Technical Tip: How To Reset To Factory Default Configuration using external button

[kjamshir]

Description

This article explains how to factory reset the configuration using the external reset button on low-end FortiGate models

Scope

FortiGate 60E/61E-POE, FortiGate/FortiWiFi-60F/61F, FG/FWF 40F, FortiGate-80F, FortiGate/FortiWifi 60C, and other small business models.

Solution

On some FortiGate there is an external button:

•  Low-end or small business models: FortiGate 60E/61E-POE, FortiGate/FortiWiFi 60F/61F, FG/FWF 40F, FortiGate-80F, FortiGate/FortiWifi 60C, this button labeled with 'RESET' on the Back Panel of the hardware.
• When enabled (default state), resets the unit to its factory default settings if pressed during the first 30 or 60 seconds after a reboot.
• Mid to high-end models, this button is not labeled and is NOT used to Factory Reset the FortiGate but is called external NMI (non-maskable interrupt) watchdog feature.

•  This button is useful to be pressed when the FortiGate is at frozen status and not responding to management or pass through traffic.

•  When pressing this button, this causes the software to dump registers/backtraces to the console. After the data is dumped, device reboots. The output will be useful for TAC support to find the root cause of the frozen state.
• To confirm the purpose of this external button on you FortiGate:

diagnose hardware test button

• The output will show you if it is used for Reset Button or NMI Button. You can press 'N' so you don’t continue the test.
•  This article is about the models that support RESET button. When pressed, FortiGate configuration will be reset to the default factory configuration.
• The location of the button is shown below.

• The behavior of the reset button will depend also upon the firmware version that is being used. One of the options below will factory default the unit:

Option A.

1.  Reboot FortiGate.

• It should be noted that a power-cycle is required and that using the CLI command #execute reboot may not be sufficient to enable the reset button.

2. Wait until the FortiGate OS is running again.

• You will know the FortiGate OS is at the running stage when "STATUS"/"STA" LED flashing it means console prompt the login

3.  In the first 30 or 60 seconds press external button which is used to Factory Reset the FortiGate

• The reset button can only be used in the first 30 or 60 seconds depends on the model after a power-cycle.
•  If the uptime of the unit more than 30 or 60 seconds, the RESET button is disabled and when pressed the console output will prompt you with below message and NO ACTION IS TAKEN IF PRESS AT THIS STAGE.
  

FortiGate :                                                                                                                                                          

Reset button has been disabled, please press the button during the first 60 seconds after a power-cycle .

4. If the external button is pressed on time, the unit reboots, and the default configuration will be active.

Option B.

1. The reset button can be pressed at any time and the unit will perform a factory reset.
2. After the unit reboots the default configuration will be active in the same way as if the CLI command #execute factoryreset had been used