Chapter 3 Authentication for FortiOS 5.0 : Users and user groups : Users : FortiToken : FortiToken maintenance
  
FortiToken maintenance
Once FortiTokens are entered into the FortiGate unit, there are only two tasks to maintain them — changing the status,
To change the status of a FortiToken between Activated and Locked - CLI
config user fortitoken
edit <token_serial_num>
set status lock
next
end
Any user attempting to login using this FortiToken will not be able to authenticate.
To list the drift on all FortiTokens configured on this FortiGate unit - CLI
# diag fortitoken drift
FORTITOKEN DRIFT
This command lists the serial number and drift for each FortiToken configured on this FortiGate unit. This command is useful to check if it is necessary to synchronize the FortiGate and any particular FortiTokens.