Description | This article describes the typical circumstances behind the 'FortiToken Synchronization'. |
Scope | FortiAuthenticator. |
Solution |
Event ID 10107 refers to an event log entry related to FortiToken time drift synchronization. This log can be used for both FortiToken Mobile and Hardware tokens.
Two-factor authentication (2FA) tokens rely on the device and server having their clocks aligned, since codes are generated from the current time. If there is time drift and the clocks are out of sync, the token will produce a code that does not match what the FortiAuthenticator expects, causing login failures.
The sample system event message will look like below:
Changing the time drift of Hardware tokens:
date=2025-09-03 time=20:13:33+0000 oid=8888 logid=10107 cat="Event" subcat="Admin Configuration" level="information" nas="" action="Edit" status="Success" msg="Successfully synchronized FortiToken FTK200XXXXXXXXXX. Drift was updated to -6." user="admin"
date=2025-09-03 time=20:13:33+0000 oid=8888 logid=10107 cat="Event" subcat="Admin Configuration" level="information" nas="" action="Edit" status="Success" msg="Successfully synchronized FortiToken FTK220XXXXXXXXXX. Drift was updated to 4." user="admin"
Changing the time drift of Mobile Tokens:
date=2025-09-03 time=20:13:33+0000 oid=8888 logid=10107 cat="Event" subcat="Admin Configuration" level="information" nas="" action="Edit" status="Success" msg="Successfully synchronized FortiToken FTKMOBXXXXXXXXXX. Drift was updated to 63." user="admin"
These logs can be viewed under Log Access -> Logs -> filter '10107' |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.