Home

FortiCloud Asset Transfer: The Essential Guide for IT Administrators

.

In today's dynamic IT landscape, the ability to efficiently reorganize digital assets is critical. Fortinet's FortiCloud Asset Management portal has evolved to meet this need, introducing a robust self-service asset transfer functionality that streamlines the movement of devices like FortiGate firewalls between accounts. This capability, prominently featured in guides like the Asset Management 25.3.0 Administration Guide for Partners, empowers organizations and managed service providers (MSPs) to manage their security infrastructure with unprecedented agility, eliminating the delays associated with traditional support tickets for routine administrative tasks.

The Asset Transfer feature is a cornerstone of FortiCloud's comprehensive asset management system. This portal serves as a centralized hub for registering, organizing, and overseeing all Fortinet products and services. Users can access a visual dashboard, view product lifecycles, manage support subscriptions, and handle licenses—all from a single interface accessible at forticloud.com or through the support.fortinet.com portal.

How FortiCloud Asset Transfer Works: A Step-by-Step Breakdown

The transfer process is designed to be secure and administrator-driven. According to documentation and community guides, it operates on a token-based system that requires action from both the source and destination account administrators.

Step 1: Initiate Transfer from the Source Account

The administrator of the account currently owning the asset logs into the FortiCloud Asset Management portal. Within the navigation menu, they select the Asset Transfer option (a dedicated feature available from at least version 25.1). Here, they can generate a transfer token by entering the serial numbers of the devices to be moved—either manually or by uploading a file. The system validates the assets and produces a unique 20-character transfer token, which is valid for five days.

Step 2: Redeem Token in the Destination Account

The administrator of the receiving account then logs into their FortiCloud portal, navigates to the same Asset Transfer section, and selects the option to redeem a token. Upon entering the provided token, the system validates it and completes the transfer. Both parties receive an email confirmation upon successful completion.

Key Requirements and Limitations

  • Administrator Permissions: Both source and destination accounts require a user with Org Admin privileges.
  • Eligible Assets: The function is primarily for transferring hardware or virtual machine serial numbers. It cannot be used for account-level services like FortiSASE, FortiAnalyzer Cloud, or FortiEDR.
  • Usage Limits: Community notes indicate a policy of a maximum of three transfers per device within a 12-month period. Transfers exceeding this limit require assistance from Fortinet technical support.
  • Token Security: A generated token can be disabled by the source user before redemption, expires after five days, and becomes invalid if the asset ownership changes before the token is used.

Special Considerations for FortiGate Cloud and Organizational Accounts

While the standard Asset Management portal handles general product transfers, specific workflows exist for FortiGate Cloud accounts and within MSP/MSSP organizational structures.

For transfers within a FortiGate Cloud environment, the process is often initiated directly from the Devices and Provisioning > Device List section. An administrator can select a FortiGate device, choose the Asset Transfer action, and specify the target account's email address. A critical decision point in this flow is the handling of historical data: the administrator can choose whether to migrate the device's configuration backups, existing logs, and reports to the new account. The transfer is not finalized until the destination account administrator logs in and accepts the incoming device.

For partners and MSSPs using the Organizations feature in FortiCloud, the Asset Management portal provides aggregated views and tools to manage assets across multiple connected customer accounts. The administration guides detail how to register assets directly to member accounts and use the portal's context-switching dropdown to seamlessly manage different organizational contexts.

Benefits and Strategic Importance of Self-Service Transfers

The introduction of self-service asset transfer marks a significant shift in operational efficiency. Its benefits are multifold:

  1. Operational Speed and Autonomy: IT teams and partners can execute asset reallocation—whether for client onboarding/offboarding, internal department restructuring, or corporate mergers—immediately, without waiting for support intermediary processes.
  2. Reduced Administrative Overhead: By automating a previously manual, ticket-based procedure, organizations save valuable time and reduce the administrative burden on both their own teams and Fortinet's support channels.
  3. Enhanced Partner and MSP Agility: Technology solution providers can swiftly reassign demonstration units, reallocate inventory between customers, or consolidate assets, leading to faster service delivery and improved customer satisfaction.
  4. Clear Audit Trail: The token-based system with email confirmations for both parties creates a transparent and verifiable record of all asset movements, aiding in compliance and inventory auditing.

This functionality underscores Fortinet's commitment to providing a user-centric, scalable cloud management platform. As organizations continue to embrace flexible, cloud-driven operations, tools like the FortiCloud Asset Transfer ensure that the management of security infrastructure can keep pace with the speed of business change.

Frequently Asked Questions (FAQ)

Q1: What types of Fortinet assets can I transfer using the self-service tool? A: The primary function is for transferring hardware or virtual machine serial numbers (like FortiGate, FortiSwitch, FortiAP). It cannot transfer account-level cloud service subscriptions such as FortiSASE, FortiEDR, or FortiAnalyzer Cloud licenses. Always check the eligible assets list in the portal before initiating a transfer.

Q2: Is there a limit to how many devices I can transfer at once? A: While specific bulk limits may vary, documentation notes that you can enter serial numbers manually or upload a file. Community sources mention a common-sense limit of three transfers for the same device within a 12-month rolling period. For large-scale, one-time transfers (like during a company acquisition), it's advisable to contact Fortinet support for assistance.

Q3: What happens to the support contract when I transfer a device? A: When a registered product is successfully transferred to a new FortiCloud account, any associated support entitlements, licenses, and service contracts are transferred along with the hardware asset. The new account owner assumes all rights and responsibilities for the support coverage.

Q4: Can I cancel a transfer after generating the token? A: Yes. The administrator of the source account has control over the token until it is redeemed. They can log back into the Asset Transfer section and disable the issued token, preventing the destination account from completing the transfer. Once a token is redeemed, the transfer is immediate and cannot be reversed through self-service.

Q5: Where can I find the Asset Transfer feature in the FortiCloud portal? A: After logging into forticloud.com and accessing the Asset Management portal, look for "Asset Transfer" in the main navigation menu or sidebar. If you do not see this option, ensure your user account has the necessary Organization Administrator permissions and that your FortiCloud portal is on a supported version (25.1 or later).

Note: The information in this article is based on Fortinet's official documentation, including the Asset Management 25.3.0 Administration Guide for Partners and related product guides. Features and workflows are subject to change. Always refer to the latest official documentation or contact Fortinet support for your specific use case.