Contents

Introduction

Prerequisites

Background Information

Requirements

Hot Patch Files

Installation File

Rollback File

Readme File

Hot Patch Installation Steps

Verify Hotpatch Installation

Hot Patch Rollback Steps

Introduction

This document describes Identity Service Engine (ISE) hot patch/hot fix installation.

Prerequisites

You must have the basic knowledge of the Cisco Identity Service Engine (ISE).

Background Information

- When a known defect is hit and the fixed release is not yet available, you can make use of Hot Patch which is available in Download Portal or you can receive it from Cisco TAC.

- Hot patches must be of last resort if no other possible workarounds are available.

Requirements

- If a known defect is confirmed and it is impacting your environment, you can use a hot patch when there is no known workaround or fixed release.

Hot Patch Files

Typically, there are three hotpatch files:

- Installation

- Rollback

- Readme file.

Installation File

This file must contain the hotpatch installation file.

Format:

- ise-apply-<bugid>_<version_applicable>_<patch_applicable>-SPA.tar.gz

- bugid: provides details of bug

- version_applicable: provides details to install if it is specific to a particular ISE version or common for all versions

- patch_applicable: provides details if it is specific to a particular patch or common for all patches

Examples:

- Suitable for all ISE versions and patches

ise-apply-CSCwk61938_Universal_patchall-SPA.tar.gz

- Suitable for ISE 3.3 version and all patches.

ise-apply-CSCwk61938_3.3_patchall-SPA.tar.gz

- Suitable for 3.3 ISE version and only for patch 4

ise-apply-CSCwk61938_3.3_patch4-SPA.tar.gz

Rollback File

This file is useful for removing the installed hotpatch.

Format:

ise-rollback-<bugid>_<version_applicable>_<customer>_<hotpatchversionnum>-SPA.tar.gz

Examples:

- Suitable for all ISE versions and patches

ise-rollback-CSCwk61938_Universal_patchall-SPA.tar.gz

- Suitable for ISE 3.3 version and all patches

ise-rollback-CSCwk61938_3.3_patchall-SPA.tar.gz

- Suitable for 3.3 ISE version and only for patch 4

ise-rollback-CSCwk61938_3.3_patch4-SPA.tar.gz

Readme File

This file contains the details, important notes, installation steps, rollbacks steps specific to the hotpatch defect.

Hot Patch Installation Steps

You cannot install hotpatches from webGUI. To install hotpatches, you need CLI access.

1. Download the installation file ise-apply-<bugid>_<version_applicable>_<patch_applicable>-SPA.tar.gz

2. Verify that the hash of the downloaded file is correct.

3. Copy the installation bundle to a repository [Repository Creation], which is available to ISE. If you do not have a working repository, you can use the local disk management of ISE from GUI to upload files on respective nodes.

4. Run the #application install <filename> <repository name> command.

Example: #application install ise-apply-CSCwk61938_Universal_patchall-SPA.tar.gz local

Verify Hotpatch Installation

On the CLI, you can see which bundled hotpatches are installed with the command:

#show logging application hotpatch.log

Hot Patch Rollback Steps

1. Download the installation file ise-rollback-<bugid>_<version_applicable>_<patch_applicable>-SPA.tar.gz

2. Verify that the hash of the downloaded file is correct.

3. Copy the rollback bundle to a repository [Repository Creation], which is available to ISE. If you do not have a working repository, you can use the local disk management of ISE from GUI to upload files on respective nodes.

4. Run the application install <filename> <repository name> command.

Example: application install ise-rollback-CSCwk61938_Universal_patchall-SPA.tar.gz local