Fortinet black logo
7.2.0

Generate and Download Keys

Generate and Download Keys

This step updates the product records in FortiCare with the required information for each appliance in order to generate the appropriate key files.

Key Generation Procedure Overview

1: Collect appliance information

2: Generate Key for Managing Server

3: Generate Key for Remaining Servers (VMs Only)

Collect Appliance Information

Collect the appropriate appliance information using one of the methods below.

UI Method

  1. Launch the FortiNAC Administration UI by opening a web browser and navigating to:

    https://<FortiNAC IP Address>:8443/

    or

    https://<FortiNAC Host Name>:8443/
  2. Login using the Default FortiNAC Admin UI Credentials

    User: root

    Password: YAMS

  3. Read the End User License Agreement. Accept the terms and proceed.

  4. Under Enter License Key, the UUID (virtual appliances only) and port1 MAC address are displayed.

  5. Record the information. This information is used in the next step to generate the license key. You cannot currently import a license file because you do not have one yet.

  6. Close the browser window.

CLI Method

  1. Login to the appliance CLI as admin.

  2. Enter the command

    get hardware status

    Record the UUID and MAC address from the resulting output.

  3. Type exit

Physical Appliances

Eth 0 MAC address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx) can also be found in the following locations:

  • Shipping label

  • Appliance Identification Details document

  • On the back or the top of the metal casing of the appliance

Generate Key for Managing Server

  1. Log into the Customer Portal at https://support.fortinet.com/

  2. Go to Products > Product List.

  3. Click the serial number for the appliance.

  4. Edit the record in Product Information.

  5. Enter the following:

    • Description (if modification is required)

    • port1 MAC Address

    • UUID (Virtual appliances only)

    Note: Once MAC Address and/or UUID is entered and saved, it cannot be changed online. If assistance is needed with registering devices or changing these entries, contact Fortinet Customer Service.

  6. Click Save.

    The summary page has updated with the link to “Get The License File”

    Important: Customers with new appliances should select the FortiNAC License File.

  7. Click Get the License File.

    If a Control Manager is registered, this screen may appear.

  8. Select the serial number of the Control Manager that will be managing this appliance (select Primary Control Manager if Managers are configured for High Availability).

  9. Click Download License Key File.

    The .lic filename will reflect the appliance serial number.

  10. Once the file is downloaded, click Close.

Remaining Servers

Virtual Appliances: Repeat the previous steps to update each appliance record and download the key, saving each key file to their appropriate folder.

Physical Appliances: Repeat the previous steps to update each appliance record with the MAC Address. Do not download any additional keys. The remaining appliances use the installed key shipped with the hardware.

Key generation is complete. Proceed to next step.

Generate and Download Keys

This step updates the product records in FortiCare with the required information for each appliance in order to generate the appropriate key files.

Key Generation Procedure Overview

1: Collect appliance information

2: Generate Key for Managing Server

3: Generate Key for Remaining Servers (VMs Only)

Collect Appliance Information

Collect the appropriate appliance information using one of the methods below.

UI Method

  1. Launch the FortiNAC Administration UI by opening a web browser and navigating to:

    https://<FortiNAC IP Address>:8443/

    or

    https://<FortiNAC Host Name>:8443/
  2. Login using the Default FortiNAC Admin UI Credentials

    User: root

    Password: YAMS

  3. Read the End User License Agreement. Accept the terms and proceed.

  4. Under Enter License Key, the UUID (virtual appliances only) and port1 MAC address are displayed.

  5. Record the information. This information is used in the next step to generate the license key. You cannot currently import a license file because you do not have one yet.

  6. Close the browser window.

CLI Method

  1. Login to the appliance CLI as admin.

  2. Enter the command

    get hardware status

    Record the UUID and MAC address from the resulting output.

  3. Type exit

Physical Appliances

Eth 0 MAC address (xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx) can also be found in the following locations:

  • Shipping label

  • Appliance Identification Details document

  • On the back or the top of the metal casing of the appliance

Generate Key for Managing Server

  1. Log into the Customer Portal at https://support.fortinet.com/

  2. Go to Products > Product List.

  3. Click the serial number for the appliance.

  4. Edit the record in Product Information.

  5. Enter the following:

    • Description (if modification is required)

    • port1 MAC Address

    • UUID (Virtual appliances only)

    Note: Once MAC Address and/or UUID is entered and saved, it cannot be changed online. If assistance is needed with registering devices or changing these entries, contact Fortinet Customer Service.

  6. Click Save.

    The summary page has updated with the link to “Get The License File”

    Important: Customers with new appliances should select the FortiNAC License File.

  7. Click Get the License File.

    If a Control Manager is registered, this screen may appear.

  8. Select the serial number of the Control Manager that will be managing this appliance (select Primary Control Manager if Managers are configured for High Availability).

  9. Click Download License Key File.

    The .lic filename will reflect the appliance serial number.

  10. Once the file is downloaded, click Close.

Remaining Servers

Virtual Appliances: Repeat the previous steps to update each appliance record and download the key, saving each key file to their appropriate folder.

Physical Appliances: Repeat the previous steps to update each appliance record with the MAC Address. Do not download any additional keys. The remaining appliances use the installed key shipped with the hardware.

Key generation is complete. Proceed to next step.