Chapter 3 Authentication for FortiOS 5.0 : Users and user groups : Users : FortiToken : Activating a FortiToken on the FortiGate
  
Activating a FortiToken on the FortiGate
Once one or more FortiTokens have been added to the FortiGate unit, they must be activated before being available to be associated with accounts.The process of activation involves the FortiGate querying FortiGuard servers about the validity of each FortiToken. The serial number and information is encrypted before it is sent for added security.
 
A FortiGate unit requires a connection to FortiGuard servers to activate a FortiToken.
To activate a FortiToken on the FortiGate unit - web-based manager
1. Go to User & Device > Two-factor Authentication > FortiTokens.
2. Select one or more FortiTokens with a status of New.
3. Select Activate.
4. Refresh web browser. The status of selected FortiTokens will change to Activated.
The selected FortiTokens are now available for use with user and admin accounts.
To activate a FortiToken on the FortiGate unit - CLI
config user fortitoken
edit <token_serial_num>
set status activate
next
end