Reset a disabled password due to administrator lockout

Updated: September 18, 2026

Want to summarize with AI?

Provides instructions on how to reset a locked administrator GUI password using the CLI after the account becomes disabled due to excessive failed login attempts.

If you enter an incorrect password five times, your account becomes disabled.

Use these instructions to reset the administrator user interface password with the application reset-passwd ise command in the Cisco ISE CLI. Resetting the administrator password activates new credentials immediately and allows you to log in without rebooting the system. This process does not affect the administrator's CLI password.

Cisco ISE adds a log entry in the Administrator Logins window. Navigate to Operations > Reports > Reports > Audit > Administrator Logins. Reset your administrator ID password to regain access to your credentials.

This procedure helps you re-enable your credentials so you can resume system management tasks.

Procedure

Access the direct-console CLI and enter:

application reset-passwd ise administrator_ID
Specify and confirm a new password that is different from the passwords that were used most recently for this administrator ID.
```
Enter new password:
Confirm new password:

Password reset successfully
```

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.