Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

Factory Reset


I have a FG-100F that we bought to start testing a zero-trust type deployment.

Now it has been decided to be used as our primary perimeter FW.

Spent the past hour searching thru cookbooks, forums, admin guides and the lot for how to factory reset this device for re-purposing. No luck. 

Anyone know how to do so on a FG-100F with no reset button?




Esteemed Contributor III

No luck??? You couldn't find even this thread?

But I'm assuming you have admin access because you said you were testing. Then "exe factoryreset" in CLI is the most easiest way.


"exec fac" in CLI

Honored Contributor

if you don't know the password and there is no reset button the only way to do it would be to format the boot partition in bootloader and then use tftp or some other supported protocol to reflash a firmware image.


If you know the password the method written by above posters is the easiest way.


"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

Esteemed Contributor III

"any chance"??? all chances! a factory reset will wipe the config completely, that is, reset all settings to default.

OTOH, in recent firmware versions there are variations of the command to _not_ lose the LAN ip address when resetting.

In CLI, just type "exec fact ?" where the '?' will trigger a help text. Then, read up on this in the Handbook (


"Kernel panic: Aiee, killing interrupt handler!"
New Contributor

How do you do factory reset? Thank you!

Esteemed Contributor III

In this situation, the only way is to erase the boot partition, thus deleting the config and firmware image.

You need to connect to the RJ45 serial port, PuTTY 9600/8/N/1.

Then, reboot.

During reboot you get the prompt to "Hit any key to enter the boot menu"

Then you search for "reformat boot partition" and do this.

** The FGT will not be able to boot after this! **


After reboot, you reinstall the firmware by transfering the file via TFTP, all commands use the console (serial port) CLI.

This is well documented on the Knowledge Base site (


"Kernel panic: Aiee, killing interrupt handler!"