Commit failed: Minimum psksecret length is 6

[NOUFOU]

Commit failed: Minimum psksecret length is 6 

I'm  deploying ipsec vpn Template from Fortimanager, I get this error when I make Install Config:

Commit failed: Minimum psksecret length is 6 

but, my psksecret is more thant 6 

Fortimanager 7.6.2, Forigate 7.4.5

It work on anothers Fortigates

Maybe someone knows some solutions ?

[kaman]

Hi NOUFOU,

Can you please edit your template tunnel, re-enter the PSK manually in the field, save it.
Then try to install and let me know if this is successful or not.

Is it possible to check if when creating a new IPSEc Template ( save it only once ) and then try to install it, is this successfull or not? (You can just stop at Install Preview to check if the first Copy step is successful or not).

If still issue persists, then reproduce this issue while collecting the below diagnostic command output from both FortiManager and managed FortiGate.

- On the FortiManager:
diagnose debug application securityconsole 255
diag debug app depmanager 255
diagnose debug application fgfmsd 255 <fgt device name>
diagnose debug enable
diagnose debug time enable
! After the installation error, stop debugging with the commands below
diagnose debug disable
diagnose debug reset

- On the FortiGate:
exe tac report
diagnose debug application fgfmd 255
diagnose debug cli 255
diagnose debug console time enable
diagnose debug enable
! After the installation error, stop debugging with the commands below
diagnose debug disable
diagnose debug reset

Regards

[dingjerry_FTNT]

Hi @NOUFOU ,

We do have an existing Mantis 1084696 for this issue.  However, the fix is already included in FMG 7.6.2 GA. 

It should not be related to the FGT versions.  But if your other FGTs are not 7.4.5, you may consider upgrading this FGT in issue for a try.

Otherwise, please open a TAC ticket for assistance.

[PeterAndries]

Workaround

After updating the PSK on all tunnels of the list, the error does not persist.