Heads up: You have to type the userid and password within a 15 seconds of the login prompt first appearing. If you take too much time you should reboot the firewall again.
- Connect the console cable to the Fortigate and fire up your favorite terminal emulator
- Reboot the firewall unit.
- At the console login prompt, type in "maintainer" as the userid.
- Type in bcpbFGTxxxxxxxxxxxxx as the password. xxxxxxxxxxxxx will be the S/N of the Fortigate. The serial number is case sensitive so for example you should use FGT60B, not FGT60b. If that does NOT work try bcpbxxxxxxxxxxxxx as the password.
- After logging in, change the admin password:
edit admin
set password
next
end
56 comments:
Does this only work on certain versions? Not having much luck, 4.0 MR1 interim release.
it was working up to pre 3.0 (2.8 maybe) versions as far as I know.
Just done this on the latest release.
But you do have to power cycle the box and enter the userid immediately the login prompt comes up. Haveing the password in the paste buffer also makes for quick entry. But don't use ctrl-v with Hyperterm, it sends the ctrl-v to the host - use Edit, Paste to host.
Worked for me. Check that the format is 13 digits if the serial number is 12 add a dash - in my case bcpbFGT-XXXXXXXXXXXX worked
does anyone knows if this procedure works with fortianalyzer too ?
thanks
Yes this procedure is vaild for Fortianalyzer as well.
does anyone knows if this procedure works with Fortimanager too?
Thanks
Yes, works with FortiManager as well.
Works on the latest firmware but immediately after restart.
works on 4.0 mr2 patch 8 for FGC80C
You must do this within 14 seconds of logon prompt
Also you must set the accprofile
so
config system admin
edit admin
set password
set accprofile super_admin
end
I've tried this numerous times on a 110c I have. tried multiple ways with multiple things left out. Any ideas how to get in this one? I can't find anything anywhere for 100 series devices.
I used these instructions to recover admin password on a Fortigate FG-30B and FG-60B. They worked exactly as described. Thank you very much for this post.
Just tried with a FWF-60C. No dice.
Verified this on a FortiAnalyzer 100C and it works. The username is maintainer and the password is bcpbFLxxxxxxxxxxxxxx with the xxx's being the rest of the SN.
Fortigate 400: When I try your procedure it seems to work, but after nothing happens!
No requests for commands, nothing ... it waits 1 minute and after it log me off and request a login user!
Any idea, please?
I tried this solution for 200B, its works for me. How about Analyzer 100C?
Confirmed to work on 30B. The serial number is 16 characters long.
In my case I used bcpbFWFxxxxxxxxxxxxx. "FWF" is the first 3 characters of the serial number as recorded on the back of the device and xxx's as the remainder making a total of 16.
I tried so many time but still this is what I always received.
maintainer
Password: ********************
The hashed password length is invalid
Login incorrect
Please kindly help me to reset the password..many thanks
Tried this tip with a Fortianalyzer 100C. Worked like a charm. Thanks for your infos !!
Hi, I am utterly useless or even a moron perhaps... but why doesn´t this work?
FGT50B3G10604933 login: maintainer
Password: ********************
Welcome !
FGT50B3G10604933 # config system admin
4832: Unknown action 3
Command fail. Return code -1
You may have vdom's configured on your fw.
you will need to set context with the 'config global' command. And then follow the password reset instructions from the top of the article.
I have a FortiWifi 60C. I consoled in to try this but it didn't work. What did work, was I cycled the power by pulling the plug and letting it restart. As soon as the login came back up, I pushed the reset button on the back right with a paperclip.
IT IS NOT WORKING WITH 80C
ALSO IS NOT WORKING WITH FORTIWIFI 60 B
4-25-2013
I confirm having just done all of htese units 10 minutes prior to this post.
FGT60D
FGT110C
FW80CM
Few things I see wrong in the reposnces
Wifi is not FWF its FW
Boot your unit up viewing it post with a termnal. I have noticed FGT and FG between A,B,C, and D units.
The number of digits in SN vary. I have saw 12,13, and 16
Most of all you are all wrong because you are not considering how crappy and inconsustant fortinet really is. There Q&A is not good. Most of the units for any exact model have multiple hardware versions under the hood hence al the info in here is wrong and right. Just depends if you have a gen1 a rev2 and such !!
This MUST be done in the first 14 seconds after a reboot. Copy n paste the password
Yo tengo un FortiWIFI 60A, el numero de serie empieza con FWF60A, no funciona este procedimiento, espero alquien tenga alguna solución
hallo firewall guru, this article really helped me, and I asked for permission to copy this article into my blog
Sure thing. As long as you link back to my blog :)
Muchas gracias, me funciono a la perfeccion. Tengo un FG 100C.
Muy importante tener en cuenta el tiempo para hacerlo, lo mejor es copiar la serie y pegarla en la consola.
Gracias de nuevo.
Possibly a better way to explain it...
The unit will provide serial number on startup via Console.
