Technical Tip: How To Reset To Factory Default Configuration using external button

[kjamshir]

Description

This article explains how to factory reset the configuration using the external reset button on low-end FortiGate models.

Scope

FortiGate/FortiWifi/-DSL:  60E/61E, 60F/61F, 40F, 80E, 60C, and other models intended for small businesses.

Solution

• This button is labeled  'RESET' or 'BLE/RESET' (located either on the Back Panel near the power connector, or on the Front Panel like in 80F).
• When enabled (default state), it resets the unit to its factory default settings if pressed during the first 30 or 60 seconds after a reboot.
• In mid to high-end models (not in scope of this article), this button can be easily confused with the non-marked NMI button (non-maskable interrupt) watchdog feature. NMI button does not offer the factory reset functionality. Refer to the following article Technical Tip: NMI Button for Troubleshooting Kernel Issues for more info. 

• To confirm the purpose of this external button on the FortiGate:

diagnose hardware test button
The output will show if it is used as Reset Button or as NMI Button. It is possible to press 'N' to stop the test.

• The behavior of the reset button will depend also upon the firmware version that is being used. One of the options below will factory default the unit:

Option A.

1.  Reboot FortiGate.

• It should be noted that a power-cycle is required and that using the CLI command execute reboot may not be sufficient to enable the reset button.
  

2. Wait until the FortiGate OS is running again.

• The FortiGate OS is at the running stage when the 'STATUS'/'STA' LED is flashing. It means that the console prompts the login.

3.  In the first 30 or 60 seconds press the external button which is used to Factory Reset the FortiGate.

• The reset button can only be used in the first 30 or 60 seconds depending on the model after a power-cycle.
• If the uptime of the unit is more than 30 or 60 seconds, the RESET button is disabled and when pressed the console output will prompt with the below message, and no action is taken if pressed at this stage.
  

FortiGate :                                                                                                                                                          

The reset button has been disabled, press the button during the first 60 seconds after a power-cycle.

4. If the external button is pressed on time, the unit reboots, and the default configuration will be active.

Option B.

1. The reset button can be pressed anytime, and the unit will perform a factory reset.
2. After the unit reboots the default configuration will be active in the same way as if the CLI command execute factoryreset had been used.