ISE My Devices UCP for Enable Passwords

[Patrick Lloyd]

Hi Folks,

I'm referring to the Communities page here:ISE Password Change Portal (UCP) with My Devices Portal Customization

and then also referring to the related page here: ISE Network Access User password change

My customer is currently using the script that Jason used to allow for My Devices Portal to be used for password change of an internal user.  They would not like to change the enable password as well.  A couple questions:

1. Is this possible with a similar script customization?

2. I understand that enable passwords, and even login passwords, can be changed through the standard password change abilities within a switch's TACACS login prompt.  However, unless I'm mistaken, because of the MSCHAPv2 mechanism this uses, I thought it could only be done if the identity store is AD, and not the internal identity store.  Could I get confirmation on this, or correction if I'm incorrect?

Thanks!

[hslai · Accepted solution]

On 1, Jason said no.

On 2, T+ does not need MSCHAPv2 to effect a password change. It works for internal users' enable password field, as I demonstrated in the other post.