Administrators

By default, FortiGate has an administrator account with the username admin and no password. To prevent unauthorized access to the FortiGate, this account must be protected with a password. Additional administrators can be added for various functions, each with a unique username, password, and set of access privileges.

The following topics provide information about administrators:

• Local authentication

• Remote authentication for administrators

• Administrator account options

• REST API administrator

• SSO administrators

• FortiCloud SSO

• Allowing the FortiGate to override FortiCloud SSO administrator user permissions

• Password policy

• Public key SSH access

• Separating the SSHD host key from the administration server certificate

• Restricting SSH and Telnet jump host capabilities

• Remote administrators with TACACS VSA attributes