Technical Tip: Reset FortiGate admin password via FortiGate Cloud

Description

This article describes how to reset the password of an admin account from FortiGate Cloud.

This guide does not apply to recreating the super_admin account role once it was lost from configuration.

FortiGate Cloud (prof_admin) cannot create a role that has additional privileges (super_admin).

Scope

FortiGate, FortiGate Cloud.

Solution

FortiGate requires:

1. FortiGate Cloud Standard subscription (paid) to perform configuration changes from FortiGate Cloud, including resetting the admin password via CLI Script.

  2. The FortiGate had to be previously configured in the Fabric Connectors section for the management connectivity status in FortiGate Cloud to display as Active.

Requirements:

1. The unit is configured to connect to FortiGate Cloud for central management, and Management Connectivity shows as 'Active'.

2. The unit has a valid FortiGate Cloud Standard subscription, see Feature Comparison.

3. Ensure that the FortiGate has Internet connectivity so that the password configuration can be successfully applied.

 
Starting FortiGate Cloud v26.1.0, remote access to FortiGate GUI is now possible using local authentication or cloud access with the Basic subscription (free-tier). Running the CLI Script and configuration management will still require the Standard subscription (paid). For FortiGate Cloud v26.1.0 new features, refer to FortiGate Cloud v26.1.0 Release Notes.

 
To reset the admin password using the FortiGate Cloud CLI script option: 

1. Log in to FortiGate Cloud.

2. Select CLI scripts -> Script List -> Manageable Scripts -> Create New.

3. Enter the following CLI commands and press OK to save.

config system admin
    edit "admin"
        set accprofile <admin-profile>
        set password <enter-new-password>
    next
end

If multi-vdom is enabled on the FortiGate, use the following script instead:

config global
    config system admin
        edit "admin"
            set accprofile <admin-profile>
            set password <enter-new-password>
        next
    end

4. To run the script, select Runnable Script -> Select the script created -> Run.

5. Select the FortiGate. Note that only FortiGates with the FortiGate Cloud Standard subscription will show in the list.

6. Select Immediate to run the script now or Scheduled to configure the time to run the script.

Notes:

Starting from FortiGate Cloud v26.1.0, devices with a FortiCare Premium license will have read/write access for remote management. Running automations and scripts will still require a FortiGate Cloud paid subscription. Refer to the Release Notes: New Features and Updates.

Related documents:

• Technical Tip: Recover access to FortiGate via FortiCloud

• Technical Tip: Resetting a lost admin password

• Technical Tip: Execute and deploy a script from the FortiCloud

• FortiGate Cloud 26.1.0 Feature Comparison