FTM deprovision

[SMK]

We are receiving following error message from few weeks,

"ftm deprovision: disabled local user because ftm activation expired. admin must be cautious to re-enable this user because it will be allowed access without token"

What can be the reason for this. These users are already activated their soft tokens and worked without any issues. Suddenly they faced this FTM deprovisioning issue.

Model: FortiAuthenticator VM

FortiAuthenticator

[fcatena]

we are in 6.4.8

[gmsrt_69]

6.4.1

[SMK]

Hi All,

Does anyone had a chance to resolve this issue? Please share.

[akanibek]

Dear @SMK,

could you tell me your FAC version? Have you made any upgrade?

[fcatena]

Hi everyone,
I'm also having the same problem,

Fortinet says to try rebooting the FAC, the service that needs to contact fortitokenmobile.fortinet.com doesn't run (it should run every 3-5 minutes).

There is a ticket inside them..

Greetings

[Erion]

This error means that FortiAuthenticator could not contact fortitokenmobile.fortinet.com to verify the status of the token. Firstly, check from FortiGate if fortitokenmobile.fortinet.com can be reached, and check also from FortiAuthenticator. Secondly, check in FortiGate if traffic versus fortitokenmobile.fortinet.com has some deep packet inspection enabled or not.