FortiManager Firmware : General firmware upgrade steps
 
General firmware upgrade steps
The following table lists the general firmware upgrade steps.
Table 19: Upgrade steps 
Step 1
Prepare your FortiManager for upgrade.
Step 2
Backup your FortiManager system configuration. For FortiManager VM, take a Snapshot of the VM instance.
Step 3
Transfer the FortiManager firmware image to your FortiManager device.
Step 4
Log into your FortiManager Web-based Manager to verify the upgrade was successful.
Step 1: Prepare your FortiManager for upgrade
1. Install any pending configurations.
2. Make sure all managed devices are running the supported firmware versions as stated in the FortiManager Release Notes.
3. Log in to the Fortinet Customer Service & Support portal at https://support.fortinet.com.
4. In the Download section of the page, select Firmware Images, and select FortiManager. Optionally, you can select Download in the toolbar and select Firmware Images from the drop-down list.
Figure 310: Firmware images page
5. Browse to the appropriate FTP directory to download the device specific firmware image and FortiManager Release Notes document.
Figure 311: Example FTP directory
6. To verify the integrity of the download, go back to the Download section of the login page, then select the Firmware Image Checksums link. Optionally, you can select Download in the toolbar and select Firmware Image Checksums from the drop-down list.
Figure 312: Firmware image checksum page
7. Enter the file name and select Get Checksum Code to get the firmware image checksum code. Compare this checksum with the checksum of the firmware image.
Step 2: Backup your FortiManager system configuration
1. Go to System Settings > Dashboard.
2. In the System Information widget, in the System Configuration field, select Backup.
The Backup dialog box opens.
Figure 313: Backup dialog box
3. Select the checkbox to encrypt the backup file and enter a password.
 
When selecting to encrypt the backup configuration file, the same password used to encrypt the file will be required to restore this backup file to the FortiManager device.
4. Select OK and save the backup file on your management computer.
 
The system configuration file from a FortiManager v4.0 MR3 device cannot be directly imported into a FortiManager v5.0 Patch Release 6 device.
 
Optionally, you can backup the configuration file to a FTP, SFTP, or SCP server using the following CLI command:
execute backup all-settings {ftp | sftp} <ip> <path/filename save to the server> <username on server> < password> <crptpasswd>
execute backup all-settings scp <server IP address> <path/filename save to the server> <SSH certificate> <crptpasswd>
For more information, see the FortiManager v5.0 CLI Reference.
5. In VM environments, it is recommended that you take a Snapshot of the VM instance. In the event of an issue with the firmware upgrade, use the Snapshot Manager to revert to the Snapshot. To create a Snapshot, right-click the VM instance and select Snapshot > Take Snapshot.
Figure 314: Snapshot of FortiManager VM (VMware)
 
For information on snapshots in Microsoft Hyper-V Server environments, refer to the Microsoft Windows Server online help.
Figure 315: Snapshot of FortiManager VM (Microsoft Hyper-V)
Step 3: Transfer the firmware image to your FortiManager device
1. Go to System Settings > Dashboard.
2. In the System Information widget, in the Firmware Version field, select Update.
The Firmware Update dialog box opens.
Figure 316: Firmware upgrade dialog box
3. Select Browse to locate the firmware image (.out file) that you downloaded from the Customer Service & Support portal and select Open.
4. Select OK. Your FortiManager will upload the firmware image and you will receive the following message.
Figure 317: Firmware upgrade successful dialog box
 
Optionally, you can upgrade firmware stored on an FTP or TFTP server using the following CLI command:
execute restore image {ftp | tftp} <file path to the server> <server ip address> <username on server> <password>
For more information, see the FortiManager v5.0 CLI Reference.
Step 4: Verify the upgrade
1. Refresh the browser and log back into the device.
 
After the upgrade, please clear your browser cache before logging into the FortiManager Web-based Manager. Please make sure your computer's screen resolution is set to at least 1280x1024, otherwise the Web-based Manager may not be displayed properly.
2. Launch the Device Manager module and make sure that all formerly added devices are still listed.
3. Select each ADOM and make sure that managed devices reflect the appropriate connectivity state. Optionally, go to System Settings > General > All ADOMs.
Figure 318: Verify device connectivity
4. Launch other functional modules and make sure they work properly.