Cisco Identity Services Engine Upgrade Guide, Release 1.1.x
Upgrading a Standalone Node
Downloads: This chapterpdf (PDF - 110.0KB) The complete bookPDF (PDF - 890.0KB) | Feedback

Upgrading a Standalone Node

Table Of Contents

Upgrading a Standalone Node

Upgrading the Cisco ISE Standalone Node

Replacing Cisco ISE Standalone Appliance Running a Previous Version with an Appliance Running 1.1.4

Replacing an ISE Appliance Running a Previous Version with a Cisco SNS-3400 Appliance


Upgrading a Standalone Node


This chapter describes the following procedures:

Upgrading the Cisco ISE Standalone Node

Replacing Cisco ISE Standalone Appliance Running a Previous Version with an Appliance Running 1.1.4

Upgrading the Cisco ISE Standalone Node

You can execute the application upgrade command from the CLI on a standalone Cisco ISE node that assumes the Administration, Policy Service, and Monitoring personas.

To upgrade the Cisco ISE on a standalone node:


Step 1 Perform an on-demand backup (manually) of the standalone ISE node from the admin user interface or CLI and an on-demand backup of the Monitoring node from the admin user interface before upgrading the Cisco ISE.

For more information on how perform an on-demand backup, see the "Performing an On-Demand Backup" section.

Step 2 Launch the application upgrade command from the Cisco ISE CLI. This process internally upgrades the application binaries, the Database schema, and the datamodel module. It also handles upgrading any Cisco Application Deployment Engine (ADE) Release 2.0 operating system (ADE-OS) updates.

If a system reload is required to complete the upgrade process, the Cisco ISE node is restarted automatically following a successful upgrade.

The CLI transcript for a successful upgrade on a standalone node should look like the following:

ise-vm29/admin# application upgrade ise-appbundle-1.1.1.xxx.i386.tar.gz myrepository
Save the current ADE-OS running configuration? (yes/no) [yes]? 
Generating configuration...
Saved the ADE-OS running configuration to startup successfully
Initiating Application Upgrade...
###############################################################
NOTICE: ISE upgrade requires you to change the database
administrator and database user password. You will be
prompted to change these passwords after the system reboots.
###############################################################
Stopping ISE application before upgrade...
Running ISE Database upgrade...
Upgrading ISE Database schema...
ISE Database schema upgrade completed.
Running ISE Global data upgrade as this node is a STANDALONE...
Running ISE data upgrade for node specific data...
 
   
This application Install or Upgrade requires reboot, rebooting now...
 
   

Step 3 After you upgrade from Cisco ISE Release 1.0.3.377 or Cisco ISE Maintenance Release 1.0.4.573 to Cisco ISE Release 1.1.x, you may be unable to use the SFTP repository until you accept the host key by using the host-key host <sftpservername> command. See the Cisco Identity Services Engine CLI Reference Guide, Release 1.1.x for more information on the usage of the command.


Note After you upgrade from Cisco ISE Release 1.0.3.377 or Cisco ISE Maintenance Release 1.0.4.573 to Cisco ISE, Release 1.1.x, the scheduled backup jobs need to be recreated, as the older jobs will not work properly.



Note The following Step 4 is applicable only if you are performing an upgrade from the Cisco ISE Release 1.0.3.377 to any future release. You may ignore this step otherwise.


Step 4 After the reboot process completes, you are prompted to log in with your login credentials and are asked immediately to provide new Cisco ISE internal database administrator and user passwords. (This part of the process is only successful if the user account that you are using to log in has administrator-level access privileges.)

login: admin
password:
% NOTICE: ISE upgrade requires you to change the database administrator and user 
passwords, before you can start the application.
Enter new database admin password: 
Confirm new database admin password:  
Enter new database user password: 
Confirm new database user password:  
Starting database to update password...
 
   
Starting database to update password...
ISE Database processes already running, PID: 3323
Starting ISE Monitoring & Troubleshooting Session Database...
Starting ISE Application Server...
Starting ISE Monitoring & Troubleshooting Alert Process...
Starting ISE Monitoring & Troubleshooting Log Collector...
Starting ISE Monitoring & Troubleshooting Log Processor...
Note: ISE Processes are initializing. Use 'show application status ise'
      CLI to verify all processes are in running state. 
 
