Cisco ISE 3.2 API authentication failed after installing Patch7

[m-benhmida11-mbh]

Hi community,

I had a cisco ISE 3.2 Patch 6 everything was fine until i installed the Patch 7, the API authentication stopped working i got 401 unauthorized i tried with my super Admin account (AD account), i tried to access the API from the browser and from Postman same result always, it only works when i create a new local user, but i can't go with that workaround i need a solution please.

[balaji.bandi]

check any bugs associated in release notes and open a TAC case to investigate for you.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/release_notes/b_ise_32_RN.html#c_resolved_caveats_32p7

[m-benhmida11-mbh]

I found this on the release notes on cisco website :

Deprecated features :

Configuring RSA or RADIUS external databases for API authentication

From Cisco ISE release 3.2 patch 7, configuring RSA or RADIUS external databases for API authentication is no longer supported.

it means that the Patch 7 no longer accept external admins i think am i right ?

[balaji.bandi]

So you need to re-configure after patch7 to fix the issue. i will also advise to contact TAC. patch should not remove the features.

agreed on the new version can change the feature deprecating older security vul.