Is it possible to use the FortiToken 410 for authentication beyond the FortiGate firewall?

[rvanhilst]

I'm on the verge of buying the FortiToken 410, but it comes in a 5-pack and I'm running a one-man show network. Can I use the FortiToken for authentication on other platforms—like my email account, web hosting provider, or password manager?

Your answer is very much appreciated :) Thanks in advance <3

[rbraha · Accepted solution]

Hi @rvanhilst 

FortiToken 410  supports FIDO U2F and FIDO2 protocols can be deployed with FortiAuthenticator ,FortiToken Cloud or Managing the device PIN, please check the guide below.

https://docs.fortinet.com/document/fortitoken/latest/fortitoken-410-deployment-guide/639061/deployme...

[rbraha · Accepted solution]

Hi @rvanhilst 

FortiToken 410  supports FIDO U2F and FIDO2 protocols can be deployed with FortiAuthenticator ,FortiToken Cloud or Managing the device PIN, please check the guide below.

https://docs.fortinet.com/document/fortitoken/latest/fortitoken-410-deployment-guide/639061/deployme...

[rvanhilst · Accepted solution]

Thank you for your reply :) I checked the documentation before asking but I missed this.

Answer: "FortiToken 410 supports the FIDO U2F and FIDO2 protocols, so you can use it for passwordless authentication with any system (such as your Google account) that supports these protocols." Meaning you can use the tokens for other services as well, such as Protonmail, Google, Icloud, etc.

[rvanhilst]

Hi Rbraha,

I have the 410 FortiTokens in my possession but feel lost on the activation process. When I attach a token and try to add it to FortiOS, nothing registers—no command line output, and I don’t see any serial number or seed. Most forum resources focus on mobile tokens.

Because of this—and to avoid the risks (unauthorized access, MITM attacks, spoofing, DoS, etc.) outlined in the FortiOS guide—I’m holding off connecting my FortiGate online until I’ve activated my FortiTokens. I haven’t even activated my license yet and am wondering if that can also be done offline.

Any advice or workarounds for safely activating both my license and FortiTokens using an ultra-secure, offline-first method would be greatly appreciated.

Thanks in advance.