Phone reset or lost cannot activate FortiToken

[RonBrow]

I recently required a factory reset on my cell phone. Soon after I realized I could no longer login to my Fortigate. The problem was both of my logins were protected by Fortitokens. I contacted support and they informed me all I could do was a factory reset of my Fortigate. I did not want to rebuild the Fortigate config from scratch. After some thought I started to look at my backup config files. I was fortunate to have a current backup of the config file of my active Fortigate, which I could just use, but I would be back in the same boat. Fortunately, I have a second Fortigate that is inactive. Using it and looking at an older backup that still had the default admin user info, I copied that information and pasted it into the current backup. This took a couple of attempts to restore the modified config file to the inactive Fortigate. Once I completed it successfully, I was then able to login using the old admin user. Once login I was able to remove both Fortitokens from the active users. I saved this config file, factory reset the active Fortigate and restored it to the saved modified config file. I then reactivated the Fortitoken for only one of the active users and deleted the factory default “admin” user.

[vbandha]

Hi @RonBrow 

Did you have a question regarding this?

If you lose Forti token then you can gain access by reinstalling the firmware as you did.

If the fortigate is connected for management access with fortigate cloud then there is a way to reset from there as well given you have certain things set up.

This article goes over that in detail:

 https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Admin-user-lost-FortiToken-Token-is-...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Recover-access-to-FortiGate-via-FortiCloud...

If you have any other question regarding this, please let me know.

Regards,

Varun

[RonBrow · Accepted solution]

No question, just posting what I did hoping to help someone else.