Postinstallation notes and tasks

To check the status of the instance launch, in the left pane of the AWS console, click Instances. The Status Check column for the instance displays Initializing while the instance is being configured. When the instance is ready and available, the column displays x checks done.

You can access the Cisco ISE GUI or CLI about 30 minutes after the Cisco ISE EC2 instance is built. You can access the CLI and GUI of Cisco ISE with the IP address that AWS provides for your instance and log in to the Cisco ISE administration portal or console.

When the Cisco ISE instance is ready and available for use, carry out these steps:

  1. When you create a key pair in AWS, you are prompted to download the key pair into your local system. Download the key pair because it contains specific permissions that you must update to successfully log in to your Cisco ISE instance from an SSH terminal. Do one of these based on the operating system that you use:
    Actions based on OS

    If you are using...

    Then...

    Linux or macOS

    Run this command from your CLI.

    sudo chmod 0400 mykeypair.pem

    Windows
    1. Right-click the key file in your local system.
    2. Choose Properties > Security > Advanced.
    3. In the Permissions tab, assign full control to the appropriate user by clicking the corresponding option, and click Disable Inheritance.
    4. In the Block Inheritance dialog box, click Convert inherited permissions into explicit permissions on this object.
    5. In the Permissions tab, in the Permissions entries area, choose system and administrator users by clicking the corresponding entries, and then click Remove.
    6. Click Apply, and then click OK.
  2. Access the Cisco ISE CLI by running these command in your CLI application: ssh -i mykeypair.pem iseadmin@<Cisco ISE Private IP Address>
  3. At the login prompt, enter iseadmin as the username.
  4. At the system prompt, enter show application version ise and press Enter.
  5. To check the status of the Cisco ISE processes, enter show application status ise and press Enter. If the output displays that an application server is in Running state, Cisco ISE is ready for use.
  6. You can then log in to the Cisco ISE GUI.
  7. Carry out the postinstallation tasks listed in the topic "List of Postinstallation Tasks" in the Chapter "Installation Verification and Postinstallation Tasks" in the Cisco ISE Installation Guide for your release.

Check the status of the instance launch

To check the status of the instance launch, in the left pane of the AWS console, click Instances. The Status Check column for the instance displays Initializing while the instance is being configured. When the instance is ready and available, the column displays x checks done.

How and when to access the Cisco ISE GUI or CLI

You can access the Cisco ISE GUI or CLI about 30 minutes after the Cisco ISE EC2 instance is built. You can access the CLI and GUI of Cisco ISE with the IP address that AWS provides for your instance and log in to the Cisco ISE administration portal or console.

Download the key pair

When the Cisco ISE instance is ready and available for use, carry out the following steps to download the key pair:

  1. When you create a key pair in AWS, you are prompted to download the key pair into your local system. Download the key pair because it contains specific permissions that you must update to successfully log in to your Cisco ISE instance from an SSH terminal.
  2. Do one of the following based on the operating system that you use:
    Actions to take based on your OS

    If you are using...

    Then...

    Linux or macOS

    Run the following command from your CLI:

    sudo chmod 0400 mykeypair.pem

    Windows
    1. Right-click the key file in your local system.
    2. Choose Properties > Security > Advanced.
    3. In the Permissions tab, assign full control to the appropriate user by clicking the corresponding option, and click Disable Inheritance.
    4. In the Block Inheritance dialog box, click Convert inherited permissions into explicit permissions on this object.
    5. In the Permissions tab, in the Permissions entries area, choose system and administrator users by clicking the corresponding entries, and then click Remove.
    6. Click Apply, and then click OK.

Check the status of the Cisco ISE processes

Follow these steps to check the status of the Cisco ISE processes.

Step 1

Access the Cisco ISE CLI by running the following command in your CLI application:

ssh -i mykeypair.pem iseadmin@<Cisco ISE Private IP Address>

Step 2

At the login prompt, enter iseadmin as the username.

Step 3

At the system prompt, enter show application version ise and press Enter.

Step 4

To check the status of the Cisco ISE processes, enter show application status ise and press Enter.

If the output displays that an application server is in Running state, Cisco ISE is ready for use.

What's next

Log in to the Cisco ISE GUI and carry out the post-installation tasks listed in the topic "List of Post-Installation Tasks" in the Chapter "Installation Verification and Post-Installation Tasks" in the Cisco ISE Installation Guide.