Component authentication

In order to install, upgrade or uninstall a Collector, you must supply the registration password. The registration password is the same for all Collectors in the FortiEDR system. This password is defined when you configure the FortiEDR Central Manager Server and console.

The COMPONENT AUTHENTICATION section provides options to retrieve a lost registration password or revoke a compromised registration password.

If you forget the registration password, retrieve it by following the steps below:

1. Click the TOOLS link in the left pane.
2. In the COMPONENT AUTHENTICATION area, click the Display button.

   

   The following window displays, showing the retrieved password.

   

To revoke a compromised registration password:

1. Click the TOOLS link in the left pane.
2. In the COMPONENT AUTHENTICATION area, click Advanced Password Management.

   

3. Enter the new password, confirm it, and click Revoke.

   

After you revoke an existing registration password with a new one, the new password is required for subsequent connections with connected or new Collectors. However, you still need the revoked password for reconnection or uninstallation of disconnected Collectors. You can see a list of revoked passwords under Display Previous Registration Passwords with information of revoked time and number of Collectors still using that password.



You can revoke the registration password four times maximum, after which the Revoke button is disabled and you must delete an old password in order to create a new one.

Fortinet recommends that you generate a new custom Collector after revoking a compromised registration password.