Fortinet white logo
Fortinet white logo

Examples

Creating a privileged account secret

Creating a privileged account secret

To create a secret:
  1. Go to Secrets > Secrets.
  2. In the Secrets List, select Create.

    The Create New Secret in: dialog appears.

  3. Select the folder where you intend to add the secret.
  4. Select Create.

    The New Secret window opens.

  5. Enter a name for the secret.
  6. From the Target dropdown, select the target that you created in Creating a target with server information as Windows.
  7. Enable Privileged Account and ensure that this account has administrator privileges on the remote server. This is needed to modify policy settings.
  8. In Fields:
    1. Enter the user name.
    2. Enter the password.
    3. Reenter the password to confirm.
  9. Click Submit.

The above secret can be created in the CLI using the following commands CLI:

 config secret database
  edit 4
   set name "Demo - Priv Account"
   set target "Demo - Windows Server"
   set target-privilege-account enable
   set folder 1
   set template "Windows Domain Account"		
   set proxy enable
   set rdp-service-status up
   set ldaps-service-status up
   set samba-service-status up 
   config credentials-history
  end
   edit 1
    set name "Username"
    set value "demo-priv-acc"
   next
   edit  2 
    set name "Password"
    set value "ENC jdiQCYRCdK9Hcxb1oyHpwaWGgltZZjI2N3ZFQA=="
   next
  end
 next
end

Creating a privileged account secret

Creating a privileged account secret

To create a secret:
  1. Go to Secrets > Secrets.
  2. In the Secrets List, select Create.

    The Create New Secret in: dialog appears.

  3. Select the folder where you intend to add the secret.
  4. Select Create.

    The New Secret window opens.

  5. Enter a name for the secret.
  6. From the Target dropdown, select the target that you created in Creating a target with server information as Windows.
  7. Enable Privileged Account and ensure that this account has administrator privileges on the remote server. This is needed to modify policy settings.
  8. In Fields:
    1. Enter the user name.
    2. Enter the password.
    3. Reenter the password to confirm.
  9. Click Submit.

The above secret can be created in the CLI using the following commands CLI:

 config secret database
  edit 4
   set name "Demo - Priv Account"
   set target "Demo - Windows Server"
   set target-privilege-account enable
   set folder 1
   set template "Windows Domain Account"		
   set proxy enable
   set rdp-service-status up
   set ldaps-service-status up
   set samba-service-status up 
   config credentials-history
  end
   edit 1
    set name "Username"
    set value "demo-priv-acc"
   next
   edit  2 
    set name "Password"
    set value "ENC jdiQCYRCdK9Hcxb1oyHpwaWGgltZZjI2N3ZFQA=="
   next
  end
 next
end