Technical Tip: FortiToken Mobile will no longer support License Transfer between different devices

Decision Guide:

Note: FortiToken Mobile Licenses shipped before August 4, 2025, are not subject to the change and may still be transferred between devices.

FortiToken Mobile licenses shipped on or after August 4, 2025 are not transferable from one FortiGate or FortiAuthenticator device to another. The FortiToken Ordering Guide states that License Transfer for 'Device-managed FortiToken' (FortiToken Mobile) is not allowed.

• If a FortiToken Mobile license was shipped before August 4, 2025, it is possible to transfer FortiToken Mobile licenses between different devices, for example, if a device is decommissioned.
• FortiToken Mobile licenses shipped on or after August 4, 2025, cannot be transferred between different devices, except in cases of RMA. This change is due to security considerations- see the SKU description in the FortiToken Datasheet
  
  

Transferring a FortiToken Mobile license that was shipped after the policy change is only supported for RMA devices. For instructions on how to transfer configuration in case of an RMA transfer, see the article Technical Tip: Migrating users and FortiTokens to another FortiGate/FortiAuthenticator. Note this requires reprovisioning each FortiToken and is not transparent to end users.

If replacing a device for another reason, a new FortiToken Mobile license must be purchased and applied to the new device, and FortiToken must be re-provisioned similar to the process for RMA FortiToken transfers. See the Section on 'Migrating to FortiIdentity Cloud' below for more options.

Note:

'License transfer between devices' in the FortiToken Datasheet refers to FortiGate and FortiAuthenticator devices. Re-provisioning an existing FortiToken to a different mobile device is still supported, as is token transfer between mobile devices.

Products not affected:

Licensing for FortiIdentity Cloud and hardware FortiToken products remains unchanged.

Migrating to FortiIdentity Cloud:

As an alternative to purchasing a new device-managed FortiToken Mobile license, an administrator can convert FortiToken Mobile licenses to a FortiIdentity Cloud (formerly FortiToken Cloud) subscription. The procedure is documented in FortiIdentity Cloud | Migrate Mobile FortiTokens to FortiIdentity Cloud.

Important notes for FortiIdentity Cloud migration:

• During the migration, FortiIdentity Cloud provides a temporary two-day license to complete the migration process.
• After successful migration, FortiIdentity Cloud automatically generates a 90-day free license covering the number of end users corresponding to the migrated Mobile FortiTokens. After 90 days, a paid FortiIdentity Cloud license is required to continue using the service.

Tokens managed by FortiIdentity Cloud can be used across multiple Fortinet devices and are a subscription service rather than a perpetual license. Transferring a FortiToken Mobile license to FortiIdentity Cloud includes a free subscription for ninety days.

Related articles:

• Technical Tip: Migrating users and FortiTokens to another FortiGate/FortiAuthenticator
• Technical Tip: FortiIdentity Cloud's basic troubleshooting debugging from FortiGate and FortiAuthenticator