Visit these links for more information and documentation for your Fortinet product:
•
Technical Documentation:
http://docs.fortinet.com
•
Knowledge Base:
http://kb.fortinet.com
•
Customer Service & Support:
https://support.fortinet.com
•
Training Services:
http://training.fortinet.com
Copyright© 2012 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are
registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks
of Fortinet. All other product or company names may be trademarks of their respective owners.
Performance metrics contained herein were attained in internal lab tests under ideal conditions,
and performance may vary. Network variables, different network environments and other conditions
may affect performance results. Nothing herein represents any binding commitment by Fortinet, and
Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters
a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly
warrants that the identified product will perform according to the performance metrics herein. For
absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in
Fortinet’s internal lab tests. Fortinet disclaims in full any guarantees. Fortinet reserves the right to
change, modify, transfer, or otherwise revise this publication without notice, and the most current
version of the publication shall be applicable.
Regulatory Compliance: FCC Class A Part 15, / CE Mark
August 23, 2012
00-000-179550-20120823
Before you can successfully use the FortiToken 200CD token, it must first be installed and activated on the FortiGate or
FortiAuthenticator platform, depending on which platform you are using as your token validation server.
Important:
The FortiGate or FortiAuthenticator unit’s clock must be accurate to work properly with the FortiToken devices. It
is strongly recommended to synchronize the clock with a Network Time Protocol (NTP) server.
To activate your replacement tokens on FortiGate units
1. Open the envelope labeled
FTK200CD Token Activation Card
.
2. Create a text file on your computer containing the information on the Activation Card(s): If you have multiple replacement
tokens/cards, use one line per Activation card. A QR code is printed on each card that can be scanned with a
Smartphone application and used to create the text file. For example, the contents of a file for two replacement tokens
would look like this (one line per token/Activation Card):
FTK21127KOXU5Q89,2IyHoEBzsEqOcuHwZYQdx6EuA5Bjb/kpsCjCOfMvjfCN0UX91/Ig5lWEfphi2tTy,3a55
a7224e192c4f2b02b7b55664bc4a
FTK21127NZSGQH9A,14NJWL5IcCg0hbjj0ouT2CkLnCKwXeg0yOS0OxyTfzHkJstVGeyWnNfxaLAoVM66,e82b
2918bbfc5a50f89abb453798ed28
3. Log in to the Web-based Manager of your FortiGate unit from your computer.
4. Go to
User > Two Factor Authentication > FortiToken
, select
Hard Token
as the Token Type, and click
Import
.
5. Select
Seed File
, browse to the file created in step 2, and click
OK
. The loaded serial numbers will appear in the list and
the user can choose to cancel the import if desired. You can then cancel the import or continue by clicking
OK
.
6. Each FortiToken will be installed and activated, and shown as
Available
in the FortiToken user interface.
To activate the tokens on FortiAuthenticator units
1. Open the envelope labeled
FTK200CD Token Activation Card
.
2. Create a text file on your computer containing the information on the Activation Card(s): If you have multiple replacement
tokens/cards, use one line per Activation card. A QR code is printed on each card that can be scanned with a
Smartphone and used to create the text file. For example, the contents of a file for two replacement tokens would look
like this (one line per token/Activation Card):
FTK21127KOXU5Q89,2IyHoEBzsEqOcuHwZYQdx6EuA5Bjb/kpsCjCOfMvjfCN0UX91/Ig5lWEfphi2tTy,3a55
a7224e192c4f2b02b7b55664bc4a
FTK21127NZSGQH9A,14NJWL5IcCg0hbjj0ouT2CkLnCKwXeg0yOS0OxyTfzHkJstVGeyWnNfxaLAoVM66,e82b
2918bbfc5a50f89abb453798ed28
3. Log in to the Web-based Manager of your FortiAuthenticator unit from your computer.
4. Go to
Authentication > Local User Management > FortiTokens
, select
Import
, and check the
Seed File
option.
5. Browse to the file you created in step 2, and click
OK
. The loaded serial numbers will appear in the token list.
6. Each FortiToken 200 is now installed and activated, and shown as
Available
in the FortiToken user interface.
Step 2. Activating the FortiToken unit
