Skip to main content
NOUFOU
New Member
January 31, 2025
Question

Commit failed: Minimum psksecret length is 6

  • January 31, 2025
  • 4 replies
  • 2407 views

Commit failed: Minimum psksecret length is 6 

 

I'm  deploying ipsec vpn Template from Fortimanager, I get this error when I make Install Config:

Commit failed: Minimum psksecret length is 6 
but, my psksecret is more thant 6 
Fortimanager 7.6.2, Forigate 7.4.5
It work on anothers Fortigates
 
Maybe someone knows some solutions ?

4 replies

kaman
Staff
Staff
February 2, 2025

Hi NOUFOU,

Can you please edit your template tunnel, re-enter the PSK manually in the field, save it.
Then try to install and let me know if this is successful or not.

Is it possible to check if when creating a new IPSEc Template ( save it only once ) and then try to install it, is this successfull or not? (You can just stop at Install Preview to check if the first Copy step is successful or not).

If still issue persists, then reproduce this issue while collecting the below diagnostic command output from both FortiManager and managed FortiGate.

- On the FortiManager:
diagnose debug application securityconsole 255
diag debug app depmanager 255
diagnose debug application fgfmsd 255 <fgt device name>
diagnose debug enable
diagnose debug time enable
! After the installation error, stop debugging with the commands below
diagnose debug disable
diagnose debug reset


- On the FortiGate:
exe tac report
diagnose debug application fgfmd 255
diagnose debug cli 255
diagnose debug console time enable
diagnose debug enable
! After the installation error, stop debugging with the commands below
diagnose debug disable
diagnose debug reset


Regards

dingjerry_FTNT
Staff
Staff
February 2, 2025

Hi @NOUFOU ,

 

We do have an existing Mantis 1084696 for this issue.  However, the fix is already included in FMG 7.6.2 GA. 

 

It should not be related to the FGT versions.  But if your other FGTs are not 7.4.5, you may consider upgrading this FGT in issue for a try.

 

Otherwise, please open a TAC ticket for assistance.

PeterAndries
New Member
March 17, 2025

    Workaround

After updating the PSK on all tunnels of the list, the error does not persist.

redrockis
New Member
May 15, 2025

For posterity/future Google search results:

Updating to 7.6.2 does NOT fix this bug, but upgrading to 7.6.3 does fix it. Additional bug/Mantis ID reported by TAC yesterday: 1115582

After updating our Fortimanager to 7.6.3 I confirmed I was able to make changes to a tunnel in one of our IPsec templates without the error being presented in the install wizard.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!