Technical Tip: 'The on-board credentials for the FortiToken Mobile push notification service have expired. In order for the service to work properly, new credentials must be retrieved from the FortiGuard Service.'

[hlngan]

Description	This article describes the error pop up window displayed when login the FortiAuthenticator GUI.
Scope	FortiAuthenticator 6.0.X.
Solution	When login the FortiAuthenticator GUI, a pop up showing 'The on-board credentials for the FortiToken Mobile push notification service have expired. In order for the service to work properly, new credentials must be retrieved from the FortiGuard Service.' Selecting the update does not work. The issue was due to old certificate for push notification. Upgrade the FortiAuthenticator with the 6.1.1 or above release to resolve the problem. https://docs.fortinet.com/document/fortiauthenticator/6.1.1/release-notes/568509/whats-new FortiToken Mobile: Hosted Push Proxy server for FortiToken Mobile push FortiAuthenticator now sends the FortiToken Mobile push request to a FortiGuard/FortiCloud push proxy. In order to support the FortiToken Mobile push feature, FortiAuthenticator must be able to reach push.fortinet.com over TCP/443.