Hi Zohaib I've been facing the same error-messages and you, and found a pritty good "Step by Step guide" which helped me out: http://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/identity-based-networking-service/116498-configure-cts-00.html Best Regards Jarle ... View more

According to Cisco: External Authentication AND external Authorisation for Admin acces son the ISE can only be done by using LDAP or AD. For Radius Servers there are a solution for external Authentication and internal Authorisation on the ise: External Authentication + Internal Authorization When configuring Cisco ISE to provide administrator authentication using an external RSA SecurID identity store, administrator credential authentication is performed by the RSA identity store. However, authorization (policy application) is still done according to the Cisco ISE internal database. In addition, there are two important factors to remember that are different from External Authentication + External Authorization: You do not need to specify any particular external administrator groups for the administrator. You must configure the same username in both the external identity store and the local Cisco ISE database. To create a new Cisco ISE administrator that authenticates via the external identity store, complete the following steps: Step 1 Choose Administration > System > Admin Access > Administrators > Local Administrators. The Administrators window appears, listing all existing locally defined administrators. Step 2 Follow the guidelines at Creating a New Cisco ISE Administrator to ensure that the administrator username on the external RSA identity store is also present in Cisco ISE. Be sure to click the External option under Password. Note Remember: you do not need to specify a password for this external administrator user ID, nor are you required to apply any specially configured external administrator group to the associated RBAC policy.   Step 3 Click Save . ... View more

Correct me if i am wrong, but the solution decribes how to Authentication ageinst external AD and not against a external RADIUS server... Does anyon know how to authenticate agains an external RADIUS Server, and what Radius Attributes this can/mus/should send to diferentiate the dfferent administrator groups? Best Regards ... View more

Hi Everyone The we have the same problem - it doesn't seems if Cisco cares to solve this obius prblem with new upgrade images on CCO... After 4 Hours of update of a stand-alone-VM the processes failed to start even waiting for 12 hours. The Update seems to have successfully gone through, we can access the CLI via SSH, but the application services are not going to start. We also tried to stop and start the services (application stop ise/ application start ise) but I get the following message: ise/admin# application start ise Waiting up to 20 seconds for lock: APP_START to complete Database is still locked by lock: APP_START. Aborting. Please try it later % Error: Another ISE DB process (APP_START) is in progress, cannot perform Application Start at this time I'ts really anoying with the poor software quality from Cisco! ... View more