Technical Tip: Unable to authorize unit on FortiAnalyzer root ADOM
Description
This article describes how to authorize unit on FortiAnalyzer root ADOM that is being managed by FortiManager.
Solution
1) After adding FortiAnalyzer on FortiManager root ADOM, the 'Managed by FortiManager' icon will appear on FortiAnalyzer root ADOM.
All unit changes have to be performed from FortiManager to avoid conflict.
This article describes how to authorize unit on FortiAnalyzer root ADOM that is being managed by FortiManager.
Solution
1) After adding FortiAnalyzer on FortiManager root ADOM, the 'Managed by FortiManager' icon will appear on FortiAnalyzer root ADOM.
All unit changes have to be performed from FortiManager to avoid conflict.
2) It is not possible to manually authorize a unit on root ADOM.
3) Using the following commands, it is possible to temporary unlock the ADOM.
FAZ-VM64 # diagnose dvm adom unlock root4) The 'Managed by FortiManager' icon will disappear, it is possible now to select the 'Authorize' button.
---Deleting DVM lock by remote FortiManager succeeded---
5) To lock the ADOM again, go to FortiManager -> Managed FortiAnalyzer and select 'Refresh Device'.
6) The 'Managed by FortiManager' icon will re-appear and it will not be possible able to make any changes on the root ADOM unit.
7) It is recommended to create a separate ADOM to manage FortiAnalyzer and avoid root ADOM being lock by FortiManager.
7) It is recommended to create a separate ADOM to manage FortiAnalyzer and avoid root ADOM being lock by FortiManager.
