FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
This article describes how Primary/Secondary election is done in Cluster member mode of FortiAuthenticator.
Scope
FortiAuthenticator.
Solution
If the uptime difference is less than 5 minutes, the highest priority FortiAuthenticator will become the Primary.
If the uptime difference is more than 5 minutes, the FortiAuthenticator with the longest uptime will become the Primary.
Note:
When the FortiAuthenticator HA Cluster mode is updated and the FortiAuthenticator uptime difference is more than 5 minutes after the upgrade, the FortiAuthenticator with the longest uptime will become the primary. That is the reason why the HA Primary changes after a firmware upgrade without following the HA priority.
