
  6. Click OK.

    The firmware image is uploaded. When the upgrade completes, a message confirms a successful upgrade.

    It is recommended to view the console log output during upgrade. See Checking FortiManager log output.

  7. When the login window displays, log into FortiManager.

    When the upgrade completes, you might have to refresh your web browser to see the login window.

    The FortiManager Setup wizard is displayed.

  8. Click Begin to start the FortiManager Setup wizard.

    Alternately, you can click Later to complete the wizard later.

  9. In System Settings > Advanced > Advanced Settings, disable Offline Mode.
  10. Review the System Settings > Event Log for any additional errors. See Checking FortiManager events.

    Optionally, you can upgrade firmware stored on an FTP or TFTP server using the following CLI command:

    execute restore image {ftp | tftp} <file path to server> <IP of server> <username on server> <password>

    For more information, see the FortiManager CLI Reference.

Upgrading FortiManager Firmware

Upgrading FortiManager Firmware

This section describes how to upgrade FortiManager firmware. You can use the following methods to upgrade firmware:

  • From the FortiManager GUI, download the firmware from FortiGuard and upgrade the unit.
  • From the FortiManager GUI, upload the firmware that you previously downloaded from the Customer Service & Support portal.

Fortinet recommends uploading firmware to FortiManager by using a server that is in the same location as the FortiManager. This helps avoid timeouts.

After updating FortiManager firmware, you should update the following items in the following order:

  1. Update firmware for managed FortiGates.

    FortiManager automatically retrieves the FortiGate configuration after upgrading FortiOS.

  2. Upgrade the ADOM version as necessary.
  3. Upgrade the global ADOM version as necessary.

For information about updating firmware for FortiGates and ADOM versions, see the FortiManager Administration Guide.

To upgrade firmware using FortiGuard:
  1. In System Settings > Advanced > Advanced Settings, enable Offline Mode.

    Offline mode stops automatic firmware updates during the upgrade.

  2. Go to System Settings > Dashboard.
  3. In the System Information widget, go to the Firmware Version field, and click the Upgrade Firmware icon.

  4. Before upgrading your firmware, you can choose to enable or disable Backup Configuration. When this setting is enabled, you will automatically download a backup copy of your FortiManager configuration when performing a firmware upgrade. If you want to encrypt the backup file, enable Encryption, then type and confirm the password you want to use. The password can be a maximum of 63 characters.

  5. In the FortiGuard Firmware list, select the version of FortiManager for upgrade, and click OK.

    The FortiGuard Firmware box displays all FortiManager firmware images available for upgrade. A green checkmark displays beside the recommended image for FortiManager upgrade.

    If you select an image without a green checkmark, a confirmation dialog box is displayed. Click OK to continue.

    FortiManager downloads the firmware image from FortiGuard.

    FortiManager uses the downloaded image to update its firmware, and then restarts.

    It is recommended to view the console log output during upgrade. See Checking FortiManager log output.

  6. When the login window displays, log into FortiManager.

    When the upgrade completes, you might have to refresh your web browser to see the login window.

    The FortiManager Setup wizard is displayed.

  7. Click Begin to start the FortiManager Setup wizard.

    Alternately, you can click Later to complete the wizard later.

  8. In System Settings > Advanced > Advanced Settings, disable Offline Mode.
  9. Review the System Settings > Event Log for any additional errors. See Checking FortiManager events.
To upgrade firmware using an image downloaded from the Customer Service & Support portal:
  1. In System Settings > Advanced > Advanced Settings, enable Offline Mode.

    Offline mode stops automatic firmware updates during the upgrade.

  2. Go to System Settings > Dashboard.
  3. In the System Information widget, go to the Firmware Version field, and click the Upgrade Firmware icon.
  4. Before upgrading your firmware, you can choose to enable or disable Backup Configuration. When this setting is enabled, you will automatically download a backup copy of your FortiManager configuration when performing a firmware upgrade. If you want to encrypt the backup file, enable Encryption, then type and confirm the password you want to use. The password can be a maximum of 63 characters.

  5. In the Firmware Upload dialog box, click Browse to locate the firmware package (.out file) that you downloaded from the Customer Service & Support portal, and click Open.
  6. Click OK.

    The firmware image is uploaded. When the upgrade completes, a message confirms a successful upgrade.

    It is recommended to view the console log output during upgrade. See Checking FortiManager log output.

  7. When the login window displays, log into FortiManager.

    When the upgrade completes, you might have to refresh your web browser to see the login window.

    The FortiManager Setup wizard is displayed.

  8. Click Begin to start the FortiManager Setup wizard.

    Alternately, you can click Later to complete the wizard later.

  9. In System Settings > Advanced > Advanced Settings, disable Offline Mode.
  10. Review the System Settings > Event Log for any additional errors. See Checking FortiManager events.

    Optionally, you can upgrade firmware stored on an FTP or TFTP server using the following CLI command:

    execute restore image {ftp | tftp} <file path to server> <IP of server> <username on server> <password>

    For more information, see the FortiManager CLI Reference.