Cisco Cisco Identity Services Engine Software

There is a known issue regarding default “admin” administrator user interface access following upgrade 
from Cisco Identity Services Engine Release version 1.0.3.377. This issue can affect Cisco ISE 
customers who have not changed their default “admin” account password for administrator user interface 
login since first installing Cisco Identity Services Engine Release 1.0.3.377. 

Upon upgrading, administrators can be “locked out” of the Cisco ISE administrator user interface when 
logging in via the default “admin” account where the password has not yet been updated from the 
original default value.

To avoid this issue, Cisco recommends you do one or more of the following:

Verify they have changed password per the instructions in the “Managing Identities” chapter of the 

 prior to upgrade.

Disable or modify the password lifetime setting in the Administration > System > Admin Access 
> Password Policy page of the administrator user interface prior to upgrade to ensure the upgraded 
policy behavior does not impact the default “admin” account.

Enable password lifetime setting reminders in the Administration > System > Admin Access > 
Password Policy page to alert admin users of imminent expiry. Administrators should change the 
password when notified.

Although the above conditions apply to all administrator accounts, the change in behavior from Cisco 
ISE version 1.0.3.377 only impacts the default “admin” account.

Complete instructions for moving your Cisco Secure ACS 5.1 or 5.2 database to Cisco ISE Release 1.1 
are covered in the

.

You must upgrade your Cisco Secure ACS deployment to Release 5.1 or 5.2 before you attempt to 
perform the migration process to Cisco Identity Services Engine.

After you have moved your Cisco Secure ACS 5.1 or 5.2 database over, you will notice some differences 
in existing data types and elements as they appear in the new Cisco ISE environment. Microsoft 
Windows Internet Explorer (IE8 and IE7) browsers are not currently supported in this release.

Cisco ISE comes with a 90-day Base and Advanced package evaluation license already installed on the 
system. After you have installed the Cisco ISE software and initially configured the primary 
Administration persona, you must obtain and apply a Base, Base and Advanced, or Wireless license for 
your Cisco ISE. 

 summarizes the Cisco ISE license types. (Although the evaluation license allows 

you to provide support for both wired and wireless users, purchasing and applying a Wireless License option 
cuts off support for any wired users you may have been supporting during the evaluation period.)