Fortigate Firewall - Two free forti token error

[Umesh]

Dear All,

Need support as we have two Fortigate Firewall with valid contract and both in HA (A-A). Fortigate has two forti token.

My Requirement is - We have to setup two factor authentication with using Forti token. While assigning token to one user. (user - ABC). getting error -

Unable to provision mobile token with forticare... Object set operator error, -7567.

Can anyone please provide solution for it.

Thank you.

[fricci_FTNT]

Hi @Umesh,

Please have a look at the article below:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Cannot-provision-FortiToken-Mobile-due-to-...

Best regards,

[hbac]

Hi @Umesh,

Did you register both FortiGate serial numbers on FortiCloud? Does FortiGate have internet access and able to reach FortiGuard servers? You can try to delete those free tokens and import them again. https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-recover-trial-FortiToken-Mobile-ser...

Regards, 

[Umesh]

Hello,

I did the same things but didn't work for me, Fortitoken status is showing error.

thank you.

[spoojary]

https://community.fortinet.com/t5/FortiToken/Technical-Tip-Expected-behavior-after-transfer-FortiTok... please check this document

[amuda]

Hi,

Since you have followed the KBs and it's still did not work, I think it's best for you to open a ticket to further troubleshoot on this.

[pavankr5]

Hello @Umesh,

The error you're getting, "Unable to provision mobile token with forticare... Object set operator error, -7567,"  relates to  FortiToken or the FortiGate device's configuration.

Ensure that your FortiTokens are properly registered and activated on the FortiGate device.
You can check the registration status by running the command: `diagnose forticare direct-registration product-registration -a "your account@xxx.com" -p "your password" -T "Your Country/Region" -R "Your Reseller" -e 1` If your FortiGate is already registered, you can skip the registration 
delete the token and try to import again.
Add the FortiToken mobile to the FortiGate by running the command: `execute fortitoken-mobile import <your FTM code>`. If your FortiGate already has FortiToken installed,

https://community.fortinet.com/t5/FortiGate/Technical-Note-Fix-Licensed-Mobile-Token-with-Error-Lock...

let us know if you have any queries.

Thanks,

Pavan