Troubleshooting Tip: Password Recovery when a backup file of the configuration exists

1. Hard reset the device: Technical Tip: How To Reset To Factory Default Configuration using external button.
2. Look in the backup file for the following line:

config system admin
    edit "admin"

        set password ENC SH28VIvRtYEOIwFnrVEwQ1JNX+9GoopNKSrus9NVar40k5N7ouu5x4JjzJtkME=

3. Delete the line: 'set password ENC SH28VIvRtYEOIwFnrVEwQ1JNX+9GoopNKSrus9NVar40k5N7ouu5x4JjzJtkME=' and save the changes in the file editor.
4. Upgrade the Firmware version of FortiGate to the same backup file version. 
5. Log into the unit using the default IP: https://192.168.1.99, then upload the backup file.

6. After the FortiGate completes the reboot process, enter the username 'admin' and leave the password field blank. Once the firewall is back online, hit 'Enter', and it will be possible to log in.
7. After successfully logging in, the option to update the admin password will be accessible.

Select the 'admin' user and select 'Edit.

Select 'Change Password', and create a new password. 

Note:

It is a best practice to have a second super_admin account to avoid going through the process above. 

Additional tip:

• If https://192.168.1.99 is not reachable after a factory reset, confirm if it is connected to the correct interface (typically port1/internal) and the PC is in the same subnet.

• After restoring the backup, the device IP/management access may change to the values stored in the configuration. If access is lost, use the console to verify interface IPs and admin access settings.