Core issue
The User Changable Password (UCP) is utility to change user password (local acs database) that can be used only when the user account status is active. As UCP utility is not interactive, you are not prompted to change the password. The UCP is used when you want to change your password and not when you are forced to do it.
Note: The UCP does not work if the user account is expired due to password expiry.
Resolution
Complete these steps in order to change your password with the UCP before password expiry:
- On a web browser, open the UCP page with the administrator-provided URL.
- Type your username and password, and then click Submit.
The Change Password page opens. The username you entered on the previous page appears in the Username box.
- Specify this information:
- Choose Submit. Your password is changed.
- Choose Logout in order to exit.
Refer to User Guide for Cisco Secure ACS User-Changeable Passwords for more information.