FortiAuthenticator-VM setup on VMware

Before using FortiAuthenticator-VM, you need to install the VMware application to host the FortiAuthenticator-VM device. The installation instructions for FortiAuthenticator-VM assume you are familiar with VMware products and terminology.

System requirements

FortiAuthenticator-VM is compatible with HyperV Windows Server 2012 and 2016. For information on the FortiAuthenticator-VM system requirements, please see the FortiAuthenticator datasheet.

FortiAuthenticator-VM has kernel support for more than 4GB of RAM in VM images. However, this support also depends on the VM player version. For more information, see http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1014006 The default Hardware Version is 4 in order to support the widest base of VM players. However you can modify the VM Hardware Version by editing the following line in the FortiAuthenticator-VM.vmx file: virtualHW.version = "4"

FortiAuthenticator-VM image installation and initial setup

The following procedure describes setup on VMware Fusion.

To set up the FortiAuthenticator-VM image:

1. Download the VM image zip file to the local computer where VMware is installed.
2. Extract the files from the zip file into a folder.
3. In your VMware software, go to File > Open.
4. Navigate to the expanded VM image folder, select the FortiAuthenticator-VM.vmx file, and select Open.

VMware will install and start FortiAuthenticator-VM. This process can take a minute or two to complete.

5. At the FortiAuthenticator login prompt, enter admin and press Enter. By default, there is no password, however, a password must be set before you can proceed. Enter and confirm the new administrator password.
6. At the CLI prompt enter the following commands:

   config system interface

   edit port1

   set ip <ip-address>/<netmask>

   set allowaccess https-gui https-api ssh

   next

   end

   config router static

   edit 0

   set device port1

   set dst 0.0.0.0/0

   set gateway <ip-gateway>

   next

   end

Substitute your own desired FortiAuthenticator IP address and default gateway.

You can now connect to the GUI at the IP address you set for port 1.

Suspending the FortiAuthenticator-VM can have unintended consequences. Fortinet recommends that you do not use the suspend feature of VMware. Instead, shut down the virtual FortiAuthenticator system using the GUI or CLI, and then shut down the virtual machine using the VMware console.