| Description | This article describes how the config can be backed up/restored from CLI over FTP/TFTP in case access to the GUI is not possible. |
| Scope | FortiAuthenticator 6.x. |
| Solution |
An FTP/TFTP server that has the config backup is necessary, and it is reachable to the FortiAuthenticator.
From the CLI, use this syntax to restore the config:
Example:
execute restore config tftp FACVMKVM-v6.5.0-build1286_170223-1605.conf 10.5.23.153
From the CLI, use this syntax to back up the config:
execute backup full-config tftp <filename> <server fqdn|ipaddr> [password <encryption password>]
execute backup full-config ftp <path> <server fqdn|ipaddr>[:port] [ftp_user] [ftp_password] [password <encryption password>]
Note: The configuration is valid only for a specific hypervisor and a specific firmware version. If these differ on the device being restored to, the restore operation will fail. Fortinet support can convert the hypervisor version (when restoring to another hypervisor, such as from VMWare to KVM), but the firmware version is required to match.
If no error is displayed, the config will be restored, and FortiAuthenticator will restart. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.