Technical Tip: Enable the disabled default admin account

[cysaw]

Description
This article describes how to enable the disabled default admin account. 

See the default admin account via WebUI is not possible after disabled even logged with other admin account with 'super_admin_prof'.

It will prompt error below if editing the default admin account with other admin account is attempted with 'super_admin_prof'.

# config system admin
    (admin) edit admin
    Command faild(-37). Error string:

In CLI command, the default admin account is visible but the status is 'disable'.

# config system admin
    edit admin
        set status disable
        set access-profile super_admin_prof
    next
    edit fortinet
        set password ENC SH2+HUTb+XKFQdvdF5cSlaOhodqnPsUbVc4AjCvK8ekCxXPgYgtW4Si1XaKRXA
        set access-profile super_admin_prof
        set language english
    next
End

Solution
1) Backup the config file.
2) Modify the config file with text editor.
3) Search 'config system admin' in config file.
4) Setting below is visible.

# config system admin
  edit admin
    set status disable
    set access-profile super_admin_prof
  next 

5) Delete 'set status disable' from the default admin account like below.

# config system admin
  edit admin
    set access-profile super_admin_prof
  next 

6) Save it.
7) Login to Fortimail WebUI with other admin account and restore it to Fortimail device.

Note:
Restoring configuration will reboot the Fortimail device.

Result:
Login to Fortimail with default admin account after rebooting.