Skip to main content

202050 - Failed to Update Trusted Host

Agent error code #202050 indicates that the agent could not update the trusted host entry on a FortiManager administrator account. This error applies to Active (FortiManager Trusted Hosts) mode only, where Knocknoc manages the 10th trusted host slot on FortiManager admin users.

The error message includes additional detail about the underlying cause (e.g., authentication, authorization, or an unexpected API response).

Common causes include:

  • The API user does not have the Super_User admin profile (required for updating administrator trusted hosts)
  • The FortiManager rejected the update due to a validation error
  • The target admin user's configuration has changed in a way that prevents the update
  • Network or session issues caused the JSON-RPC request to fail

Steps to Resolve

Verify the API User's Admin Profile

  1. Log into FortiManager and navigate to System Settings > Administrators
  2. Locate the API user configured in Knocknoc
  3. Confirm the admin profile is set to Super_User
  4. Updating administrator trusted hosts via the JSON-RPC API (/cli/global/system/admin/user/) requires Super_User privileges — no custom profile is sufficient

Verify the Target Admin User Exists

  1. Navigate to System Settings > Administrators on FortiManager
  2. Confirm the administrator account matching the Knocknoc username exists and is enabled
  3. The Knocknoc username must match the FortiManager Administrator username exactly (see also #202051)

Check the Target Admin User's Trusted Host Configuration

  1. Edit the target admin user on FortiManager
  2. Verify that the trusted host configuration is valid and that entries 1–9 are not in a conflicting state
  3. Ensure the admin user is not locked or in a read-only state

Check Agent Logs for Details

  1. Review the agent logs for the full error message, which will include the FortiManager JSON-RPC response
  2. The response may contain a specific error code or message indicating why the update was rejected

Still Having Issues?

We can help you out, contact us at support@knocknoc.io.

Back to top