Licensing Guide

FortiSIEM 7.1.5
FORTINET DOCUMENT LIBRARY
https://docs.fortinet.com

FORTINET VIDEO LIBRARY

https://video.fortinet.com

FORTINET BLOG
https://blog.fortinet.com

CUSTOMER SERVICE & SUPPORT

https://support.fortinet.com

FORTINET TRAINING & CERTIFICATION PROGRAM

https://www.fortinet.com/training-certification

FORTINET TRAINING INSTITUTE

https://training.fortinet.com

FORTIGUARD LABS
https://www.fortiguard.com

END USER LICENSE AGREEMENT

https://www.fortinet.com/doc/legal/EULA.pdf

FEEDBACK
Email: techdoc@fortinet.com

06/19/2024
FortiSIEM 7.1.5 Licensing Guide
 TABLE OF CONTENTS

Licensing 4
Overview 4
Prerequisites 4
1) Registration Code 5
2) Hardware ID 6
3) FortiSIEM Image Download Site 6
License for New Users 7
Registering Base FortiSIEM Product 7
Adding Additional Devices/Services 13
License for Existing Users 16

FortiSIEM 7.1.5 Licensing Guide 3

Fortinet Inc.
Licensing

l Overview
l Prerequisites
l License for New Users
l Registering Base FortiSIEM Product

l Adding Additional Devices/Services

l License for Existing Users

Overview

Starting release 4.10.0, FortiSIEM will only accept licenses issued by FortiCare. AccelOps license server will not
issue any more licenses effective immediately.

FortiSIEM license key generation has been improved. Starting September 11, 2017,
FortiCare will generate licenses ONLY using the new license key generation algorithm and
will only work with FortiSIEM 4.10.0 and later releases.
This has the following implications:
l If you want a new FortiCare license key, for any reason (for example, to extend

maintenance and support or buy additional device license), you must upgrade to 4.10.0
first and then apply the 4.10 license.
l If you are upgrading to FortiSIEM 4.10.0, you must get a newly generated license

key before starting the upgrade process.

Note: FortiSIEM license issued by AccelOps license server will continue to work until the license expires.
However, you have to get a new license from FortiCare if:
l your current FortiSIEM license has expired.
l you must buy additional services.
l you have a valid license and must upgrade to FortiSIEM 4.10.0 and above.

Prerequisites

Before proceeding with FortiSIEM license registration, read and save the required information related to the following:
1. Registration Code
2. Hardware ID
3. FortiSIEM Image Download Site

FortiSIEM 7.1.5 Licensing Guide 4

Fortinet Inc.
Licensing

1) Registration Code

FortiSIEM product functionality is driven by the product SKUs below. You have to first purchase the right
combination of SKUs based on your needs from Fortinet. You will receive the registration letters via email that will
contain a separate registration code for every SKU. You must use these registration SKUs to obtain FortiSIEM
license.

Product SKU Description

FortiSIEM Base Product

FortiSIEM All-In-One Perpetual FSM-AIO-BASE Base All-In-One (AIO) Perpetual

License License for 50 devices and 500
EPS.

FSM-AIO-XXXX-UG Add X devices and EPS/device All-

In-One (AIO) Perpetual license for
Non-MSP/MSP's.

FC[1-8]-10-FSM98-180-02-DD Per Device Subscription License

FortiSIEM All-In-One
that manages minimum X devices,
Subscription License
10 EPS/Device.

FortiSIEM Additional Products

FortiSIEM End-Point Device FSM-EPD-XX-UG Add XX End-Points and 2 EPS/

Perpetual License End-Point for End-Point Perpetual
License

FortiSIEM End-Point Device FC[1-8]-10-FSM98-184-02-DD Per End-Point Subscription License

Subscription License for minimum X End-Points, 2
EPS/End-Point

Add 1 EPS Perpetual License FSM-EPS-100-UG Add 1 EPS Perpetual

Add 1 EPS Subscription License FC1-10-FSM98-183-02-DD Add 1 EPS Subscription

FortiSIEM Advanced Agent FSM-AGT-ADV-XX-UG XX Advanced Agents - Log & FIM -

License perpetual license. Each Agent
requires a device license. Does not
include Maintenance & Support.

FortiSIEM Advanced Agent FC[1-8]-10-FSM98-182-02-DD Per Agent Subscription License -

Subscription License Log & FIM - minimum XX Advanced
Agents. Does not include
Maintenance & Support.

IOC Service Subscription FC[1-G]-10-FSM98-149-02-DD (X Points) FortiSIEM Indicators of

License Compromise (IOC) Service. 1
device or 2 End points or 3 Windows
Agents equals 1 point.

