Default Username and Password

[ryanmbess]

During the install of Cisco ISE you are prompted for a username / password.  This account then appears to be the account you can use to SSH into ISE AND Web Auth to ISE.  My question is are these two seperate accounts that just happen to have the same username/password ONLY at time of creation?  Meaning, I can change the account password within SSH and that would have no impact on the account used to log into ISE via HTTPS.  

[Rob Ingram]

@ryanmbess the ISE Admin accounts for GUI and CLI are separate accounts, the passwords are synced during setup.

You can change the CLI Admin password, enter the command password

And to change the GUI Admin password, the command is application reset-passwd ise admin newpassword

[ryanmbess]

Can you point me to any documentation?   Can these accounts be subject to different password requirements?

[Rob Ingram]

@ryanmbess 

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_30_deployment.html?bookSearch=true

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/cli_guide/b_ise_cli_reference_guide_31/b_ise_CLIReferenceGuide_31_chapter_011.html#wp1567780293

[stephenJackson2]

For any that are having issues logging into the GUI of an AWS deployed ISE instance, the username is not 'admin' but 'iseadmin'.  When deploying with the CFT the parameters define the default username as such.  I'm unsure why this is, in the parameters it clearly states "username=admin" but when viewing the password ParameterKey it shows "Enter a password for the username \"iseadmin\". 

[aptii]

https://www.cisco.com/c/en/us/td/docs/security/ise/ISE_on_Cloud/b_ISEonCloud/m_ISEaaS.html#known-limitations-for-using-cisco-ise-on-aws

• An initial administrator user account name, iseadmin, is generated by default. This user account name is used for both SSH and GUI access to Cisco ISE after the installation process is complete.