Troubleshooting Tip: FortiToken Cloud (FortiIdentity Cloud) shows error -104

The following error can be seen in the debug of FortiToken:

fas_activate_trial[2340]: Sending packet to FTC server: 69.167.109.248 Port: 8686(length:220)
fas_set_fd_mgmt_vd[124]: Using vfid=0 (mgmt:0)
fas_comm_https_req_rsp[780]: fas_ssl_connect() failed (rc_code: -104)
fas_activate_trial[2346]: Received packet from FTC (code:-104 length:0)
(null)
Error(-104): connection to FortiToken Cloud failed!

The Debug shows an SSL error; therefore, it is recommended to check the packet capture of the connection.

If the Error is Handshake Failure, it is recommended to check the following:

sh full system global | grep ssl-min

The output of the command will show the Minimum SSL version that the FortiGate will allow the SSL connection. If the ssl-min shows TLS 1.3, modify to TLS 1.2

configure system global

    set ssl-min-proto-version TLSv1-3

end

Test the connection by running the following command:

execute fortitoken-cloud trial