Technical Tip: Recover access to FortiGate via FortiGate Cloud

This article describes a method to modify the administrator account when the admin access is lost to the FortiGate. This method requires FortiGate Cloud access, and the device must have a paid FortiGate Cloud subscription.

Note: The legacy method to reset the password of the 'admin' account using the built-in 'maintainer' account to reset the administrator password was removed in FortiOS v7.2.4 and later, see Technical Tip: Removal of maintainer account feature.

Requirements:

1. The unit is configured to connect to FortiGate Cloud for central management, and Management Connectivity is UP.
2. The unit has a valid FortiGate Cloud subscription, see FortiGate Cloud Administration Guide | Feature Comparison.

Note: To purchase a FortiGate Cloud subscription, refer to the article below:

Technical Tip: How to purchase FortiGate Cloud license via FortiCare 

Navigate to FortiGate Cloud -> CLI scripts -> Script list -> Create new -> Run.

See FortiGate Cloud Administration Guide | CLI scripts for instructions on running CLI scripts.

To add a new administrator account, create and execute a new script using the following syntax:

config system admin
    edit "name-of-new-admin"
        set accprofile "super_admin"
        set vdom "root"
        set password yourpassword
    next
end

If the FortiGate is running a multi-VDOM configuration, use the following syntax instead:

config global
    config system admin
        edit "name-of-new-admin"
            set accprofile "super_admin"
            set vdom "root"
            set password yourpassword
        next
    end

Alternatively, enabling the SSO FortiCloud administration access makes it possible to regain access to the FortiGate. Use the following syntax:

config system global

    set admin-forticloud-sso-login enable

    set admin-forticloud-sso-default-profile "super_admin"

end

If the unit is not yet added to the FortiGate Cloud, but there is physical access to the unit, it is possible to add it with the FortiCloud key: FortiGate Cloud Administration Guide | Deployment

A legacy method of FortiGate configuration management by making configuration changes directly in FortiGate Cloud is no longer supported as of Q3 2024, see FortiGate Cloud 24.4a Administration Guide | Config.