Skip to main content
mfabed
mfabed
New Member
May 19, 2022
Question

All superadmin is deleted

  • May 19, 2022
  • 7 replies
  • 7426 views

I have a firewall 300D, i find that all superadmin is deleted even those accounts liked with fortitoken

Once try to access the the firewall it's showing its not possible

Once i logine with a normal user and checked the administrator accounts its not showing any administrator accounts only one normal account

 

I try to reset the admin password through maintnair account its showing  admin account is not exist :expressionless_face: 

 

Anyone face same issue and what the solution?

FortiGate

 

7 replies

AEK
SuperUser
AEK
SuperUser
May 19, 2022

If you have a valid recent backup, reset the FortiGate then restore the config.

AEK
mfabed
mfabedAuthor
New Member
May 19, 2022

Mean have to reset the firmware image then restore the backup ?

But how can all superadmin deleted?

AEK
SuperUser
AEK
SuperUser
May 19, 2022

Yes, from factory reset.

I remember I've seen such case, but don't know how it can happen, probably corruption or bug.

Only a super admin can delete a super admin, and I as far as I know a super admin cannot delete himself. So in normal situation you cannot have zero super admin account on your FortiGate.

AEK
mfabed
mfabedAuthor
New Member
May 19, 2022

I guess have to add the admin user name before restore the backup where the backup file don't have any admin or superadmin privileges.

AEK
SuperUser
AEK
SuperUser
May 19, 2022

Having no super admin user in your backup file will not delete the default admin user from your fresh FGT. However it is always a geed idea to try on a test FGT VM before you do it on production.

AEK
mfabed
mfabedAuthor
New Member
May 19, 2022

Thank you for your advice 

Appreciate 

AEK
SuperUser
AEK
SuperUser
May 20, 2022

There another point to consider, the backup that you make with a non-superadmin user will most probably not be full, depending on what is allowed to read by that user.. you will have to complete the messing parts manually after restore.

AEK
xsilver_FTNT
Staff
xsilver_FTNT
Staff
May 30, 2022

Option 1 - search and find KB about that
For example https://community.fortinet.com/t5/FortiGate/Technical-Tip-Reset-a-lost-admin-password-on-a-FortiGate-unit/ta-p/194937

 

Option 2 - restore config via USB
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Automatic-installation-of-Firmware-and-system/ta-p/197938
As by default it is enabled and so you need just USB stick and right config name on it.
config system auto-install
set auto-install-config enable
set auto-install-image enable
set default-config-file "fgt_system.conf"
set default-image-file "image.out"
end

 

Terms & ConditionsAccessibility statement