FortiPAM
FortiPAM allows you to protect, isolate and secure privileged account credentials, manage and control privileged user access, and monitor and record privileged account activity.
Jackie_T
Staff & Editor
Staff & Editor
Article Id 399493
Description

This article describes the behavior of the automated password changer in FortiPAM.

Scope FortiPAM v1.5.x, v1.6.x.
Solution

The password changer in FortiPAM might not run at the exact time set in the FortiPAM password changer schedule.

For example, the password changer is configured to run at 8:45 AM. But the exact run time shows as 8:41:51 AM.

 

pam timer1.png

 

This is expected behaviour. FortiPAM will include a random deviation from the pre-configured start time to avoid a burst of password changes.

 

To identify the exact password changing time, enable the debug for password changer before making changes to password change setting:

 

diagnose wad debug enable category pwdchg

diagnose wad debug enable level verbose

diagnose debug enable

 

After changing the setting for password change, the below output will be seen on the debug:

 

fortipam password change.png

 

According to the output, the next password change time will be Thu Jul 31 16:32:00 2025.