Introduction
This document describes Identity Service Engine (ISE) hot patch/hot fix installation.
Prerequisites
You must have the basic knowledge of the Cisco Identity Service Engine (ISE).
Background Information
-
When a known defect is hit and the fixed release is not yet available, you can make use of Hot Patch which is available in Download Portal or you can receive it from Cisco TAC.
-
Hot patches must be of last resort if no other possible workarounds are available.
Requirements
- If a known defect is confirmed and it is impacting your environment, you can use a hot patch when there is no known workaround or fixed release.
Hot Patch Files
Typically, there are three hotpatch files:
- Installation
- Rollback
- Readme file.
Installation File
This file must contain the hotpatch installation file.
Format:
- ise-apply-<bugid>_<version_applicable>_<patch_applicable>-SPA.tar.gz
- bugid: provides details of bug
- version_applicable: provides details to install if it is specific to a particular ISE version or common for all versions
- patch_applicable: provides details if it is specific to a particular patch or common for all patches
Examples:
- Suitable for all ISE versions and patches
ise-apply-CSCwk61938_Universal_patchall-SPA.tar.gz
- Suitable for ISE 3.3 version and all patches.
ise-apply-CSCwk61938_3.3_patchall-SPA.tar.gz
- Suitable for 3.3 ISE version and only for patch 4
ise-apply-CSCwk61938_3.3_patch4-SPA.tar.gz
Rollback File
This file is useful for removing the installed hotpatch.
Format:
ise-rollback-<bugid>_<version_applicable>_<customer>_<hotpatchversionnum>-SPA.tar.gz
Examples:
- Suitable for all ISE versions and patches
ise-rollback-CSCwk61938_Universal_patchall-SPA.tar.gz
- Suitable for ISE 3.3 version and all patches
ise-rollback-CSCwk61938_3.3_patchall-SPA.tar.gz
- Suitable for 3.3 ISE version and only for patch 4
ise-rollback-CSCwk61938_3.3_patch4-SPA.tar.gz
Readme File
This file contains the details, important notes, installation steps, rollbacks steps specific to the hotpatch defect.
Hot Patch Installation Steps
You cannot install hotpatches from webGUI. To install hotpatches, you need CLI access.
- Download the installation file ise-apply-<bugid>_<version_applicable>_<patch_applicable>-SPA.tar.gz
- Verify that the hash of the downloaded file is correct.
- Copy the installation bundle to a repository [Repository Creation], which is available to ISE. If you do not have a working repository, you can use the local disk management of ISE from GUI to upload files on respective nodes.
- Run the #application install <filename> <repository name> command.
Example: #application install ise-apply-CSCwk61938_Universal_patchall-SPA.tar.gz local
Verify Hotpatch Installation
On the CLI, you can see which bundled hotpatches are installed with the command:
#show logging application hotpatch.log
Hot Patch Rollback Steps
- Download the installation file ise-rollback-<bugid>_<version_applicable>_<patch_applicable>-SPA.tar.gz
- Verify that the hash of the downloaded file is correct.
- Copy the rollback bundle to a repository [Repository Creation], which is available to ISE. If you do not have a working repository, you can use the local disk management of ISE from GUI to upload files on respective nodes.
- Run the application install <filename> <repository name> command.
Example: application install ise-rollback-CSCwk61938_Universal_patchall-SPA.tar.gz local
Feedback