Friday, August 28, 2009

Resetting a lost Fortigate Admin Password

If you have lost the admin password for a Fortigate you can reset it if you have physical access to the box.

Heads up: You have to type the userid and password within a 15 seconds of the login prompt first appearing. If you take too much time you should reboot the firewall again.
  • Connect the console cable to the Fortigate and fire up your favorite terminal emulator
  • Reboot the firewall unit.
  • At the console login prompt, type in "maintainer" as the userid.
  • Type in bcpbFGTxxxxxxxxxxxxx as the password. xxxxxxxxxxxxx will be the S/N of the Fortigate. The serial number is case sensitive so for example you should use FGT60B, not FGT60b. If that does NOT work try bcpbxxxxxxxxxxxxx as the password.
  • After logging in, change the admin password:
config system admin
edit admin
set password
next
end

56 comments:

  1. Does this only work on certain versions? Not having much luck, 4.0 MR1 interim release.

    ReplyDelete
  2. it was working up to pre 3.0 (2.8 maybe) versions as far as I know.

    ReplyDelete
  3. Just done this on the latest release.

    But you do have to power cycle the box and enter the userid immediately the login prompt comes up. Haveing the password in the paste buffer also makes for quick entry. But don't use ctrl-v with Hyperterm, it sends the ctrl-v to the host - use Edit, Paste to host.

    ReplyDelete
  4. Worked for me. Check that the format is 13 digits if the serial number is 12 add a dash - in my case bcpbFGT-XXXXXXXXXXXX worked

    ReplyDelete
  5. does anyone knows if this procedure works with fortianalyzer too ?

    thanks

    ReplyDelete
  6. Yes this procedure is vaild for Fortianalyzer as well.

    ReplyDelete
  7. does anyone knows if this procedure works with Fortimanager too?

    Thanks

    ReplyDelete
  8. Yes, works with FortiManager as well.

    ReplyDelete
  9. Works on the latest firmware but immediately after restart.

    ReplyDelete
  10. works on 4.0 mr2 patch 8 for FGC80C
    You must do this within 14 seconds of logon prompt
    Also you must set the accprofile
    so
    config system admin
    edit admin
    set password
    set accprofile super_admin
    end

    ReplyDelete
  11. I've tried this numerous times on a 110c I have. tried multiple ways with multiple things left out. Any ideas how to get in this one? I can't find anything anywhere for 100 series devices.

    ReplyDelete
  12. I used these instructions to recover admin password on a Fortigate FG-30B and FG-60B. They worked exactly as described. Thank you very much for this post.

    ReplyDelete
  13. Just tried with a FWF-60C. No dice.

    ReplyDelete
  14. Verified this on a FortiAnalyzer 100C and it works. The username is maintainer and the password is bcpbFLxxxxxxxxxxxxxx with the xxx's being the rest of the SN.

    ReplyDelete
  15. Fortigate 400: When I try your procedure it seems to work, but after nothing happens!
    No requests for commands, nothing ... it waits 1 minute and after it log me off and request a login user!

    Any idea, please?

    ReplyDelete
  16. I tried this solution for 200B, its works for me. How about Analyzer 100C?

    ReplyDelete
  17. Confirmed to work on 30B. The serial number is 16 characters long.
    In my case I used bcpbFWFxxxxxxxxxxxxx. "FWF" is the first 3 characters of the serial number as recorded on the back of the device and xxx's as the remainder making a total of 16.

    ReplyDelete
  18. I tried so many time but still this is what I always received.

    maintainer
    Password: ********************
    The hashed password length is invalid
    Login incorrect

    Please kindly help me to reset the password..many thanks

    ReplyDelete
  19. Tried this tip with a Fortianalyzer 100C. Worked like a charm. Thanks for your infos !!

    ReplyDelete
  20. Hi, I am utterly useless or even a moron perhaps... but why doesn´t this work?

    FGT50B3G10604933 login: maintainer
    Password: ********************
    Welcome !

