Cisco ISE cli user creation

[NeWGuy1109]

I am using Cisco ISE 3.0 Patch 4 in a Primary Secondary Configuration.. facing a weird issue where when i am trying to create admin users in CLI via command 

#username testuser password hash S0ftware@121 role admin 

after creating this testuser when i tried to view show running-config.. i can see user is created but the password is not hashed out.. moreover i am unable to login via this user in CLI.. i tried creating other users as well but without any success

how can i resolve this.. any help is appreciated.

[balaji.bandi]

try below syntax plain :

username username password hash | plain {password} role admin | user email {email-address}

ise/admin(config)# username admin password plain Secr3tp@swd role admin

[NeWGuy1109]

Thanks for the reply..

i tried it in plain.. now i can see the password hashed out in show config..

however i am unable to login with the same password.. i tried creating several users but none can login with the defined password

[LaurenCoulcher]

I'm running version 3.0 patch 6 and seeing the same issue.

Created and tested a couple of different CLI admin accounts and found that I was unable to log into any of them, exactly the same as @NeWGuy1109 describes. Was there a solution to this?

[kenmanner]

Same issue here. Running: 3.1.0.518

[timmeadowsjr]

I found something that worked for me in 3.3

1. remove the username in cli if it is already created

#no username xxx password hash yyy role zzz

2. add the username again using plain instead of hash

#username xxx password plain yyy role zzz

3. end cli session

4. log into ISE GUI

5. backup config and operational backups  

• Administration / System / Backup & Restore / Backup & Restore

6. log back into cli 

7. show running-config | inc username

8. see if username now has password encrypted

9.  If password is encrypted log out of cli

10.  attempt to log into cli using new username

hope this helps