how to change primary node to secondary node ?

[muhammadawwalbinmukhzar]

i need to reset ise password because cannot login to the gui. after i use command reset-passwd ise admin, it show error like (only standalone or primary node can change the password) like that. Because of that ise became secondary node, so i cannot reset the password. so i came up with idea to :

to change secondary node to primary node ? i cannot change because cannot login  to the gui. any ways to change from cli ? please help me. thank you.

[Damien Miller · Accepted solution]

You can only run that command on the primary admin node CLI, but it sets the password for the entire deployment. The GUI local admin account is replicated out.

Can you log in to the primary admin CLI? If so, then running "reset-passwd ise admin" and following the prompts will change the GUI admin password for all nodes.

Are you able to log in to the GUI on any nodes? if yes, but locked out of others would indicate a larger deployment sync issue to me.

[hslai]

Only if automatic failover configured and the primary ISE node is down or if someone click it on the secondary admin node to make it primary, then the ISE primary node becomes secondary but not resetting ISE password.