Technical Tip: Activating hardware FortiTokens using the seed file
| Description | This article describes how to activate multiple hardware tokens using the seed file. |
| Scope | FortiGate. |
| Solution | If multiple hardware tokens need to be added at once, it is possible to activate all the tokens in a single import using the seed file. The serial number file should be a plain text file (.txt) containing one FortiToken serial number per line.
Activating the hardware tokens using the serial number returns with 'cmdb save error' status, a workaround is to use the seed file to import the tokens. It is a known issue (bug ID:1218458) affecting FortiOS 7.4.11, 7.6.3 - 7.6.6. This issue is scheduled to be resolved in:
These timelines for firmware release are estimated and may be subject to change.
The token seed file can be obtained by contacting Fortinet Customer Service, as per the steps outlined in Technical Tip: Process for requesting token seed files for hardware FortiTokens.
Once the seed file has been provided, activate the hardware tokens on the FortiGate GUI:
 
To import via the FortiGate CLI with a TFTP server:
To import via the FortiGate CLI with FTP server:
execute fortitoken import ftp <file-name> <ftp-server> <user> <password>
After importing, verify token status.
get user fortitoken
Post-Import steps (Common to all methods): Assign the token: Edit a user in User & Authentication -> User Definition -> Enable Two-factor Authentication -> Select the FortiToken.
Related articles: |
