I stumbled upon an error while configuring a new FortiGate G-series device. I was trying to change the hostname, but I was unable to access the global setting. According to the Fortinet link, it now enforces a device registration before configuring certain advanced settings in FortiGate G-series models starting on FortiOS firmware version 7.2.11 or 7.4.8 and later.
FortiGate-1xxG login: admin
Password: <NEW PASSWORD>
Verifying password...
Welcome!
The device is not registered with Forticare.
any configuration change is not allowed.
FortiGate-1xxG # get system status
Version: FortiGate-1xxG v7.4.x,build2xx (GA.M)
First GA patch build date: 230xx
FortiCare Registration Level: Enforce
Current Security Level: High
Physical Switch Security Level: High
Firmware Signature: certified
<OUTPUT TRUNCATED>
FortiGate-1xxG # config system global
command parse error before 'global'
Command fail. Return code 1
FortiGate-1xxG # config system
arp-table Configure ARP table.
dhcp Configure DHCP.
dhcp6 Configure DHCPv6.
evpn Configure EVPN instance.
geneve Configure GENEVE devices.
gre-tunnel Configure GRE tunnel.
interface Configure interfaces.
ipip-tunnel Configure IP in IP Tunneling.
ipsec-aggregate Configure an aggregate of IPsec tunnels.
ipv6-neighbor-cache Configure IPv6 neighbor cache table.
link-monitor Configure Link Health Monitor.
mobile-tunnel Configure Mobile tunnels, an implementation of Network Mobility (NEMO) extensions for Mobile IPv4 RFC5177.
nd-proxy Configure IPv6 neighbor discovery proxy (RFC4389).
pppoe-interface Configure the PPPoE interfaces.
proxy-arp Configure proxy-ARP.
sdwan Configure redundant Internet connections with multiple outbound links and health-check profiles.
speed-test-schedule Speed test schedule for each interface.
vdom-link Configure VDOM links.
virtual-wire-pair Configure virtual wire pairs.
vne-tunnel Configure virtual network enabler tunnel.
vxlan Configure VXLAN devices.
zone Configure zones to group two or more interfaces. When a zone is created you can configure policies for the zone instead of individual interfaces in the zone.
FortiGate-1xxG #
You can bypass the FortiCare registration enforcement using the instructions on this Fortinet link. You can only perform this via console, reboot the FGT and press any key while booting. In this case I continuously hit the "space" bar to enter the BIOS settings.
FortiGate-1xxG # execute reboot
This operation will reboot the system !
Do you want to continue? (y/n) // TYPE
"y"
System is rebooting...
The system is going down NOW !!
FortiGate-1xxG #
Please stand by while rebooting the system.
Restarting system
FortiGate-1xxG (00:53-08.22.2025)
Ver:06000201
Serial number: FG1xxGTK26001234
CPU: 2300 MHz
Total RAM: 16 GB
Initializing boot device...
Initializing MAC...
Please wait for OS to boot, or press any key to
display configuration menu
Enter C,R,T,F,I,B,Q,or H:
[C]: Configure TFTP parameters.
[R]: Review TFTP parameters.
[T]: Initiate TFTP firmware transfer.
[F]: Format boot device.
[I]: System information. // TYPE "I"
[B]: Boot with backup firmware and set as default.
[Q]: Quit menu and continue to boot.
[H]: Display this list of options.
Enter S,R,T,C,I,E,P,Q,or H:
[S]: Set serial port baudrate.
[R]: Set restricted mode.
[T]: Set menu timeout.
[C]: Set FortiCare registration.
// TYPE "C"
[I]: Display system information.
[E]: Reset system configuration.
[P]: Normal POST test.
[Q]: Quit this menu.
[H]: Display this list of options.
Enter S,R,T,C,I,E,P,Q,or H:
[1]: Not Enforce // TYPE
"1"
[2]: Enforce
Enter S,R,T,C,I,E,P,Q,or H:
[C]: Configure TFTP parameters.
[R]: Review TFTP parameters.
[T]: Initiate TFTP firmware transfer.
[F]: Format boot device.
[I]: System information.
[B]: Boot with backup firmware and set as default.
[Q]: Quit menu and continue to boot. // TYPE "Q"
[H]: Display this list of options.
System is starting...
After setting the FortiCare registration to "Not Enforce", I was able to set the hostname afterwards.
FortiGate-xxG login: admin
Password:
Verifying password...
Welcome!
# get system status
Version: FortiGate-1xxG v7.4.x,build282xx (GA.M)
First GA patch build date: 230xx
FortiCare Registration Level: Not Enforce
Current Security Level: High
Physical Switch Security Level: High
Firmware Signature: certified
<OUTPUT TRUNCATED>
FortiGate-xxG # config system global
FortiGate-xxG (global) # set hostname
<string> Please input string value [0-9\A-Z\a-z\-\_].
Once login via HTTPS web GUI, it will prompt this page. Just click the "Postpone registration" in order to proceed. Note that after 7 cumulative days of uptime, registering the device to FortiCare becomes mandatory to maintain GUI and CLI access.
