The last version of FortiClient
asks me about my password every time.
How can I make the program to remember it and who faces a similar problem?
Does anyone have a solution?
Join Stack Overflow to learn, share knowledge, and build your career.
The last version of FortiClient
asks me about my password every time.
How can I make the program to remember it and who faces a similar problem?
Does anyone have a solution?
<show_remember_password>0</show_remember_password>
<show_remember_password>1</show_remember_password>
v6.2.2.0877
here. It seems that it will always disappear if you change the registry or config after you disconnect. This is likely being reset each time due to the server administrator's setting.
– Paradox
Jan 10 '20 at 14:30
I had the same issue in OSX (Sierra) using Forticlient 5.4.1.I ended up editing the following file: [May be in a different location for you depending how app was installed - look at long answer below if it doesn't exist]
sudo vim /Library/Application\ Support/Fortinet/FortiClient/conf/vpn.plist
To change the following two zeroes to ones:
...
<dict>
<key>YOUR_VPN_CONNECTION_NAME_HERE</key>
<dict>
<key>AllowAutoConnect</key>
<integer>1</integer>
<key>AllowKeepRunning</key>
<integer>0</integer>
<key>AllowSavePassword</key>
<integer>1</integer>
...
Save and then simply open again and the checkboxes to save will be available now, unlike before.
You could also use the same thing to save some vpn settings for auto rollout of machines by script (instead of manual setup for each user)
For those interested, the way I found it was simple:
Open Forticlient Console
In terminal run "sudo opensnoop | grep Forti"
In forticlient console quickly add a new vpn
(CNTl-C) terminal and then search through output
File above was most obvious sounding one and quick look showed a good outlook.
Edit as above and it works.
Remember credential
check box
– HendraWD
Apr 17 '18 at 5:31
sudo chflags nouchg
– juhoautio
Dec 18 '18 at 7:25
According to the official documentation, "How to activate Save Password, Auto Connect, and Always Up in FortiClient", the availability of this option (and some others) is decided by the server administrator, using the config setting set save-password enable
.
You can currently override this by tampering with the show_* options in the registry; specifically,
HLKM\Software\Wow6432Node\Fortinet\Forticlient\sslvpn\<name>\show_remember_password = 1
Then if 'save password' is checked during login, the client will encrypt the password into the DATA1 and DATA2 values, and even though the server may hide the checkboxes again, the saved password will stay. To clear it, edit the connection's settings and switch auth back to 'Prompt on login'.
EDIT: As posted by Igor half a year later, a much more structured solution is to export the config file, alter it and then load it back in. There are various useful settings you might want to tweak. You can also re-use the config file when deploying to multiple hosts or re-installing.
For windows and Forticlient VPN (Not only named Forticlient) 6 or above version:
For Linux you may use forticlientsslvpn_cli
with Expect to feed in the password.
A complete solution available here:
https://gist.github.com/azizasm/e216bc47b54f5b68405f3c8f8b832e8a
Note: this solution will auto reconnect the if the VPN get disconnected.