ISE 3.3

[malik.shafqat1]

We are facing an issue with our Cisco ISE deployment (version 3.3). After enabling the External Admin Authentication Source from the GUI, we are no longer able to log in to the ISE GUI with the internal admin account or any newly created accounts.

Details:

• Cisco ISE version: 3.3

• Access to CLI is working (we can log in with the CLI admin user).

• Tried the following without success:

  • application reset-passwd ise admin

  • application create-superadmin-user <username>   (This command is not working)

  • Creating new local admin users from CLI

• Problem: All these accounts only work for CLI. The GUI does not accept them because the Internal Admin source is disabled.

As a result, we are completely locked out of the GUI.

Request:
Please assist in re-enabling the Internal Admin Authentication Source (or guide us on how to reset this flag) so that we can log in to the GUI again.

[Mark Elsen]

   - @malik.shafqat1   Check if you can find any useful info's from these logs   through the CLI 
                                                    show logging application ise-psc.log
                                                            show logging application ise-admin.log
                                                            show logging application ise-identity.log

  M.

[Torbjørn]

You cannot see the dropdown menu under the username & password field to select the authentication "domain"?

[MHM Cisco World]

reset the Admin GUI authentication method <<- this option under ""application configure ise""

Check it

Note:- I dont use it before' read more before apply any change 

MHM