Skip to main content
michaelbazy_FTNT
Staff
michaelbazy_FTNT
Staff
March 24, 2026

Technical Tip: Retrieve and reuse FortiClient telemetry key from QR code

  • March 24, 2026
  • 0 replies
  • 253 views

 

Description

This article describes a method to retrieve the FortiClient telemetry key from a QR code, decode it, convert it from hexadecimal to ASCII, and reuse it via the command line.

This approach can be useful when:

  • The telemetry key is lost.
  • Manual or scripted re-registration of endpoints is required.

 

The method relies on extracting the telemetry key embedded within the QR code configuration.
Scope

FortiClient with EMS v7.2 and v7.4.
Solution
  1. Retrieve the QR Code.

Log in to the EMS console, then navigate to System Settings -> EMS Settings, locate the section Endpoints Settings, and locate the FortiClient Telemetry Connection Key QR Code.

 

Screenshot 2026-03-21 at 10.50.57.png

 

The QR code contains encoded telemetry configuration data.

 

Screenshot 2026-03-21 at 10.04.25.png

 

  1. Decode the QR code.

Use a generic QR code reader (mobile app or online tool) to extract the embedded string.

Example output (as shown above):

 

Screenshot 2026-03-21 at 09.56.48.png
 
The string extracted is: fabricagent://cloud?inviteCode=A5VJUXXXXXXXXXXXXXX068ASH4&key=0x53656375726974794661627269633454578&site=default.
 
  1. Extract the hexadecimal value.
Identify the portion starting with '0x', and remove it.

Example:

0x53656375726974794661627269633454578 → 53656375726974794661627269633454578.
The remaining hexadecimal string represents the telemetry key.

  1. Convert hexadecimal to ASCII.

Convert the hexadecimal string into a readable ASCII string.

Online tools can be used (e.g., Rapidtables: Rapidtables - Hex to String | Hex to ASCII Converter).

 

The resulting ASCII string is the usable telemetry key.
In the given example: 53656375726974794661627269633454578 → SecurityFabric4TW.

  1. Re-register FortiClient using the key.

Run the following command on the endpoint:

 

c:\Program Files\Fortinet\FortiClient>FortiESNAC.exe -r <EMS-IP/FQDN/invitation-code> -k <key>

 

Example:

 

FortiESNAC.exe -r ems.domain.com -k SecurityFabric4TW
 
Additional information to use the FortiESNAC tool : 

 

Additional notes:

  • The telemetry key is embedded within the installer.

  • If the key changes, installers must be updated to have it take effect. 

 

Updating the key in FortiClient EMS typically requires editing the configuration and saving the changes.
Terms & ConditionsAccessibility statement