Troubleshooting Tip: User is locked and unable to login to FortiManager due to entering the wrong credentials

Description

This article describes how to troubleshoot when a User is locked and unable to log in to FortiManager due to entering the wrong credentials.

Scope

FortiManager.

Solution

In FortiManager, from the CLI command, it is possible to check the following information:

config system global
get

...
admin-lockout-duration: 2147483647 (default value = 60)
admin-lockout-method: ip 
admin-lockout-threshold: 2 (default value = 3)
...

If a legitimate user enters the wrong login credentials 2 times, then the user will be locked and unable to log in to FortiManager for 2147483647 seconds (approximately 68 years).

At the same time, if there is no way to change the IP address of the PC used by the user, then the only option is to change the admin-lockout-method setting.

config system global
set admin-lockout-method user
end

Finally, refresh the browser and log in to FortiManager with the correct login credentials.