Customer required contribution and responsibilities

In addition to the customer required contributions and responsibilities included in the FortiCloud Service

Description, the customer agrees for the duration of the Service the following:

• Register their FortiToken Cloud licenses to the same FortiCloud account where their clients are registered on the Fortinet Customer Service and Support website.

• Configure their devices correctly to enable their end-users to use FortiToken Cloud for MFA service.

• Provide network connectivity to enable devices to communicate with the FortiToken Cloud service portal.

• Be able to access the Fortinet Customer Service and Support website and the Fortinet corporate website using a supported web browser.

• Replenish their account quota balance by purchasing new licenses with adequate quotas when their current quota balance is running low or negative.

• Ensure the products and versions to be covered by the service correspond to Supported Products and are supported by the Service.

• Renew their existing service subscription before their current license expires to ensure their uninterrupted use of FTC.

• Ensure the client’s firmware is compatible with FTC supported firmware.

• Manage the device configuration to make sure any transmitted data meets customer data privacy requirements.

• Ensure that their local platform is properly configured and has adequate bandwidth to communicate with the FTC service.

• Complete the service renewal before the expiration of the Service term. Thirty (30) days prior to the Service expiration, the customer will receive a renewal notification from the cloud portal on a weekly basis. The service expiration date and daily notifications for service renewal will be displayed within the FortiToken Cloud instance.

• Upon service expiration, insufficient user quota or termination, the FortiToken Cloud instance will be disabled and an email notification will be sent to the customer. A retention period of thirty (30) days after service expiration or termination within which to renew the service, after which the FortiToken Cloud instance will be deleted and an email notification sent to the customer.

• For clarity, the customer is explicitly advised that the data will be no longer recoverable upon the deletion of the FortiToken Cloud instance.