Troubleshooting Tip: FortiToken Cloud (FortiIdentity Cloud) shows error -104

[acardona]

Description	This article describes how to troubleshoot when the connection to FortiToken Cloud (FortiIdentity Cloud) fails.
Scope	FortiOS.
Solution	The following error can be seen in the debug of FortiToken: fas_activate_trial[2340]: Sending packet to FTC server: 69.167.109.248 Port: 8686(length:220) fas_set_fd_mgmt_vd[124]: Using vfid=0 (mgmt:0) fas_comm_https_req_rsp[780]: fas_ssl_connect() failed (rc_code: -104) fas_activate_trial[2346]: Received packet from FTC (code:-104 length:0) (null) Error(-104): connection to FortiToken Cloud failed! The Debug shows an SSL error; therefore, it is recommended to check the packet capture of the connection. If the Error is Handshake Failure, it is recommended to check the following: sh full system global | grep ssl-min The output of the command will show the Minimum SSL version that the FortiGate will allow the SSL connection. If the ssl-min shows TLS 1.3, modify to TLS 1.2 configure system global     set ssl-min-proto-version TLSv1-3 end Test the connection by running the following command: execute fortitoken-cloud trial