Troubleshooting Tip: FortiNAC Manager node unable to recover from 'Failed' state

The following events in output.processManager show that the /bsc/campusMgr/.keystore file is corrupted and will prevent the GUI and management processes from starting:

2026-01-20 15:39:36.254 +0300 [main] INFO yams.CampusManager - **** naclab1.forti.lab Start Time Tue Jan 20 15:39:36 TRT 2026 *****
2026-01-20 15:39:36.772 +0300 [main] INFO yams.CampusManager - Hotstandby capable
2026-01-20 15:39:37.137 +0300 [main] ERROR yams.CampusManager - CM Exception
java.io.EOFException: null
at java.base/java.io.DataInputStream.readInt(Unknown Source)
at java.base/sun.security.provider.JavaKeyStore.engineLoad(Unknown Source)
at java.base/sun.security.util.KeyStoreDelegator.engineLoad(Unknown Source)
at java.base/java.security.KeyStore.load(Unknown Source)
at com.fortinet.api.SSLContextUtil.getSelfSignedTrustedCerts(SSLContextUtil.java:367)
at com.fortinet.api.SSLContextUtil.addServerSelfSignedCerts(SSLContextUtil.java:338)
at com.fortinet.api.SSLContextUtil.getSSLContextForCORBA(SSLContextUtil.java:234)
at com.bsc.server.CampusManagerSocket.<init>(CampusManagerSocket.java:61)
at com.bsc.server.CampusManager.readConfigFiles(CampusManager.java:545)
at com.bsc.server.CampusManager.<init>(CampusManager.java:364)
at com.bsc.server.CampusManager.main(CampusManager.java:5133)

To solve the problem, do the following:

1. Restore a System files backup from before the issue started.

In the FortiNAC CLI, configure the following:

execute restore backup local 'Hostname' 'Year-Month-Day'.

Example:

fortinac # execute restore backup local naclab1 2026-02-17

A reboot is required to complete the backup restoration.

Do you wish to reboot now? (y/N) y

2. When no system file backup is available, perform a soft reset of the FortiNAC manager.

Before doing the reset, take a Database backup. Database files are stored as /bsc/backups/database/FortiNAC_DataBase_BackUp_<yy_mm_dd_hh_mm_ss>_<Hostname>.gz.

Reset FortiNAC from the CLI:

execute factoryreset2 all-settings

The option 'factoryreset2' is chosen since it will wipe data partitions but will keep network settings.

After rebooting FortiNAC, restore the database file that was saved previously. 

Transfer the database file to /bsc/backups/database/ and restore it from the GUI.

To restore the database from the CLI:

naclab1 # execute restore database local FortiNAC_DataBase_BackUp_<yy_mm_dd_hh_mm_ss>_<Hostname>.gz 

Restoring FortiNAC_DataBase_BackUp_2026_02_17_11_50_03_naclab1.gz...

Restore complete

naclab1 #

Documentation:

• Technical Tip: FortiNAC-F System Restore procedure
• Backup and Restore operations
• Execute commands