FortiAuthenticator
FortiAuthenticator provides access management and single sign on.
matanaskovic
Staff
Staff
Article Id 243656

Description

 

This article describes how to solve an issue where multiple FortiToken hardware instances have the "Missing seed" status on FortiAuthenticator.

 

Scope

 

FortiAuthenticator 6.4, FortiToken Hardware.

 

Solution

 

After importing FortiToken hardware to FortiAuthenticator, a 'Missing seed' status may appear.

 

matanaskovic_0-1674491024739.png

 

To solve this issue, Fortinet TAC support needs to reset the seed for all affected tokens on the FortiGuard server. Submit a new case with TAC support to solve this issue.

 

After resetting the token seed, it is necessary to remove all affected tokens from the FortiAuthenticator database. Select all FortiToken hardware items with the 'Missing seed' status and delete them.

 

Next, create or re-import deleted tokens using their serial number in the FortiAuthenticator database. After this step, the FortiToken hardware will be successfully registered on FortiAuthenticator and ready to use.

 

matanaskovic_2-1674491641625.png

 

TAC can reset all hardware tokens except 211. 211 tokens have their seeds on CDs.

 

Related article:

https://docs.fortinet.com/document/fortiauthenticator/6.4.6/administration-guide/115040/fortitoken-p...

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Import-FortiToken-hardware-using-...