topic Re: Cisco ISE CLI Admin Password Locked Out, No Reset Method in Network Access Control

Cisco ISE CLI Admin Password Locked Out, No Reset Method

Jeoffry — Thu, 19 Dec 2024 16:47:08 GMT

Hello, I am trying to figure out if there is a way to reset the ISE CLI password. The server is a physical 3715 ISE server, and I am currently locked out of the CLI. Therefore, I cannot log in to reset the password. As the server is not virtualized, I cannot use the ISO file to reset the password. My site does not allowed USBs or DVDs, so I cannot boot from either to access the option to reset the password.

What I am wondering is if there is a way for me to reset the password without the disk/usb, or if there is a way for me to physically factory reset the server.

Re: Cisco ISE CLI Admin Password Locked Out, No Reset Method

Rob Ingram — Thu, 19 Dec 2024 16:50:31 GMT

@Jeoffry you could connect to the CIMC (remotely) and connect the ISO image, then reboot and follow the standard procedure.

Re: Cisco ISE CLI Admin Password Locked Out, No Reset Method

Jeoffry — Thu, 19 Dec 2024 16:51:22 GMT

CIMC is also not set up on our device unfortunately

Re: Cisco ISE CLI Admin Password Locked Out, No Reset Method

Rob Ingram — Thu, 19 Dec 2024 16:55:44 GMT

@Jeoffry booting off the ISO/CD is the only recovery method I am aware of. Get CIMC connected and follow the procedure. Guide- https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200568-ISE-Password-Recovery-Mechanisms.html

Else, perhaps call TAC and they have another method

Re: Cisco ISE CLI Admin Password Locked Out, No Reset Method

JPavonM — Fri, 20 Dec 2024 06:48:12 GMT

Then proceed to the DC and configure the CIMC so you can perform remote actions over the ISE software, there is no other way in your case.