Skip to main content
dahin
New Member
November 9, 2015
Question

FortiToken clock drift detected -> problems when trying to sign in

  • November 9, 2015
  • 5 replies
  • 21708 views

Hello dear community!

 

A colleague is currently experiencing problems with his mobile phone VPN token. When he tries to sign in using the code provided by the forti app, the first login attempt almost always fails. On the second attempt the website says "Fortitoken clock drift detected (code: 506108). Please input the next code and continue.". Then, on the next try, an error pops up (455 access denied) and two to four tries later it finally works.

How can this asynchronity of clocks (which seems to be the problem) be changed?

 

Best regards,

Daniel

    5 replies

    dred_FTNT
    Staff
    Staff
    November 10, 2015

    Hi Daniel, Can you have your colleague confirm that the mobile device clock is accurate - set to network time and the correct time zone.  If the device clock is indeed set correctly, please let us know if this is the iOS or Android version of the FortiToken Mobile app. Thanks, David

    dahin
    dahinAuthor
    New Member
    November 10, 2015

    Hey David,

     

    he opens an hotspot with his android phone and then tries to log in with his iOS phone (both clocks are almost in sync -> 1-2 seconds apart). On the first log in attempt he almost always gets the 455 error. The other error (clock drift) is only displayed when using the guest WLAN in our company (not using the hotspot). For OS versions, I will have to contact him again.

     

    Thanks for your help,

    Daniel

     

    Edit: iOS version is 8.2 and Forti-App version is 3.0.4.0067

     

    Edit 2: Now the forti app on the mobile phone (iOS 8.2) doesnt display a valid access code (https://forum.fortinet.com/tm.aspx?tree=true&m=130979&mpage=1)

    dahin
    dahinAuthor
    New Member
    November 17, 2015

    Bump

    anthony_christensen
    New Member
    March 18, 2019

    To correct the drift issue you can run the following command "exec fortitoken sync" if your not familiar with this command running "exec foritoken sync ?" should lead you in the right direction. 

     

    Thanks, 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.