   

If there is any failure during an upgrade of application binaries and the Cisco ADE-OS, you can only remove and reinstall the previous version of the application bundle and restore the backup.

See Recovering from Upgrade Failures on a Standalone Node for details on how to recover from upgrade failures.



Note After you upgrade from Cisco ISE Release 1.0.3.377, Cisco ISE Maintenance Release 1.0.4.573 or Cisco ISE Release 1.1 to Cisco ISE Release 1.1.x, the scheduled backup jobs need to be recreated because the older jobs will not work properly.


Replacing Cisco ISE Standalone Appliance Running a Previous Version with an Appliance Running 1.1.4

This upgrade scenario is required only if you are upgrading your Cisco ISE Maintenance Release 1.1.1, 1.1.2, or 1.1.3 software to the Cisco ISE, Release 1.1.4 at the same time as you are replacing your existing Cisco ISE chassis.

If you are using the same physical appliance or a virtual machine, we recommend that you use Performing an Application Upgrade from the CLI, instead of backup restore.

To replace a Cisco ISE standalone appliance that runs the Cisco ISE 1.1.x (not Cisco ISE 1.1.4) software with Cisco ISE appliance that runs the Cisco ISE Release 1.1.4, complete the following steps:


Step 1 Back up the Cisco ISE 1.1.x appliance.


Note Cisco ISE 1.1.x appliance implies an appliance that is currently running Cisco ISE Release 1.1.1, or 1.1.2, or 1.1.3.


Step 2 Start up and configure the new Cisco ISE 1.1.x appliance.

Step 3 Restore the Cisco ISE 1.1.x backup.


Note When you restore data from the backup of a previous version, any existing configuration, regardless of old or new features, will be cleared after the restore.


For more information on how to perform a backup and restore, see Cisco Identity Services Engine User Guide, Release 1.1.x, Chapter 14 "Backing Up and Restoring Cisco ISE Data".


After you restore data, you must wait until all the application server processes are up and running.

To verify that the Cisco ISE application server processes are running, enter the following command from the Cisco ISE CLI:

show application status ise

For more information on the CLI commands, see the Cisco Identity Services Engine CLI Reference Guide, Release 1.1.x.


Replacing an ISE Appliance Running a Previous Version with a Cisco SNS-3400 Appliance

This upgrade scenario is required only if you are upgrading your Cisco ISE Maintenance Release 1.1.1, or 1.1.2, or 1.1.3 to the Cisco ISE, Release 1.1.4 at the same time as you are replacing your existing Cisco ISE chassis.

If you are using the same physical appliance or a virtual machine, we recommend that you use Performing an Application Upgrade from the CLI, instead of backup restore.

To replace a Cisco ISE standalone appliance that runs the Cisco ISE 1.1.x (not Cisco ISE 1.1.4) software with a Cisco SNS-3400 appliance, complete the following steps:


Step 1 Upgrade the Cisco standalone node running Cisco ISE 1.1.x to Cisco ISE 1.1.4.

For more information on upgrading the Cisco Standalone node running ISE 1.1.x to Cisco ISE 1.1.4, see Upgrading the Cisco ISE Standalone Node.

Step 2 Back up the upgraded Cisco ISE appliance.

Step 3 Replace the existing Cisco ISE appliance with an SNS appliance by performing a fresh install.

For more information on performing a fresh install of the SNS appliance, refer to the following section in the Cisco ISE 1.1.4 Installation Guide: http://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/
ise_app_b-hw_ins_3400.html
.

Step 4 Start up and configure the new SNS appliance.

For more information on configuring the new SNS appliance, refer to the following capter in the Cisco ISE 1.1.4 Installation Guide: http://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/ise_ins.html.

Step 5 Restore the Cisco ISE 1.1.4 backup onto the new SNS appliance.


Note When you restore data from the backup of a previous version, any existing configuration, regardless of old or new features, will be cleared after the restore.


For more information on how to perform a backup and restore, see Cisco Identity Services Engine User Guide, Release 1.1.x, Chapter 14 "Backing Up and Restoring Cisco ISE Data".


After you restore data, you must wait until all the application server processes are up and running.

To verify that the Cisco ISE application server processes are running, enter the following command from the Cisco ISE CLI:

show application status ise

For more information on the CLI commands, see the Cisco Identity Services Engine CLI Reference Guide, Release 1.1.x.