Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=firewall-licenses-migration

Apply a Sophos Firewall license to an SG series UTM appliance

You can convert an SG series UTM appliance from UTM Operating System (UTM OS) to Sophos Firewall Operating System (SFOS).

You must have an SG series UTM 9.x appliance or software appliance.

You must have a full UTM license. You can't convert a UTM trial license.

Warning

This procedure only applies to migrating your UTM licenses to SG series Sophos Firewall appliances. To migrate UTM licenses to XG or XGS series Sophos Firewall appliances, contact your sales representative. Alternatively, see the Migration desk.

Converting your license won't migrate your existing configuration to SFOS. You need to reconfigure the required settings on the converted appliance.

If you want to trial SFOS with the option to roll back to your previous license, install a 30-day Sophos Firewall trial. This trial includes the Xstream Protection bundle, plus Email Protection and Web Server Protection. You can convert your existing license to an SFOS license at any point during the 30-day trial period.

Note

Once you select the full migration option, you can't roll back to the UTM license.

Requirements

Make sure you have access to your SG series UTM appliance, your MyUTM licensing portal and Sophos Central account, and at least a 1GB USB drive, USB keyboard, and a VGA monitor. You must also have access to the internet.

  1. Make a note of the serial number and license ID of your UTM appliance. You can find this on the UTM's web admin dashboard.

  2. Sign in to MyUTM Licensing Portal and click License Management.

  3. Click your license to see license details.

    UTM license details.

    Note

    If you don't have any active subscriptions, the base license is migrated.

    Note

    If you have a new or renewal license key that has yet to be applied, apply it first and wait at least one day for the key to synchronize in our records before migrating your license from UTM to SFOS.

  4. Under Actions, click Download License File.

    Note

    Make sure that you download the license file for the same SG model that you'll convert. Converting the wrong license file will result in service disruption.

Convert an SG Appliance from UTM OS to SFOS

  1. Download the Hardware Installers: Firewall OS for XG and XGS Series .iso file. You can do this in the following ways:

    • Go to the Sophos website, go to Support > Downloads & Updates, and click Firewall Installers. Next to Hardware Installers: Firewall OS for XG and XGS Series, click Download. Complete the End User Terms of Use & Export Compliance form, accept the Sophos End User Terms of Use, then click Submit.

    • Sign in to Sophos Central, go to Devices > Installers. Under Firewall Protection, click Download installers. Next to Hardware Installers: Firewall OS for XG and XGS Series, click Download. Complete the End User Terms of Use & Export Compliance form, accept the Sophos End User Terms of Use, then click Submit.

  2. Copy the downloaded .iso file to a USB drive. For more information, see Sophos Firewall: Reimage the appliance.

  3. Install the .iso file on the SG appliance by connecting the USB drive, a USB keyboard, and a VGA monitor and then restarting the SG appliance.

    The installer will start automatically. No input is required from you during installation, but you can watch the progress. The following message shows once the installation is complete: Firmware installed. Press y to reboot when done.

  4. Remove the USB drive from the appliance, press Y, and press Enter.

    The SG appliance will run the SFOS firmware after the restart. A prompt will show requesting your UTM credentials.

  5. Connect the USB drive to the SG appliance and restart it to start the installation automatically.

    Depending on your SG model, connect a VGA or HDMI monitor, keyboard, or serial terminal to the appliance to monitor installation progress. SG210 and later also show progress on the built-in LCD.

    The following message shows once the installation is complete: Firmware installed. Press y to reboot when done.

  6. Remove the USB drive from the appliance, press Y, and press Enter.

    The SG appliance will run the SFOS firmware after the restart.

  7. Connect a computer to the LAN port of the SG appliance.

  8. Sign in with the following default credentials:

    • Username: admin
    • Password: admin

    Note

    You must change the credentials.

  9. Select I would like to migrate my UTM 9 license now, click Browse, select your UTM license file, and click Continue.

  10. On the License Migration & Renewals page, click Login.
  11. Enter your credentials and click Sign In.
  12. On the Important Information About Your License page, click Yes - Proceed with Registration.
  13. Complete the CAPTCHA test and click Continue.
  14. Verify the details and click Confirm Registration + Evaluation License.
  15. On the Registration Successful page, click Initiate License Synchronization.
  16. On the Basic Setup is Complete page, click Continue.
  17. Use the network configuration assistant to configure your network settings.
  18. Go to Administration > Licensing to review your license details.

You've successfully converted your SG appliance with UTM OS to an SG appliance with SFOS. Your Sophos UTM license is deactivated and is no longer valid.

If you have any issues, contact Sophos support.