Skip to main content
alwis
Staff
Staff
April 8, 2022

Technical Tip: FortiAPs offline after upgrade to FortiOS 7.0

  • April 8, 2022
  • 0 replies
  • 3907 views
Description

This article describes a FortiAPs offline after upgrading to FortiOS 7.0 due to 3DES and SHA1 and being removed from the list of strong cryptographic ciphers. Refer to the release notes for current FortiAP models ending with E and F for compatibility versions.

Scope When using Legacy FortiAP models whose names end with the letters B, C, CR, or D.
Solution

To allow legacy FortiAP's  connections with weak cipher encryption by entering the following in the FortiOS CLI:

 

# config system global

set ssl-static-key-ciphers enable
set strong-crypto disable

end
# execute wireless-controller restart-acd <--- to restart wireless controller deamon.

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.