    FGT50B3G10604933 # config system admin
    4832: Unknown action 3
    Command fail. Return code -1

    ReplyDelete
  21. You may have vdom's configured on your fw.

    you will need to set context with the 'config global' command. And then follow the password reset instructions from the top of the article.

    ReplyDelete
  22. I have a FortiWifi 60C. I consoled in to try this but it didn't work. What did work, was I cycled the power by pulling the plug and letting it restart. As soon as the login came back up, I pushed the reset button on the back right with a paperclip.

    ReplyDelete
  23. ALSO IS NOT WORKING WITH FORTIWIFI 60 B

    ReplyDelete
  24. 4-25-2013
    I confirm having just done all of htese units 10 minutes prior to this post.

    FGT60D
    FGT110C
    FW80CM

    Few things I see wrong in the reposnces

    Wifi is not FWF its FW

    Boot your unit up viewing it post with a termnal. I have noticed FGT and FG between A,B,C, and D units.

    The number of digits in SN vary. I have saw 12,13, and 16

    Most of all you are all wrong because you are not considering how crappy and inconsustant fortinet really is. There Q&A is not good. Most of the units for any exact model have multiple hardware versions under the hood hence al the info in here is wrong and right. Just depends if you have a gen1 a rev2 and such !!

    ReplyDelete
  25. This MUST be done in the first 14 seconds after a reboot. Copy n paste the password

    ReplyDelete
  26. Yo tengo un FortiWIFI 60A, el numero de serie empieza con FWF60A, no funciona este procedimiento, espero alquien tenga alguna solución

    ReplyDelete
  27. hallo firewall guru, this article really helped me, and I asked for permission to copy this article into my blog

    ReplyDelete
  28. Sure thing. As long as you link back to my blog :)

    ReplyDelete
  29. Muchas gracias, me funciono a la perfeccion. Tengo un FG 100C.

    Muy importante tener en cuenta el tiempo para hacerlo, lo mejor es copiar la serie y pegarla en la consola.

    Gracias de nuevo.

    ReplyDelete
  30. Possibly a better way to explain it...

    The unit will provide serial number on startup via Console.

    Eg;
    Serial number:FG300B39XXXXXXXX

    Using username "maintainer", simply prepend "bcpb" to the string provided as the serial number. This let me in straight away.


    ReplyDelete
  31. Gracias,
    me ayudo mucho en FTG 100A

    ReplyDelete
  32. Tried resetting on a Fortigate 60 & it works like a charm!

    Question though i still have an F 60 on production i want to recover the password. would it anyway affect running config? i dont have a backup config. im scared it would mess everything.

    any help would be appreciated.

    cheers!

    ReplyDelete
  33. You should be able to reset the password without losing your config.

    ReplyDelete
  34. Thanks !!!

    It worked for me rebooting the unit on a 50B with user mainatiner and with no dash ver:04000010

    ReplyDelete
  35. We got same problem in Fotigate 60C. Main tip is
    1)Kindly check your serial no is 13digit.If not kindly include dash(-) inbetween FGT and serial no
    2)we need to enter username(maintainer) and password within 14 seconds once login ask.
    Please follow it.

    ReplyDelete
  36. it works for me in a fortigate 50b,

    ReplyDelete
  37. It works on 100A (MR2 patch9). only thing is we need type username & password with 15 sec of the first appear the login prompt

    ReplyDelete
  38. Hi there!
    Great blog, great help, thanks!

    My case: FortiGate 100.
    Worked ok with the original plan, 13 digits, + good posted tips here like to have the SN already copied to Clipboard (I Scanned the bar code to NotePad in order to be sure it’s the right SN).

    Please forgive me my nearly offtopic question: I needed to change the pwd because form one moment to another the previous pwd was not longer accepted (and nobody has changed it). Does anybody know about this kind of bug in these FWs?

    Thanks again.

    ReplyDelete
  39. Hi Guys,

    Is it possible to reset password from remote location? I have physical hardware in our remote office. I have Serial Number but for now I'm unable to plug directly on Management Console (RJ45 to DB9)

    Appreciate if anyone help me with this.

