This article describes the issue that users might face with the FortiClient EMS connector after renewing their FortiCloud EMS license/contract.
Scope
FortiGate, FortiCloud EMS.
Solution
The FortiClient EMS connector might show disconnected or unauthorized after the FortiCloud EMS license/ contract renewal.
This issue can arise if the contract is updated during the renewal process. For example, if the previous contract included 25 users for VPN/ZTNA and the contract was renewed for 500 users for VPN/ZTNA.
The renewal will change the SKU based on the new contract and this new contract will be added to the account without replacing the previous expired one.
The below screenshot shows the FortiClient connector giving an ‘EMS Cloud license expired’ error while authorizing it:
The FortiClient EMS connector verification via the CLI will show the same as shown below:
FGT_VM # execute fctems verify 1 Error in requesting EMS fabric connection: -7 issue in getting capabilities. License expired. Error (-1@_get_capabilities:438). license expired Command fail. Return code -9999
To verify the contract’s expiry date, use the below command:
diagnose test update info | grep Account\ contracts -A2 Account contracts: FCEM,Thu Apr 17 2024
If the above command indicates that the ‘FCEM’ contract expired, run the below command to update the contact information:
execute update-now
If the issue persists, contact Fortinet Support.