Technical Tip: How to disable public key authentication FortiNAC uses against modeled devices in Inventory

[blarochelle]

Description	This article describes how to disable FortiNAC's ability to use public key authentication against devices. The setting can be disabled at a device level or a global level.
Scope	FortiNAC-F 7.2 and above.
Solution	To disable FortiNAC's ability to use public key authentication at a global level, edit the /bsc/campusMgr/master_loader/.masterPropertyFile. Add the following lines to the configuration in the uncommented out section of the file: FILE_NAME=./properties_plugin/telnetServer.properties {   com.bsc.plugin.telnet.TelnetServer.ssh.publicKeyAuthEnabled=false } To disable the setting per device, run the following command: device -ip <IP> -setAttr -name SSH_PUBLICKEY_AUTH_ENABLED -value "false" Where <IP> is the actual IP of the modeled device to disable the setting. Example: device -ip 192.168.10.10 -setAttr -name SSH_PUBLICKEY_AUTH_ENABLED -value "false" Note: This does not work in 7.2.8, 7.4.0, or 7.6.1 and will be fixed in the subsequent firmware versions for each train.