Troubleshooting Tip: Password Recovery when a backup file of the configuration exists

[gonzalezw]

Description	This article describes how to restore the 'admin account' when no other admin accounts are available, relying solely on an existing backup file.
Scope	FortiGate v7.2.4 and later.
Solution	Hard reset the device: Technical Tip: How To Reset To Factory Default Configuration using external button Look in the backup file for the following line: config system admin     edit "admin"         set password ENC SH28VIvRtYEOIwFnrVEwQ1JNX+9GoopNKSrus9NVar40k5N7ouu5x4JjzJtkME= Delete the line: 'set password ENC SH28VIvRtYEOIwFnrVEwQ1JNX+9GoopNKSrus9NVar40k5N7ouu5x4JjzJtkME=' and save the changes in the file editor. Upgrade the Firmware version of FortiGate to the same backup file version.  Log into the unit using the default IP: https://192.168.1.99, then upload the backup file.   After the FortiGate completes the reboot process, enter the username 'admin' and leave the password field blank. Once the firewall is back online, hit 'Enter', and it will be possible to log in. After successfully logging in, the option to update the admin password will be accessible. Select the 'admin' user and select 'Edit. Select 'Change Password', and create a new password.  Note: It is a best practice to have a second super_admin account to avoid going through the process above.