In the event that the primary FortiManager fails, which action must be performed to return the FortiManager HA to a working state?