Technical Tip: How to rename the default admin in FortiAnalyzer using 7-Zip

lingky88 · ‎11-03-2023

Description

This article describes how the default admin account can be renamed with the use of 7-Zip on the backup config file and restore it back into the FortiManager/FortiAnalyzer. It is not possible to rename or delete the default admin account using the CLI:

config system admin user

delete admin
user 'admin' cannot be deleted
command_cli_delete:3282 delete table entry admin unset oper error ret=-29
Command fail. Return code -29

Scope

FortiManager/FortiAnalyzer.

Solution

Prior to making the change, create a new LOCAL Super_User under System Settings -> Admin -> Administrators.

1. Create new user.png

Login with the newly created Super_User account and we will see that the default admin account is not able to be deleted.
Take a backup configuration (.dat) without encryption under System Settings -> Dashboard.
Once the backup configuration has been downloaded, open the DAT File using 7-Zip -> Open Archive.
'Double-click' the file and then navigate to var -> fwclienttemp -> system.conf.
'Double-click' the file and it will be opened in a notepad. Search for 'config system admin user' and edit the admin to the desired username. If one wants to change the password, it is also possible to edit it here as well.
Close and save the changes that were made.
Close 7-Zip and proceed to save the changes on the parent file.
Restore the new backup configuration (.dat) into the device.
Lastly, login to the device and verify that the admin account is no longer present under System Settings -> Admin -> Administrators.

Technical Tip: How to rename the default admin in FortiAnalyzer using 7-Zip

You are leaving our website