topic Re: Cisco ISE VM CLI password reset issue in Network Access Control

Cisco ISE VM CLI password reset issue

david.byrd.22 — Thu, 02 Dec 2021 12:49:46 GMT

Hello all,

I am getting to the end of my rope trying to figure out why I am unable to reset the Cisco ISE CLI password on one of my deployed virtual nodes. Currently running through the steps in the guide (linked below) and when we restart the VM we get to the login screen and the credentials do not work. Currently running 2.6.0.156 in a distributed deployment.

I did see some comments around stating that special characters can cause issues and we tried removing those, still not luck.

Any ideas or thoughts are welcome! Thanks in advance.

Password Recovery Guide: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200568-ISE-Password-Recovery-Mechanisms.html

Re: Cisco ISE VM CLI password reset issue

balaji.bandi — Thu, 02 Dec 2021 13:00:34 GMT

I have seen this issue, you know what i found was the issue keyboard layout, not sure what region you are and keyboard.

Note : this may be not your case - but make sure you check the keyboard layout for the password (you using any special characters)

Re: Cisco ISE VM CLI password reset issue

thomas — Sat, 04 Dec 2021 20:48:42 GMT

Suggest calling TAC to walk through it with them since there is little information to go on here.

Maybe your hypervisor is doing something to your input.

Let us know what finally works for you!

Re: Cisco ISE VM CLI password reset issue

david.byrd.22 — Mon, 06 Dec 2021 08:56:53 GMT

Thanks for the reply! We did double check the keyboard layout, SSH also just in case the web based interface was being funky, and using a password with no special characters. Still no luck

Re: Cisco ISE VM CLI password reset issue

david.byrd.22 — Mon, 06 Dec 2021 08:58:08 GMT

Yeah from how little I was able to dig up on issues with the actual password recovery I went ahead and opened a TAC case. I did attempt to SSH to get around vSphere being weird but no luck. I'll follow up as soon as we reach a solution, thanks for the reply!