FortiAuthenticator
FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
kjiye
Staff & Editor
Staff & Editor
Article Id 404935
Description This article describes that if OTP is set for the administrator account, login will fail when connecting to a passive device, even if the OTP is entered manually.
Scope FortiAuthenticator.
Solution

This occurs when FortiAuthenticator is configured in HA (A-P) and OTP is enabled on the administrator account.
Even if the OTP is manually entered on the passive device, login will fail.


The log remains as below:

 

log.png
Authentication failed, cannot update token attribute in database

 

This will be fixed in v6.5.7, v6.6.5, and v6.7.0.
The connection must be successful if the OTP is manually entered into the passive device.