FMG + FGT + FAP - Change SSID Password via API regularly

[TobiK]

Hi!

We want to implement a monthly change of Guest SSID password change via API automatically. The environment is managed with FortiManager. What would be best practice in this case?

- Change the password via CLI Script on every device from FortiManager, push the CLI script via FMG API

- Change the password in SSID profile and provision via API 

- Anything else?

With the first approach, I guess we will see conflicts and FMG tries to override the password during a following provisioning?

Thanks & Happy Holidays,

Tobi

[Toshi_Esumi]

I don't use either API or AP Manager on FMG. But I think it's up to if you use Central Management for FortiAP or not. If central management, the PSK is in a profile/template so it would complicate the sync process if you change PSK directly at each contoroller FGT. Probably better to change it at FMG and push.
If not central management, probably it wouldn't be a matter which API, FGT's or FMG's, you use to change PSKs altomatically.
In that case, if you change them at FGTs, the changes would be automatically synced (auto-update) with FMG, or if you change it at FMG, yes, you still need to push them to FGTs.

Toshi