    Many Thanks,

    ReplyDelete
  40. According to Fortinet support you cannot reset the admin password remotely. A console connection is required.

    ReplyDelete
  41. Thank you, this worked for my FWF80CM running 4.0 MR2 Patch 2.
    E.

    ReplyDelete
  42. Funciono para mi de la siguiente forma en Fortigate 110C:

    1.- Conectar en modo consola
    2.- Apagar y reiniciar la unidad Fortigate dejandola conectada
    3.- Cuando Reinicie tenemos solo 14 segundos para ingresar:
    Usuario: maintainer
    password: bcpbFG100C5G09108315

    Es recomendable tener todo el password ya copiado en un archivo de texto para pegarlo de inmediato en la consola de la hyperterminal.

    Eso es todo.

    ReplyDelete
  43. Màs informaciòn aquì: http://docs-legacy.fortinet.com/fgt/sysadmin/Resetting_a_lost_admin_password.pdf

    ReplyDelete
  44. Worked like a charm for the FortiGate 620B I have here, many thanks!

    ReplyDelete
  45. plz help me out i cant able to reset the password, i tryed 13digits serial number too username: maintainer password:bcpb...... not working other then dis any other solution to reset password.

    Thanks.

    ReplyDelete
  46. On FortiVM in evaluation period the password is bcpbFGVMEV0000000000 (At least on Hyper-V edition at this date ;-))

    ReplyDelete
  47. I am able to login with maintainer as username
    no object in the end
    Command fail. Return code 1

    I am getting above error when running below command
    config system admin

    command parse error before 'global'
    Command fail. Return code 1

    also i am getting above error while executing below command

    config global

    Please help me

    ReplyDelete
  48. I need your help people. I have a Fortigate-60 and I want to reset it because I can not loggin to the web interface so I need a new user id and password. I follow the instructions to do it, but after the: ''Firewall initalizing...'' and ''System is started'', appears Arizona login, so I type ''maintainer'' and type the bcpb N/S, and then it says ''login incorrect''. What I have to do? Help please.

    ReplyDelete
  49. Thanks a lot. For the 100D it should be bcpbFG100DXXXXXXXXXX.

    Worked like a charm.

    ReplyDelete
  50. Dear Sirs,
    I have a Fortinet 50B . unfortunately MAINTAINER account is disabled.
    please help.

    ReplyDelete
  51. confirmed this worked with my fortiwifi 60c - but needed to follow these intructions also: (https://forum.fortinet.com/tm.aspx?m=124931)

    Config system admin
    edit admin
    set accprofile "super_admin"
    set vdom "root"
    set password
    end

    ReplyDelete
  52. Dear Firewall Gurus,

    I have a fortiweb decive FV400DXXX, unfortumately lost the admin password. I am trying to reset it however this method doesnt seem to work after login i just get the prompt

    FortiWeb login: maintainer
    Password: ********************
    Login incorrect

    i have tried waiting 15- 35 secs , i have tried waiting for 14 secs, i have tried immediately but same result

    FortiWeb login: maintainer
    Password: ********************
    Login incorrect


    the password format is bcpbFV400DXXXXXXXXX

    PLEASE HELP!!!

    ReplyDelete
  53. Hi please help i have a fortinet 100d i have logged in as maintainer however i see that the config that was loaded have no accounts at all configured how can i config an admin? the exec command isnt working for me.

    ReplyDelete
  54. Please Help me, I have fortigate 60. Manufacture Date 2007 month 06. I used the username as maintainer and password bcpb+ serial. But Login incorrect msg displayed.

    Pl help me to reset the admin password

    ReplyDelete
  55. I also have a 60D, i use it at home to learn
    I’m new in the world of FG, but when i try to login it tell me: ”Login incorrect”

    I do know my admin password, I’m just testing it.
    I did the config enable maintainer but it still tells me: ”Login incorrect”

    ReplyDelete