topic Re: ise password doesn't work in DevNet Sandbox

ise password doesn't work

dnacise — Sun, 30 Jul 2023 00:33:18 GMT

the listed password "!vtG@1way" doesn't work

when entered with username "admin" it comes back with error "Password is expired. Please reset your admin password."

Re: ise password doesn't work

Kasun Bandara — Sun, 30 Jul 2023 01:34:29 GMT

hi @dnacise try resetting password. check below guide

https://www.grandmetric.com/ise-gui-admin-password-expired/

Re: ise password doesn't work

dnacise — Sun, 30 Jul 2023 03:11:35 GMT

Hey @Kasun Bandara

the ssh creds don't work as well. so no way to find out if solution works 😞

Re: ise password doesn't work

Kasun Bandara — Sun, 30 Jul 2023 10:20:16 GMT

@dnacise in that case you need to go through password reset process.

https://www.packetmischief.ca/2012/01/16/resetting-admin-password-on-a-cisco-ise-appliance/

Re: ise password doesn't work

Jonatan Jonasson — Sun, 30 Jul 2023 11:58:19 GMT

As Kasun Bandara mentions, you'll need to go through the password reset process if the SSH/CLI credentials do not work.

As an addition to that, I want to mention one thing that is important and sometimes people forget:
During the install, you are asked to create administrative credentials (user/pass).
Those credentials are then used to create two separate users with the same username, one for CLI and one for GUI.
It's the same username but not the "same" user.
The GUI admin users, by default, has password expiration, where as the CLI does not.
(GUI admin password policy can be modified at System->Admin Access->Authentication->Password Policy)

If an admin logs into the GUI and is prompted that the password is expiring and changes the password, the CLI password for the "same" user does not change.
So if you happen to have a password manager that has the history of previous passwords, you may be able to find the original password that could work for CLI/SSH.

For this same reason, it's important that when documenting the password, to maybe have 2 separate entries, one for CLI and one for GUI, since someone might change one but not the other.

Re: ise password doesn't work

dnacise — Sun, 30 Jul 2023 23:48:44 GMT

ok lets drill down to the issue

The ISE was NOT accessible via GUI/SSH as NONE of the provided creds worked.

Do the lab devices have console access available for the password reset process ?

Re: ise password doesn't work

Kasun Bandara — Fri, 04 Aug 2023 13:10:43 GMT

@dnacise is this lab?