topic Re: ISE2.3 - How do you change admin password expiry settings? in Network Access Control

ISE2.3 - How do you change admin password expiry settings?

Phil Paterson — Sun, 28 Jan 2018 22:11:36 GMT

I have ISE 2.3

Cannot find how to change the Password expiry option for admin account

Re: ISE2.3 - How do you change admin password expiry settings?

hslai — Sun, 28 Jan 2018 22:39:09 GMT

This is mainly under the section Password Lifetime @ Administrator Password Policy Settings

Be sure also to adjust Account Disable Policy for Administrator Accounts and Lock or Suspend Settings for Administrator Accounts, accordingly.

Re: ISE2.3 - How do you change admin password expiry settings?

Phil Paterson — Mon, 29 Jan 2018 00:05:00 GMT

The Authentication option is Blank. I have logged in as Administrator

Re: ISE2.3 - How do you change admin password expiry settings?

hslai — Mon, 29 Jan 2018 00:09:51 GMT

Use the function key F5 to refresh the browser page and see if that helps. Also, try another browser or another PC. Try an internal admin user in the "Super Admin" admin group.

Re: ISE2.3 - How do you change admin password expiry settings?

Phil Paterson — Mon, 29 Jan 2018 00:13:56 GMT

The evaluation License was preventing these options from being displayed. I deleted this and the password options appeared. Thanks for your Help anyway

Re: ISE2.3 - How do you change admin password expiry settings?

hslai — Mon, 29 Jan 2018 00:40:52 GMT

Interesting.

Please share how you learned that the EVAL license prevented the options? Is the setup licensed for all "base", "plus", "apex", and "device admin"? If not, what do you have?

I am not finding a known issue like this so would like to recreate it, if possible, and log a bug.

Re: ISE2.3 - How do you change admin password expiry settings?

Phil Paterson — Mon, 29 Jan 2018 01:06:06 GMT

I had eval license and then installed Base and Plus licenses. The eval license was expiring in 28 days. As part of making my system prod ready, I deleted the eval licenses. Then Bingo I was able to see the options. I spent considerable time over the last week s or so trying to figure out where the Admin Passwd expiry options were.

After seeing your screenshots, I just independently deleted the eval license & bingo, the options appeared.

Re: ISE2.3 - How do you change admin password expiry settings?

hslai — Mon, 29 Jan 2018 23:05:25 GMT

I am glad that it's working for you. Yes, it's a good practice to delete the eval license before production as to verify all required services and web UI functioning correctly as entitled.

Unfortunately I am unable to recreate your issue by a setup with eval expiring in 29 days and valid base and plus licenses. Thus, I am not opening a bug at this time.

Many thanks for letting us know.