Fortinet black logo

Cookbook

Associating a FortiToken to an administrator account

Copy Link
Copy Doc ID 664e9f16-22ad-11eb-96b9-00505692583a:152360
Download PDF

Associating a FortiToken to an administrator account

You can also associate FortiTokens with administrator accounts.

To associate a FortiToken to an administrator account using the GUI:
  1. Ensure that you have successfully added your FortiToken serial number to FortiOS and that its status is Available.
  2. Go to System > Administrators. Edit the admin account. This example assumes that the account is fully configured except for two-factor authentication.
  3. In the Email Address field, enter the administrator's email address.
  4. Enable Two-factor Authentication.
  5. From the Token dropdown list, select the desired FortiToken serial number.
  6. Click OK.
Note

For a mobile token, click Send Activation Code to send the activation code to the configured email address. The admin uses this code to activate their mobile token. You must have configured an email service in System > Settings to send the activation code.

To associate a FortiToken to an administrator account using the CLI:

config system admin

edit <username>

set password "myPassword"

set two-factor fortitoken

set fortitoken <serial_number>

set email-to "username@example.com"

next

end

The fortitoken keyword is not visible until you select fortitoken for the two-factor option.

Note

Before you can use a new FortiToken, you may need to synchronize it due to clock drift.

Associating a FortiToken to an administrator account

You can also associate FortiTokens with administrator accounts.

To associate a FortiToken to an administrator account using the GUI:
  1. Ensure that you have successfully added your FortiToken serial number to FortiOS and that its status is Available.
  2. Go to System > Administrators. Edit the admin account. This example assumes that the account is fully configured except for two-factor authentication.
  3. In the Email Address field, enter the administrator's email address.
  4. Enable Two-factor Authentication.
  5. From the Token dropdown list, select the desired FortiToken serial number.
  6. Click OK.
Note

For a mobile token, click Send Activation Code to send the activation code to the configured email address. The admin uses this code to activate their mobile token. You must have configured an email service in System > Settings to send the activation code.

To associate a FortiToken to an administrator account using the CLI:

config system admin

edit <username>

set password "myPassword"

set two-factor fortitoken

set fortitoken <serial_number>

set email-to "username@example.com"

next

end

The fortitoken keyword is not visible until you select fortitoken for the two-factor option.

Note

Before you can use a new FortiToken, you may need to synchronize it due to clock drift.