Technical Tip: Password change prompt on the first login

Description

This article describes this feature: Password change prompt on the first login.

This feature forces a password change when the administrator logs in after a factory reset or new image installation.
The administrator password remains empty for a new unit.

Scope

FortiGate.

Solution

To change the administrator password after a factory reset or new image installation.

1. In the login window, enter the user name.
2. Select 'Login'.
   
   

3. A prompt appears to change the password.

• The current password is in the 'Old Password' field.
• The new password is in the 'New Password' field.
• Re-enter the new password in the 'Confirmation Password' field.
  
  

4. Select 'OK'.

 

The login window appears.

5. Enter the user name and the new password.
6. Select 'Login'.

 

 

From CLI.

 

FortiWiFi-51E login: admin
Password:
You are forced to change your password, please input a new password.
New Password:******
Confirm Password:******
Welcome !

 

To unset the password from CLI:

 

config system admin
   edit admin
       unset password <current_password>
   end
end

 

Note:

Some of the RMAed units have been seen to force change the password on both CLI and GUI.

 

In some scenarios during the HA unit replacement, if per standard process in the organization this needs to be left blank and pushed by primary unit configuration.

1. It is mandatory to log in to the unit to be able to set up the HA configuration.
2. Set up a temporary password to log in to the unit.
3. After the HA configuration is done, unset the password as seen in the previous step.