Factory Reset

[mis1]

Hi,

I have a FG-100F that we bought to start testing a zero-trust type deployment.

Now it has been decided to be used as our primary perimeter FW.

Spent the past hour searching thru cookbooks, forums, admin guides and the lot for how to factory reset this device for re-purposing. No luck. 

Anyone know how to do so on a FG-100F with no reset button?

Thanks

Jeff

[Toshi_Esumi]

No luck??? You couldn't find even this thread?

https://forum.fortinet.com/tm.aspx?m=185870

But I'm assuming you have admin access because you said you were testing. Then "exe factoryreset" in CLI is the most easiest way.

[mhe]

"exec fac" in CLI

[sw2090]

if you don't know the password and there is no reset button the only way to do it would be to format the boot partition in bootloader and then use tftp or some other supported protocol to reflash a firmware image.

If you know the password the method written by above posters is the easiest way.

[ede_pfau]

"any chance"??? all chances! a factory reset will wipe the config completely, that is, reset all settings to default.

OTOH, in recent firmware versions there are variations of the command to _not_ lose the LAN ip address when resetting.

In CLI, just type "exec fact ?" where the '?' will trigger a help text. Then, read up on this in the Handbook (docs.fortinet.com).

[FrancisSmith]

How do you do factory reset? Thank you!

[ede_pfau]

In this situation, the only way is to erase the boot partition, thus deleting the config and firmware image.

You need to connect to the RJ45 serial port, PuTTY 9600/8/N/1.

Then, reboot.

During reboot you get the prompt to "Hit any key to enter the boot menu"

Then you search for "reformat boot partition" and do this.

** The FGT will not be able to boot after this! **

After reboot, you reinstall the firmware by transfering the file via TFTP, all commands use the console (serial port) CLI.

This is well documented on the Knowledge Base site (kb.fortinet.com).