Technical Tip: 'Some Unknown Error!' while assigning FortiToken to a user

SAJUDIYA · ‎09-10-2023

Description

This error discusses 'Some Unknown Error!' while assigning FortiToken to a user.

Generally, this error is regarding connectivity to the FortiGuard server or an issue with verifying the Fortimobile Token.

Scope

FortiGate.

Solution

When Fortimobile Token is checked, it will show that it is not used as below:

diag fortitoken info
FORTITOKEN DRIFT STATUS
FTKMOxxxxxxxxxEE 0 new

Total activated token: 0
Total global activated token: 0

Token server status: reachable

show user fortitoken
config user fortitoken

edit "FTKxxxxxxxxxx9EE"
set license "EFTMxxxxxx"
set reg-id "xxx"
set os-ver "5.4.2_IOS"
next

When FortiToken is assigned, the below error will appear:

Solution:

If there is fortiguard-anycast enabled, try to change the anycast server from Fortinet to AWS:

config system fortiguard

set fortiguard-anycast-source aws

end

If anycast is not used or if there is still an issue with anycast-server enabled, disable anycast and can use udp/53 or udp/8888 port:

config system fortiguard

set fortiguard-anycast disable

set port 8888

set protocol udp

end

Now, try to assign the FortiToken again and it should work.