FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
atahir
Staff
Staff
Article Id 323835
Description This article describes how to re-create the default 'admin' user on FortiGate.
Scope FortiGate.
Solution

If a user has deleted the default admin account and is accessing the FortiGate via external authentication server, they might not have the option to create another local account with Super Admin rights through the GUI.

To re-create an admin account, follow these steps:

 

  1. Log in to FortiGate via an external authentication server (Should be admin with Super Admin privileges).
  2. Access the FortiGate via the CLI.
  3. Use the following commands to re-create a local Super Admin account:

 

config system admin

edit <new_admin_name>

set accprofile super_admin

set password <new_password>

next

end

 

To delete the admin account, see: Technical Tip: How to delete the default 'admin' user account on a FortiGate unit.

 

If all existing admin users are not Super Admin, it is not necessary to recover super admin access with a backup made with a prof_admin account.

 

Related article: 

Technical Tip: Recover admin password without maintainer account