FortiSIEM 7.1.5 Licensing Guide 5

Fortinet Inc.
 Licensing

Product SKU Description

FortiSIEM High Availability FCX-10-FSM98-593-02-DD (XX - YY Points) FortiSIEM High

Subscription Availability Cluster Subscription

FortiSIEM Support

FortiCare Support for FortiSIEM FC[1-G]-10-FSM97-248-02-DD 24x7 FortiCare Contract (X points).

1 device or 2 End points or 3
Windows Agents equals 1 point.

2) Hardware ID

The Hardware ID (UUID) is used to uniquely identify the server where FortiSIEM Supervisor node will run. Based on the
user-level, follow the steps below to get the Hardware ID.
l New user:
Follow one of the methods below:
l Open https://<ip_of_supervisor>/.
The license upload page displays the Hardware ID.
l Go to the server where FortiSIEM Supervisor node has to be installed or is currently installed.
i. Login via SSH as root.
ii. Run the command cat /sys/class/dmi/id/product_uuid
iii. Note the output – you will need this to create a license.

l Existing user:
l Flash GUI: Go to Admin > License Management.
l HTML5 GUI: Go to ADMIN > License > License.

3) FortiSIEM Image Download Site

l Fresh installation:
l If you are new to Fortinet products and do not have a support account other than FortiSIEM, download the
FortiSIEM image from the Fortinet Support website https://support.fortinet.com. See "Downloading FortiSIEM
Products" for more information on downloading products from the support website.
l If you have existing Fortinet products, login to the Fortinet support site and find the image under Download >
Firmware Images.

FortiSIEM 7.1.5 Licensing Guide 6

Fortinet Inc.
 Licensing

License for New Users

This section describes the procedures for new FortiSIEM users to license FortiSIEM product. There is no Base
requirement for Subscription License, but the Ordering Quantity has to meet minimum quantity requirements of each
SKU.
Note: The base device related SKUs has to be registered first.

Base SKU Description

FSM-AIO-BASE Base all-in-one Perpetual License for 50 devices and 500 EPS

FC[1-8]-10-FSM98-180-02-DD Per Device Subscription License that manages minimum X devices, 10

EPS/Device.

Other FortiSIEM products such as additional devices, windows agents, IOC Services, Maintenance and Support etc. can
be added after the Base has been registered.
l Registering Base FortiSIEM Product
l Adding Additional Devices/Services

Registering Base FortiSIEM Product

1. Go to FortiCare Product Registration link: https://support.fortinet.com/

2. Click Register to create an account.
3. Log in using your Account ID/Email and Password.
4. Click the Register More button.
5. On the Register Product > (1) Register Code page, in the Registration Code field, enter the Registration Code
of the Base license based on the license type.
l Subscription based license: Open the SKU file corresponding to the Subscription based license:
FC[1-8]-10-FSM98-180-02-DD and get the Registration code.
l Perpetual license: Open the SKU file corresponding to the Base Perpetual License:
FSM-AIO-BASE and get the Registration code.

FortiSIEM 7.1.5 Licensing Guide 7

Fortinet Inc.
Licensing

6. Select the End User Type and click Next.

7. On the Register Product > (2) Registration Info page, select the Fortinet Partner type from the list. The
Hardware ID (also referred to as UUID), and Product Description fields are optional.

8. Click Next.
9. Read and agree to the terms and conditions of Fortinet Product Registration Agreement and click Next.

FortiSIEM 7.1.5 Licensing Guide 8

Fortinet Inc.
Licensing

10. On the Verification page, read and agree to the terms, and click Confirm.

11. Verify the information displayed under Product Info.

Note the Serial Number. You will need it in the following steps. Click Done.

FortiSIEM 7.1.5 Licensing Guide 9

Fortinet Inc.
Licensing

12. Go to Products > Product List and click the Serial Number obtained from the previous step.

13. Click on the pencil icon to edit. The Edit Product Information window appears. Associate the Hardware ID of the
VM where the Supervisor is going to run . The Hardware ID can be obtained by following the steps in Prerequisites
(b).
14. Enter the Hardware ID in the Edit Product Information page and click Save.

15. Select License & Key and click Get The License File link to download the license.
Note: If you must add additional devices to the license, download the license file after adding all the devices
following the steps under "Adding Additional Devices/Services".

