Technical Tip: How to reset the FortiADC admin password

[kwcheng__FTNT]

Description

This article describes how to reset the FortiADC admin password.

Scope

FortiADC.

Solution

Unlike with FortiOS, which has a maintenance account: if the FortiADC admin password is lost, it will not be possible to reset the password via the Console connection. This article presents a workaround to reset the password via the FortiADC configuration file.
Before proceeding further, it is necessary to have a FortiADC backup configuration file. If not, the redeployment of the FortiADC is the only solution.

Here are the steps to reset the FortiADC password:

1. Open the FortiADC backup configuration file. Copy the 'XXXX.conf' file out and open it with WordPad or NotePad++.

2. Search for the word 'system admin' and remove the row with 'set password XXXXXX'. Afterwards, save the file.

3. Browse to the ZIP file again, and replace the edited 'OLDXXXX.conf' with 'EDITEDXXXX.conf'.
   

4. Access the Fortinet account, download the same firmware according to the FortiADC backup configuration file, and perform a re-imaging on the FortiADC.
   For more information, refer to the Admin Guide - Restoring firmware.

Important note:
The image used for the re-image process must be the same as the backup configuration file. Otherwise, issues may be faced when trying to restore the configuration later. It is possible to cross-check the build number on the firmware image with the configuration file.

5. Once the re-imaging is complete, log in to the FortiADC via the GUI. The default login account will be the username 'admin' with a blank password.

 

6. Restore the configuration file by browsing the ZIP file that had been previously edited. The restore feature is located under System -> Settings -> Backup & Restore -> Restore.

Important note:
A reboot is required after the restoration, and this will cause the services running on the FortiADC to be unavailable during that period. Arrange downtime if required.
Once the restoration is done, it will be possible to login to the FortiADC with a blank password.