FortiAuthenticator
FortiAuthenticator provides access management and single sign on.
kiri
Staff
Staff
Article Id 246282
Description This article describes how the config can be restored from CLI over FTP/TFTP in case access to the GUI is not possible.
Scope FortiAuthenticator 6.x.
Solution

An FTP/TFTP server that has the config backup is needed, and it is reachable to the FortiAuthenticator.

 

From the CLI, use this syntax to restore the config:


execute restore config tftp <filepath> <server fqdn:ipaddr> [password <encryption password>]

execute restore config ftp <filepath> <server fdqn:ipaddr>[:port] [ftp_user] [ftp_pass] [password <encryption password>]

 

Example:

 

execute restore config tftp FACVMKVM-v6.5.0-build1286_170223-1605.conf 10.5.23.153

 

Note:

The configuration is valid only for a specific hypervisor and a specific firmware version. If these differ on the device being restored to, the restore operation will fail. Fortinet support can convert the hypervisor version (when restoring to another hypervisor, such as from VMWare to KVM), but the firmware version is required to match.

If no error is displayed, the config will be restored and FortiAuthenticator will restart.