Password recovery for EMS administrators 7.2.2

EMS 7.2.2 includes password recovery features as follows:

• A global super administrator can reset the password for EMS local administrators from the EMS GUI.

• If the EMS built-in administrator password is forgotten, a super administrator cannot access EMS. In this case, you can use the PasswordRecovery tool.

To reset the password for EMS local administrators:

When multitenancy is enabled, this option is only available in the global site.

1. Log in to EMS as a super administrator.

2. Go to Administration > Admin Users.

3. Edit the desired local administrator.

4. Enable Reset Password.

5. EMS automatically generates a temporary password. If desired, click Generate to generate a new random password. Click Copy, then click Finish.

   

6. Log out of EMS.

7. Log in to EMS as the local administrator. In the Password field, paste in the temporary password.

8. EMS prompts you to update your password. Enter a new password, then click Submit.

To use the PasswordRecovery tool:

1. On the EMS machine, go to C:\Program Files (x86)\Fortinet\FortiClientEMS.

2. Run PasswordRecovery.exe.

3. A Command Prompt dialog opens. Enter yes to proceed.

4. A temporary password is generated and copied to the clipboard.

5. Log in to EMS as admin and paste in the temporary password.

6. EMS prompts you to update your password. Enter a new password, then click Submit.

You must have administrator-level permissions for SQL to run PasswordRecovery.exe to create a temporary password. By default, Windows domain administrators and local administrators have administrator-level permissions to SQL. However, when logged in to the EMS machine as a local or domain user, you must run PasswordRecovery.exe as an administrator and provide local/domain administrator credentials. Otherwise, an error occurs.