FortiSIEM 7.1.5 Licensing Guide 10

Fortinet Inc.
Licensing

16. Download and install FortiSIEM. See Prerequisites (c) for the image location.
17. Once FortiSIEM is installed, log in and click Browse to select the license file.
Note: If the UI does not redirect to the license upload screen, open https://<ip_of_
supervisor>/phoenix/licenseUpload.html and upload the license file.

FortiSIEM 7.1.5 Licensing Guide 11

Fortinet Inc.
Licensing

18. Enter the User ID (default value: admin) and Password (default value: admin*1).
19. Select the License Type based on the deployment type as:
l Enterprise for single organizations

l Service Provider for multiple organizations

Note: For earlier versions of FortiSIEM, the License Type options displayed were VA for Enterprise and SP for
Service Provider.
20. Click Upload which is enabled after selecting the license file.
21. Verify the license following one of the methods:
a. Verify the license information on FortiSIEM GUI:
l Flash GUI: Admin > License Management

l HTML5 GUI: Admin > License> General.

b. On the server where FortiSIEM is installed, execute the command on the license file and verify the license
information:
l # phLicenseRead <LicenseFile>

[root@Autosuper### ~]# phLicenseRead FSMTEST########-####-####-####-#############.lic

License Information:
Attribute Value
Expiration Date
Serial Number FSM#############
Hardware ID ########-####-####-####-############
Licensed Hardware ID ########-####-####-####-############
License Type Not Decided
Devices 1000 Jun
19, 2025
Endpoint Devices 10 Jun
19, 2025

FortiSIEM 7.1.5 Licensing Guide 12

Fortinet Inc.
 Licensing

Additional EPS 1000 Jun

19, 2025
Total EPS 11020 Jun
19, 2025
Agents 100 Jun
19, 2025
UEBA Telemetry 100 Jun
19, 2025
IOC Service Valid Jun
19, 2025
High Availability Support Valid Jun
19, 2025
Maintenance and Support Valid Jun
19, 2025

Note: Using this tool, you will not be able to identify the License type.
c. On the server where FortiSIEM is installed, execute one of the following commands:
l # phLicenseTool --show

l # phLicenseTool --verify

[root@Autosuper### ~]# phLicenseTool --show

License Information:
Attribute Value
Expiration Date
Serial Number FSMS000000000000
Hardware ID ########-####-####-####-############
Licensed Hardware ID ########-####-####-####-############
License Type Service Provider
Devices 100000
Jun 17, 2025
Endpoint Devices 10
Jun 17, 2025
Additional EPS N/A
N/A
Total EPS 1000020
Jun 17, 2025
Agents 110
Jun 17, 2025
UEBA Telemetry 2
Jun 17, 2025
IOC Service Valid
Jun 17, 2025
High Availability Support Valid
Jun 17, 2025
Maintenance and Support Valid
Jun 17, 2025

[root@Autosuper### ~]# phLicenseTool --verify

license matched

Adding Additional Devices/Services

After registering the base license, you can register additional devices/services supported by FortiSIEM:

FortiSIEM 7.1.5 Licensing Guide 13

Fortinet Inc.
Licensing

l Devices
l End points
l Windows Agents
l IOC Service
l Maintenance and Service
Follow the below steps to add a device/service:
a. Open the SKU related to get the Registration code. Refer to the table under Prerequisites (a).
b. On FortiCare, click Register Product and add the Registration code of the new device.
c. Click the Serial Number obtained while registering the base.

d. Click on the pencil icon to edit. The Edit Product Information window appears. Associate the Hardware ID
and click Save.

Note: If you are adding more devices or services, repeat the procedure of adding the related registration id to
the same serial number and use the license generated at the end of registering all devices/services.
e. Select License & Key and click Get The License File to download the license.
f. Download and install FortiSIEM image from the Fortinet Support website https://support.fortinet.com. Refer to
the Downloading FortiSIEM Products Guide for more information on downloading products from the support
website.
g. Log in to FortiSIEM and click Browse to select the license file.

Note: If the UI does not redirect to the license upload screen, openhttps://<ip_of_
supervisor>/phoenix/licenseUpload.html and upload the license file.

