Max password length for Cisco ISE service

tiwang — Wed, 07 Aug 2024 12:49:33 GMT

hi out there

I simply cannot find it - what is the maxium password length Cisco ISE3.2 can handle - both for the local accounts accessing the ISE cluster and the password length ISE can handle when f.ex using the PassiveID connector to configure a remote service accounts password

Re: Max password length for Cisco ISE service

davidgfriedman — Wed, 07 Aug 2024 13:19:32 GMT

For (non-admin) local accounts in ISE v3.2, i.e. rulesets and policies, the password character range is 4 to 127 here under Administration -> Identity Management -> Settings -> User Authentication Settings -> Password policy:

For local admin accounts in ISE v3.2 (to login to the admin page or use ERS or OpenAPI calls), the password character range is also 4 to 127 characters long. It can be found under Administration->System->Admin Access->Authentication->Password Policy:

I have never tested passive ID or remote logins for anything nearly that long, so I cannot say if those limits are matched, however, up to 127 characters leaves a lot of wiggle room, as I'd doubt most companies go over 20-30 characters these days.

Regards,
David

topic Re: Max password length for Cisco ISE service in Network Access Control

Max password length for Cisco ISE service

Re: Max password length for Cisco ISE service