Access Denied in ISE GUI (Fresh Install)?

[Marc_Abaya]

I have a fresh install of ISE ver 3.2 and getting this error when accessing the GUI:

Oops. Something went wrong

Access is denied , please contact your administrator

I can login using the same credentials on SSH and works fine. 

The GUI will not even prompt me to enter the username/password. After I enter the IP add in the browser, that error will show-up. Have tried clearing my browser and using Incognito.

I also tried reloading on "safe mode" as suggested in other posts and installed the patch that fixed the DHCP issues on Gig0 interface. 

Any ideas what's causing this? Here's the running config and this is new install:

interface GigabitEthernet 0
 ip address 10.101.50.15 255.255.255.0
!
ntp server time.nist.gov
ntp server 10.101.50.1
hostname ise01
icmp echo on
ip domain-name 
ip default-gateway 10.101.50.1
ip name-server 8.8.8.8 10.101.50.11
ipv6 enable
logging loglevel 6
password-policy
 digit-required
 lower-case-required
 min-password-length         4
 no-username
 password-expiration-days    45
 password-expiration-enabled
 password-expiration-warning 30
 password-lock-enabled
 password-lock-retry-count   3
 password-lock-timeout       15
 upper-case-required
!
service sshd enable
service sshd encryption-algorithm aes128-ctr aes128-gcm-openssh.com aes256-ctr a                                                                                                             es256-gcm-openssh.com chacha20-poly1305-openssh.com
clock timezone UTC
conn-limit cl 5 port 9061
conn-limit cl1 30 port 9060
username newadmin password hash $6$8VehrQT0frVvc/lx$FSG6rvnmYDTUMm5k7Me3.LyOHyufp                                                                                                             SGzY/mHv1FaStQZDExBq4X5sfZE8cwHyFEOSlqXQaGjEcey1OdxPgyEJ. role admin

[Karsten Iwen]

FIrst check if the application server is running:

show application status ise

Yes, sometimes it takes a long time to start.

[Marc_Abaya]

The processes are running fine. 

ISE PROCESS NAME                       STATE            PROCESS ID
--------------------------------------------------------------------
Database Listener                      running          141193
Database Server                        running          73 PROCESSES
Application Server                     running          157538
Profiler Database                      running          148283
ISE Indexing Engine                    running          159493
AD Connector                           running          160897
M&T Session Database                   running          154034
M&T Log Processor                      running          157769
Certificate Authority Service          running          160686
EST Service                            running          186904
SXP Engine Service                     disabled
TC-NAC Service                         disabled
PassiveID WMI Service                  disabled
PassiveID Syslog Service               disabled
PassiveID API Service                  disabled
PassiveID Agent Service                disabled
PassiveID Endpoint Service             disabled
PassiveID SPAN Service                 disabled
DHCP Server (dhcpd)                    disabled
DNS Server (named)                     disabled
ISE Messaging Service                  running          145227
ISE API Gateway Database Service       running          147303
ISE API Gateway Service                running          152785
ISE pxGrid Direct Service              running          175698
Segmentation Policy Service            disabled
REST Auth Service                      disabled
SSE Connector                          disabled
Hermes (pxGrid Cloud Agent)            disabled
McTrust (Meraki Sync Service)          disabled
ISE Node Exporter                      running          161595
ISE Prometheus Service                 running          162834
ISE Grafana Service                    running          164695
ISE MNT LogAnalytics Elasticsearch     disabled
ISE Logstash Service                   disabled
ISE Kibana Service                     disabled

[balaji.bandi]

what URL you are trying can you post the screenshot ?

Try below :

https://<IP address or host name>/admin/

Make sure you have correct credential setup part of installation task :

https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/install_guide/b_ise_installationGuide32/b_ise_InstallationGuide32_chapter_5.html

[Marc_Abaya · Accepted solution]

This command fixed my problem: application reset-configuration ise 

After the reset I can now get in to the GUI. The GUI it appears is asking from the username "admin" + password but I haven't created that during the setup. My understanding is the initial username/password you've created during the setup will be good for both SSH and GUI. My error there is I didn't use "admin" as my username when I created that account.