Staff

Technical Tip: Remove two-factor in Admin Account via FortiGate Cloud

Description

This article describes how to remove the two-factor from the admin account through FortiGate Cloud.

Scope

FortiGate, FortiGate-Cloud.

Solution

Prerequisites:

FortiGate is connected and managed in FortiGate Cloud and the connectivity status is up.
FortiCloud Premium subscription.

image (1).png

Procedure:

To remove the two-factor authentication on a FortiGate with FortiGate Cloud paid subscription, follow these steps:

From the FortiGate Cloud page, go to Management from the left side menu -> Script and select Add.

Once the Add Script prompt appears, enter the Script Name and the CLI script to remove the two-factor authentication. Once done, select 'OK'.

config system admin

edit "admin"
unset two-factor
next
end

If multi-vdom is enabled on the FortiGate, use the following script instead:

config global
config system admin
edit "admin"
unset two-factor
next
end

From the FortiGate Cloud Assets List View page, select the gear icon below the 'Action' column and select 'Run Script'

Select the script name from the drop-down menu. It is possible to execute the script immediately by selecting 'Immediate' or setting a schedule to run the script. Select 'Submit'.

If there are no errors in the script, it will take effect immediately or on the scheduled date and time.

Sign up