FortiSIEM 7.1.5 Licensing Guide 14

Fortinet Inc.
Licensing

h. Enter the User ID (default value: admin) and Password (default value: admin*1).
i. Select the License Type based on the deployment type of your organization as:
l Enterprise for single organizations

l Service Provider for multiple organizations

Note: For earlier versions of FortiSIEM, the License Type options displayed were VA for Enterprise and SP for
Service Provider.
j. Verify the license following one of the methods:
a. On FortiSIEM GUI:
l Flash GUI: Go to Admin > License Management

l HTML5 GUI: Go to ADMIN > License > License.

b. On the server where FortiSIEM is installed, execute the command on the license file and verify the license
information:
l # phLicenseRead <LicenseFile>

[root@Autosuper### ~]# phLicenseRead FSMTEST########-####-####-####-

#############.lic
License Information:
Attribute Value
Expiration Date
Serial Number FSM#############

Hardware ID ########-####-####-####-############

Licensed Hardware ID ########-####-####-####-############

License Type Not Decided

Devices 1000
Jun 19, 2025
Endpoint Devices 10
Jun 19, 2025
Additional EPS 1000
Jun 19, 2025
Total EPS 11020
Jun 19, 2025
Agents 100
Jun 19, 2025
UEBA Telemetry 100
Jun 19, 2025
IOC Service Valid
Jun 19, 2025

FortiSIEM 7.1.5 Licensing Guide 15

Fortinet Inc.
Licensing

High Availability Support Valid

Jun 19, 2025
Maintenance and Support Valid
Jun 19, 2025

Note: Using this tool, you will not be able to identify the License type.
c. On the server where FortiSIEM is installed, execute one of the following commands:
l # phLicenseTool --show

l # phLicenseTool --verify

[root@Autosuper### ~]# phLicenseTool --show

License Information:
Attribute Value
Expiration Date
Serial Number FSMS000000000000

Hardware ID ########-####-####-####-############

Licensed Hardware ID ########-####-####-####-############

License Type Service Provider

Devices 100000
Jun 17, 2025
Endpoint Devices 10
Jun 17, 2025
Additional EPS N/A
N/A
Total EPS 1000020
Jun 17, 2025
Agents 110
Jun 17, 2025
UEBA Telemetry 2
Jun 17, 2025
IOC Service Valid
Jun 17, 2025
High Availability Support Valid
Jun 17, 2025
Maintenance and Support Valid
Jun 17, 2025

[root@Autosuper### ~]# phLicenseTool --verify

license matched

License for Existing Users

For existing FortiSIEM customers, licenses are already imported into FortiCare. While the current FortiSIEM license will
continue to work until the license expires, you have to get a new license from FortiCare, if you want to renew the license

FortiSIEM 7.1.5 Licensing Guide 16

Fortinet Inc.
Licensing

or buy additional products. Follow the below procedure to get a license:

1. Go to FortiCare Product Registration link: https://support.fortinet.com/.
2. Log in using your Account ID/Email and Password.
3. Click Products > My Assets.
The Serial Number corresponding to your license will be displayed.

4. Click the Serial number to get the production information.

FortiSIEM 7.1.5 Licensing Guide 17

Fortinet Inc.
Licensing

5. Click on the pencil icon to edit. The Edit Product Information window appears. Associate the Hardware ID and
click Save. Refer to Prerequisites (b) section to get the Hardware ID.

6. Select License & Key and click Get The License File to download the license.

7. Before installing the license, please verify that you have the right license installed. The system will not function if
you have an incorrect license.
Verify the license:
a. Download the phLicenseRead tool from the image download site. See Prerequisites (c).
b. Copy the phLicenseRead tool to /opt/phoenix/bin in the Supervisor node. Make sure the permissions are
correct (root/root).

FortiSIEM 7.1.5 Licensing Guide 18

Fortinet Inc.
Licensing

c. Execute the command on the license file downloaded in Step 6 to verify the license information: #
phLicenseRead <LicenseFile>
Note: Using the phLicenseRead tool, you will not be able to identify the License type.

Note: If the license is incorrect, contact Fortinet support to get the right license. Do not install partial license.
8. Upgrade FortiSIEM.
Refer to the Upgrade Guide under FortiSIEM Reference Manuals for information about the upgrade process.
9. After the Supervisor reboots, log in to the Supervisor node and click Browse to upload the license file from Step 6.

10. Enter the User ID (default value: admin) and Password (default value: admin*1).
11. Click Upload.
12. Verify the license information from the GUI.
l Flash GUI: Admin > License Management

FortiSIEM 7.1.5 Licensing Guide 19

Fortinet Inc.
Licensing

l HTML5 GUI: ADMIN > License > License/Usage/Nodes

FortiSIEM 7.1.5 Licensing Guide 20

Fortinet Inc.
Licensing

FortiSIEM 7.1.5 Licensing Guide 21

Fortinet Inc.
 www.fortinet.com

Copyright© 2024 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein
may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were
attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance
results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract,
signed by Fortinet’s Chief Legal Officer, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only
the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal
conditions as in Fortinet’s internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change,
modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.