Fortinet white logo
Fortinet white logo

Administration Guide

7.2.0

Passwords

Passwords

There are several types of passwords that are used in conjunction with FortiNAC, such as passwords for CLI, SSH, or admin UI access. Each type of password has its own set of rules or conventions.

CLI/SSH passwords

Passwords are set using the Guided Install during initial configuration.

Modify CLI Account passwords after initial configuration

FortiNAC appliances running CentOS (FNC-CA-xx/FNC-M-xx): Navigate to Users & Hosts > Administrators > CLI Passwords.

FortiNAC appliances running FortiNAC-OS (FNC-CAX-xx/FNC-MX-xx): Change password via CLI.

Login as admin to the CLI and type:

config sys admin
edit admin
set password [<password>]
end

For additional details on editing the Admin user(s) in the FortiNAC-OS CLI, see Admin user in the CLI Reference manual.

CLI/SSH passwords must be eight characters or longer and contain a lowercase letter, an uppercase letter, a number, and one of the following symbols:

Required Symbols

! exclamation point

@ at

_ underscore

# pound

$ dollar

~ tilde

^ caret

- hyphen

* asterisk

% percent

? question mark

The symbols listed below are not permitted in CLI/SSH and Configuration Wizard passwords.

Prohibited Symbols

( open parenthesis

; semicolon

{ open curly bracket

) close parenthesis

: colon

} close curly bracket

‘ back quote

“ double quote

[ open square bracket

& ampersand

’ single quote

] close square bracket

+ plus

< less than

, comma

= equal

> greater than

. period

| pipe

\ back slash

/ forward slash

Admin CLI and root CLI passwords are limited to 64 characters.

Administrator passwords

To modify Administrator passwords, navigate to Users & Hosts > Administrators.

Note

Spaces are permitted in passwords with local authentication. Any other authentication will depend on the vendor.

Administrator passwords for FortiNAC stored in the FortiNAC database must conform to the following:

Permitted Characters

Letters (upper and lower case)

A, B, C... (and a, b, c...)

Numbers

0, 1, 2, 3, 4, 5, 6, 7, 8, 9

Symbols

All characters not defined as letters or numbers. Including:

~ ! @ # $ % ^ & * ( ) _ + - = { } | [ ] \ : < > ? , . /

Prohibited Symbols

’ single quote

“ double quote

Passwords

Passwords

There are several types of passwords that are used in conjunction with FortiNAC, such as passwords for CLI, SSH, or admin UI access. Each type of password has its own set of rules or conventions.

CLI/SSH passwords

Passwords are set using the Guided Install during initial configuration.

Modify CLI Account passwords after initial configuration

FortiNAC appliances running CentOS (FNC-CA-xx/FNC-M-xx): Navigate to Users & Hosts > Administrators > CLI Passwords.

FortiNAC appliances running FortiNAC-OS (FNC-CAX-xx/FNC-MX-xx): Change password via CLI.

Login as admin to the CLI and type:

config sys admin
edit admin
set password [<password>]
end

For additional details on editing the Admin user(s) in the FortiNAC-OS CLI, see Admin user in the CLI Reference manual.

CLI/SSH passwords must be eight characters or longer and contain a lowercase letter, an uppercase letter, a number, and one of the following symbols:

Required Symbols

! exclamation point

@ at

_ underscore

# pound

$ dollar

~ tilde

^ caret

- hyphen

* asterisk

% percent

? question mark

The symbols listed below are not permitted in CLI/SSH and Configuration Wizard passwords.

Prohibited Symbols

( open parenthesis

; semicolon

{ open curly bracket

) close parenthesis

: colon

} close curly bracket

‘ back quote

“ double quote

[ open square bracket

& ampersand

’ single quote

] close square bracket

+ plus

< less than

, comma

= equal

> greater than

. period

| pipe

\ back slash

/ forward slash

Admin CLI and root CLI passwords are limited to 64 characters.

Administrator passwords

To modify Administrator passwords, navigate to Users & Hosts > Administrators.

Note

Spaces are permitted in passwords with local authentication. Any other authentication will depend on the vendor.

Administrator passwords for FortiNAC stored in the FortiNAC database must conform to the following:

Permitted Characters

Letters (upper and lower case)

A, B, C... (and a, b, c...)

Numbers

0, 1, 2, 3, 4, 5, 6, 7, 8, 9

Symbols

All characters not defined as letters or numbers. Including:

~ ! @ # $ % ^ & * ( ) _ + - = { } | [ ] \ : < > ? , . /

Prohibited Symbols

’ single quote

“ double quote