Description
This article explains how to reset a FortiAP password to its default value or to a new password from a FortiGate.
Scope
All FortiAPs managed via FortiGate.
Solution
The following FortiGate CLI commands will reset the password of the FortiAP to the default value or to a new password:
FGT-HO # config wireless-controller wtp
FGT-HO (wtp) edit FPXXXFTFXXXXXXXX
FGT-HO (FPXXXFTFXXXXXXXX) set override-login-passwd-change enable
FGT-HO (FPXXXFTFXXXXXXXX) set login-passwd-change ?
yes <--Change the managed WTP, FortiAP, or AP's administrator password. Use the login-password option to set the password.
default <-- Keep the managed WTP, FortiAP, or AP's administrator password set to the factory default.
no Do not change the managed WTP, FortiAP or AP's administrator password
FGT-HO (FPXXXFTFXXXXXXXX) set login-passwd-change default ***
Or:
FGT-HO (FPXXXFTFXXXXXXXX) set login-passwd-change yes
FGT-HO (FPXXXFTFXXXXXXXX) set login-passwd <8 character password>
FGT-HO (FPXXXFTFXXXXXXXX) next
FGT-HO (wtp) end
Before v7.0.2, the option ‘set login-passwd-change=default’ will result in a blank password for FortiAP (not recommended). After v7.0.2, the command ‘set login-passwd-change=default’ will request a new password every time logged into the FortiAP console.
Note:
The option of changing password or ‘login-passwd-change’ will only come up when ‘override-login-passwd-change’ is enabled, as shown above.
This management password can also be changed to a group of FortiAPs sharing the same WTP profile. This configuration is made as follows on FortiGate:
config wireless-controller wtp-profile
edit <wtp profile name>
set allowaccess https ssh snmp
set login-passwd-change yes
set login-passwd <new management password>
next
end
edit <wtp profile name>
set allowaccess https ssh snmp
set login-passwd-change yes
set login-passwd <new management password>
next
end
The management password for a group of FortiAPs sharing the same WTP profile can also be changed or reset via the GUI. To do this, navigate to WiFi & Switch Controller -> FortiAP Profiles, select the FortiAP Profile associated with the FortiAPs, edit the profile through the GUI, and select 'OK' at the bottom to save the changes.
