ISE account password update failed

[umeshunited]

Hello all, 

Recently I changed ISE CLI and GUI password. I keep on getting "AD: ISE account password update failed". 

What needs to be done here ? 

[hslai]

This message indicates that ISE unable to update the password of its AD computer account.

You might be hitting CSCvg15960. Please try applying the latest patch of the ISE release. Or, engage Cisco TAC to debug further.

[umeshunited]

Thank you for your reply,

But I have some questions here.

1 ) We are running version 2.4 , and is not mentioned in the list of affected version.

2) While checking CSCvg15960 bug details , I checked symptoms and see that " AD connector will show "not connected". But in my case it is not showing not connected.

Thanks in advance.  

[hslai]

After joining to an AD domain, ISE periodically updates its password in AD. If you already check your AD and no issue found for ISE in performing such, please engage TAC.

The fix for CSCvg15960 causes ISE to update its password in AD every 30 minutes and then the fix for CSCvi50979 restores the interval to every 15 days.