Provides step-by-step instructions to upgrade the Cisco ISE Cloud Central Agent infrastructure and bundled Agent by installing a new signed application bundle through the Cisco ISE CLI.
Use this procedure to upgrade the Cisco ISE Cloud Central Agent from the Cisco ISE CLI.
By default, Cisco ISE uses the signed image included in the installed application bundle. The default installation does not use manifest-based image updates.
Manifest-based image updates are optional. They require a configured update manifest and public key.
Before you begin
-
Obtain the signed Cisco ISE Cloud Central Agent bundle for the target version.
-
Copy the bundle to a Cisco ISE repository that the PAN can access. Keep the bundle’s original filename.
-
Note the repository name.
Procedure
-
Log in to the Cisco ISE CLI over SSH on the PAN.
-
Run the upgrade command, specifying the bundle filename and repository name.
application upgrade <bundle-filename> <repository-name>
For example,
application upgrade ISE-CLOUD-CENTRAL-AGENT-bundle-spa-1.0.150.tar.gz nas
Use the filename for the bundle you are upgrading to and the name of the repository that contains it.
-
Wait for the CLI upgrade to finish.
-
Verify the agent on the Cisco ISE Cloud Central Agent setup page. Confirm that the agent status is Running.
-
In Cisco Cloud Control, choose . Confirm that the Cisco ISE integration is Active.
The Cisco ISE Cloud Central Agent and its infrastructure are upgraded.
Verify that the Cisco ISE Cloud Central Agent is running the target agent version. This procedure upgrades the agent only; it does not upgrade Cisco ISE software.
Note
You can integrate a Cisco ISE deployment running an earlier patch level. Cisco recommends upgrading Cisco ISE to a recommended patch level before installing the Cisco ISE Cloud Central Agent. If the agent is already installed when you upgrade Cisco ISE, you might need to uninstall the agent before the ISE upgrade, then reinstall the agent and establish the Cisco Cloud Control connection again.