Eg;
Serial number:FG300B39XXXXXXXX
Using username "maintainer", simply prepend "bcpb" to the string provided as the serial number. This let me in straight away.
Gracias,
me ayudo mucho en FTG 100A
Tried resetting on a Fortigate 60 & it works like a charm!
Question though i still have an F 60 on production i want to recover the password. would it anyway affect running config? i dont have a backup config. im scared it would mess everything.
any help would be appreciated.
cheers!
You should be able to reset the password without losing your config.
Thanks !!!
It worked for me rebooting the unit on a 50B with user mainatiner and with no dash ver:04000010
We got same problem in Fotigate 60C. Main tip is
1)Kindly check your serial no is 13digit.If not kindly include dash(-) inbetween FGT and serial no
2)we need to enter username(maintainer) and password within 14 seconds once login ask.
Please follow it.
it works for me in a fortigate 50b,
It works on 100A (MR2 patch9). only thing is we need type username & password with 15 sec of the first appear the login prompt
Hi there!
Great blog, great help, thanks!
My case: FortiGate 100.
Worked ok with the original plan, 13 digits, + good posted tips here like to have the SN already copied to Clipboard (I Scanned the bar code to NotePad in order to be sure it’s the right SN).
Please forgive me my nearly offtopic question: I needed to change the pwd because form one moment to another the previous pwd was not longer accepted (and nobody has changed it). Does anybody know about this kind of bug in these FWs?
Thanks again.
Hi Guys,
Is it possible to reset password from remote location? I have physical hardware in our remote office. I have Serial Number but for now I'm unable to plug directly on Management Console (RJ45 to DB9)
Appreciate if anyone help me with this.
Many Thanks,
According to Fortinet support you cannot reset the admin password remotely. A console connection is required.
Thank you, this worked for my FWF80CM running 4.0 MR2 Patch 2.
E.
Funciono para mi de la siguiente forma en Fortigate 110C:
1.- Conectar en modo consola
2.- Apagar y reiniciar la unidad Fortigate dejandola conectada
3.- Cuando Reinicie tenemos solo 14 segundos para ingresar:
Usuario: maintainer
password: bcpbFG100C5G09108315
Es recomendable tener todo el password ya copiado en un archivo de texto para pegarlo de inmediato en la consola de la hyperterminal.
Eso es todo.
Màs informaciòn aquì: http://docs-legacy.fortinet.com/fgt/sysadmin/Resetting_a_lost_admin_password.pdf
Worked like a charm for the FortiGate 620B I have here, many thanks!
plz help me out i cant able to reset the password, i tryed 13digits serial number too username: maintainer password:bcpb...... not working other then dis any other solution to reset password.
Thanks.
On FortiVM in evaluation period the password is bcpbFGVMEV0000000000 (At least on Hyper-V edition at this date ;-))
I am able to login with maintainer as username
no object in the end
Command fail. Return code 1
I am getting above error when running below command
config system admin
command parse error before 'global'
Command fail. Return code 1
also i am getting above error while executing below command
config global
Please help me
I need your help people. I have a Fortigate-60 and I want to reset it because I can not loggin to the web interface so I need a new user id and password. I follow the instructions to do it, but after the: ''Firewall initalizing...'' and ''System is started'', appears Arizona login, so I type ''maintainer'' and type the bcpb N/S, and then it says ''login incorrect''. What I have to do? Help please.
Thanks a lot. For the 100D it should be bcpbFG100DXXXXXXXXXX.
Worked like a charm.
Dear Sirs,
I have a Fortinet 50B . unfortunately MAINTAINER account is disabled.
please help.
confirmed this worked with my fortiwifi 60c - but needed to follow these intructions also: (https://forum.fortinet.com/tm.aspx?m=124931)
Config system admin
edit admin
set accprofile "super_admin"
set vdom "root"
set password
end
Dear Firewall Gurus,
I have a fortiweb decive FV400DXXX, unfortumately lost the admin password. I am trying to reset it however this method doesnt seem to work after login i just get the prompt
FortiWeb login: maintainer
Password: ********************
Login incorrect
i have tried waiting 15- 35 secs , i have tried waiting for 14 secs, i have tried immediately but same result
FortiWeb login: maintainer
Password: ********************
Login incorrect
the password format is bcpbFV400DXXXXXXXXX
PLEASE HELP!!!
Hi please help i have a fortinet 100d i have logged in as maintainer however i see that the config that was loaded have no accounts at all configured how can i config an admin? the exec command isnt working for me.
Please Help me, I have fortigate 60. Manufacture Date 2007 month 06. I used the username as maintainer and password bcpb+ serial. But Login incorrect msg displayed.
Pl help me to reset the admin password
I also have a 60D, i use it at home to learn
I’m new in the world of FG, but when i try to login it tell me: ”Login incorrect”
I do know my admin password, I’m just testing it.
I did the config enable maintainer but it still tells me: ”Login incorrect”
Post a Comment