backup full-config

Use this command to manually back up the entire configuration file, including those settings that remain at their default values, to a TFTP server.


	Fortinet strongly recommends that you password-encrypt this backup, and store it in a secure location. This backup method includes sensitive data such as your HTTPS certificates’ private keys. Unauthorized access to private keys compromises the security of all HTTPS requests using those certificates.

This backup includes settings that remain at their default values increases the file size of the backup, but may be useful in some cases, such as when you want to compare the default settings with settings that you have configured.

To use this command, your administrator account’s access control profile must have either w or rw permission to the mntgrp area. For more information, see “Permissions”.


Variable	Description	Default
<filename_str>	Type the name of the file to be used for the backup file, such as FortiWeb_backup.conf.	No default.
<tftp_ipv4>	Type the IP address of the TFTP server.	No default.
[<password_str>]	Type a password for use when encrypting the backup file using 128-bit AES. If you do not provide a password, the backup file will be stored as clear text. Caution: Remember the password or keep it in a secure location. You will be required to enter the same password when restoring an encrypted backup file. If you forget or lose the password, you will not be able to use that encrypted backup file.	No default.

This example uploads the FortiWeb appliance’s entire configuration, including uploaded error page and HTTPS certificate files, to a file named fweb.cfg on a TFTP server at IP address 192.168.1.23. The file is encrypted with the password P@ssword1.