Upgrade FortiGate

Before you begin

• You need Push config and Manage settings (for the API token).
• Check Fortinet's upgrade path yourself before jumping versions.

1. Create an API token on the FortiGate

System > Administrators > Create New > REST API Admin, with a profile that may upgrade firmware and the node's address as a trusted host. Copy the token.

2. Add it to Retivo

Inventory > Credentials > New credential set, type FortiGate API token. Then edit the device and choose it.

3. Install

On the device page:

• Read available versions from FortiGuard lists what the firewall may upgrade to, each with Install; or
• Upload image stores a .out file downloaded from the Fortinet support site. Retivo shows its SHA-256 so you can compare it with Fortinet's. An image whose file name names a different model is refused.

Every step that changes the device asks you to type yes.

What's next

• Check vulnerabilities to confirm the new version clears them.