Technical Tip: Reset FortiGate admin password via FortiGate Cloud

[ibituya]

Description	This article describes how to reset the password of an admin account from FortiGate Cloud. This guide does not apply to recreating the super_admin account role once it was lost from configuration. FortiGate Cloud (prof_admin) cannot create a role that has additional privileges (super_admin).
Scope	FortiGate Cloud.
Solution	FortiGate requires a FortiGate Cloud paid subscription to perform configuration changes from FortiGate Cloud, including resetting the admin password. The configuration management feature is disabled on FortiGate Cloud, which is activated with only a free account (no subscription). Note: To reset the admin password for a FortiGate device, it will be necessary to have a FortiGate Cloud paid subscription; otherwise, a 'read only' access will be granted without any privileges, as shown in the image below.   To reset the admin password for a FortiGate with a FortiGate Cloud paid subscription, follow these steps: From the FortiGate Cloud Assets List View page, select the FortiGate serial number and go to Device View. Go to Management -> Config -> System -> Administrators and edit the admin account that requires the password reset. Select Change to reset the admin password. Save the changes and select Deploy. Review the deployment log for the changes that will be deployed to the FortiGate. To deploy the change immediately to the FortiGate, check the Immediately option. A confirmation window will be shown once the deployment is completed successfully. Attempt to access the FortiGate again using the updated password. Note: In-cloud FortiGate configuration editing and deployment will be discontinued in Q3 2024. Use the Remote Access or Script option to manage the FortiGate. To reset the admin password using the Script option, follow these steps:  From the FortiGate Cloud page, go to Management -> Script/CLI scripts -> Script list and select Add/Create New.   Once the Add Script prompt appears, enter the CLI script to either edit the existing admin account or create a new admin account. Add the following script to reset the admin password: config system admin     edit "admin"         set accprofile <admin-profile>         set password <enter-new-password>     next end If multi-vdom is enabled on the FortiGate, use the following script instead: config global     config system admin         edit "admin"             set accprofile <admin-profile>                set password <enter-new-password>         next     end From the FortiGate Cloud Assets List View page, select the FortiGate serial number and go to Device View.  Go to Management -> Script and select the Schedule option. It is possible to execute the script immediately by selecting Run Now or setting a schedule to run the script. Note: The script needs to be configured under Global -> Management, and run the script after selecting the required Device. Related documents: Technical Tip: Recover access to FortiGate via FortiCloud FortiGate Cloud 24.3.0 Administration Guide Introduction