To complete any of the upgrade procedures described in this chapter, you need to know the latest version of the System package for the relevant Catalyst Center release. To determine the latest version:

1. From the release notes landing page, open the release notes for the appropriate Catalyst Center release.

2. Refer to the "Package versions in Catalyst Center" table, and note the listed system release.

• Support for direct upgrades to global SMU patches is available starting with Catalyst Center 2.3.7.9.70301.10.

• If you want to enable group-based policy in your Catalyst Center deployment, the correct version of Cisco ISE must be configured. For more information, see Cisco ISE is required for group-based policy.

• By default, restricted shell (which limits access to the underlying operating system and file system) is enabled in Catalyst Center. Restricted shell with consent token is enabled for security purposes. If you want to access the root shell temporarily, you must contact the Cisco TAC for assistance. For more information, refer to "About restricted shell" in the Cisco Catalyst Center Administrator Guide.

• Unless otherwise noted, the upgrade to an earlier version of 2.3.7.x (such as 2.3.7.7) has the same requirements as the upgrade to 2.3.7.11.

• Catalyst Center 2.3.7.11 does not support the first-generation Catalyst Center medium appliance (Cisco part number DN1-HW-APL). Avoid upgrading this appliance to Catalyst Center 2.3.7.11.