Technical Note: How to change management VDOM from GUI and CLI

Description

This article explains how the management VDOM can be changed. The management VDOM is set to root by default.

Scope

FortiGate.

Solution

The current setting of the management VDOM can be seen using:

config global
show full system global | grep management-vdom

To change the management VDOM from a Root VDOM to an already created test VDOM via GUI:

Select Global VDOM -> System -> VDOM -> Select VDOM from the List -> Select Switch Management [root].

When the 'Are you sure you want to switch management virtual domain to:test?' pop-up appears, select OK.

The management VDOM can now be seen to have changed to test.

Change the Management VDOM from the Root VDOM to the previously created test VDOM via the CLI:

config global
FGT (global) # config system global 
FGT (global) # set management-vdom test
FGT (global) #end
FGT (global) #end

In v7.6+, Select the VDOM that needs to act as a management VDOM and then choose the option 'Switch management', as shown in the following screenshot:

An ACME error during management VDOM switch may happen if the ACME configuration is still using an interface that belongs to the old management VDOM:

To proceed with the management VDOM change, remove the current interface configuration under ACME configuration.

config system acme
unset interface
end

Reconfigure the interface on the new management VDOM if ACME will still be used with this interface.