ISE upgrade path

Greetings,

Other projects of the road so finally getting back to our deployment of ISE which becomes behind.

We are on 1.2.1 Patch 2. We want to get to 2.x, of course, but it's all new, let's it cook in the oven for a while.

Looking at the download page, it apppears, we will have to go to 1.3 or 1.4 on our way to 2.x.

So I think we will move to 1.4 and run it for a few months before going to 2.x.

Question: Does a sense?

Question: Is there a reason to apply the latest patch (8) to 1.2 before the 1.4 update, or should I just go directly to the 1.4?

Thank you.

Leroy,

You'll want to go to patch 5 before upgrading.  Take a look at the guide to update 1.4 ISE:

http://www.Cisco.com/c/en/us/TD/docs/security/ISE/1-4/upgrade_guide/b_ise_upgrade_guide_14/b_ise_upgrade_guide_14_chapter_01.html#ID7

Tim

Tags: Cisco Security

Similar Questions

  • Impossible to reinstall XP, error «...» Windows is not a supported upgrade path"

    Computer is 2001 Sony Vaio apparently infected Office who knows what, if I want to do a clean install of the operating system. The computer came with Windows ME and a drive to upgrade to XP. 5 years, a technician thought he was doing me a favor and installed without my knowledge its own XP Pro.

    I tried to do an installation of my upgrade XP disc but I get this message: Setup is impossible to pass your current installation of Windows XP. Your current Windows installation is not a supported upgrade path. Setup cannot continue.

    I also tried to use the Sony system recovery CD, but it does not work.

    Help!

    Hi IAMSOBZ,

    As you install the operating system from a CD to upgrade it you will be asked for support of qualification, you can insert your Windows Millennium Edition or any CD which is an edition less than Windows XP Professional.

    Important: You will need to have a CD of Windows 98/Me/2000 eligible to insert if you are using a version update of XP to clean install. OEM restore disks will not usually fill the eligibility standard. If the restore disc i386 folder, it will work normally.

    a. start your computer from the Windows XP CD-ROM. To do this, insert the Windows XP CD into your CD or DVD and then reboot your computer.

     

    Note: To boot from the Windows XP CD, your computer BIOS settings must be configured to do this.

    b. When you see the message "Press any key to boot from CD", press any key to start the computer from the Windows XP CD.

    c. once the Welcome to Setup screen, press ENTER to start Windows XP Setup.

    d. read the Microsoft software license agreement and press F8.

    e. Setup will scan for previous Windows installations

    f. you will need to replace the CD of XP with your qualifying CD; XP Setup will scan the qualifying CD and ask you to replace it with the XP CD to continue installing XP.

    g. complete the installation

    You can refer the link to find out how to install Windows XP below: how to install or upgrade to Windows XP: http://support.microsoft.com/kb/978307

    With regard to:

    Samhrutha G S - Microsoft technical support.

    Visit our Microsoft answers feedback Forum and let us know what you think.

  • IDRAC6 upgrade path

    I am temporarily caring for a Dell PowerEdge T610 purchased in 2012.  Our outsourced IT Department walked me through some maintenance tasks, including required launches a Virtual Console through iDRAC6. Apparently my iDRAC6 version (V1.80) is so old, no modern browser it supports fully. What I have for the most part works with Chrome and FireFox, not IE (but it's OK - I don't work with IE either).

    I am trying to determine if a firmware upgrade path exists for my hardware, and if so, what are the steps. None of my research on the Dell Web site have meaningful results. Since my system is no longer under warranty I don't get a lot of help by telephone, and "cat" is denied for me as well.

    If anyone can point me to a good place to get started which would be a great help.  Thank you!

    Hello.

    See the upgrade below. First apply the BIOS, then the respective DRAC6 firmware.

    6.2.3 BIOS iDRAC6 v1.92                   

    BIOS 6.3.0 iDRAC6 v1.95                  

    BIOS 6.4.0 iDRAC6 v1.97, iDRAC6 v1.99 , and iDRAC6 v2.8.0                  

    The path of update will prevent iDRAC communication and other server issues.

  • Upgrade path 5500 series ASA-SSM-10

    Can anyone provide the proper for the 5500 series ASA-SSM-10 upgrade path of

    6.0 (5) E2

    TO

    7.1 (10) E4

    The release notes state that you must run just least 6,0000 e4 could so I just spend 6,0000 E4 5,0000 E2 then directly to 7.1 (10) E4?

    Also, the SSM-10 is able to effectively run the 7.1 (10) E4?

    Hello

    Yes, you can directly upgrade 6.0.5E2 to 6.0.6 E4 and then directly to version 7.1. (10) E4. After the upgrade for the latter, you might even go to latest available patch as well.

    -Yes, SSM1 - is able to effectively execute the 7.1.0E4.

    Kind regards

    Akshay Rouanet

  • ACS 5.1 upgrade path

    Hello

    I have just unpacked ACS1121 with 5.1.0.44... Version of the ACS software. Y at - it (upgrade path) proceedings at this level to a version 5.2.x (later

    5-2-0-26-5)?

    You use a repository of tftp. If so try with a ftp repository

  • C / SX / EX / MX upgrade paths

    Hello

    I have been the scene of c20 upgrades via the GUI and CPC, 4.x > 5.1.1 > > 7.3.2 7.1.1 hopping. 3rd party support told me that this is the way to upgrade the C20s.

    I struggled to find any documentation to confirm this upgrade path to 7.3.2. I'm about to proceed to the upgrade C40s and 60 with SX / EX / models MX.

    I'm looking for the validation of the document confirm how best to spend to 7.3.2 on all of the above models.

    I looked at the release notes do not seem to talk about any version of jump requirement.

    Thank you

    B

    You can go directly to the current version of the TC software without having to jump several releases to get there.  You'll just need to get the keys to unlocking the Cisco Licensing Portal TC7.x and apply it on the codecs, before doing the upgrade.  Applying the unlock key invites you to restart, you can disregard and go directly to download TC as the upgrade to restart anyway endpoint and apply the release key at the same time.

    Note, it is important that you read well ALL the TC release notes for the current version, you have up to TC7.  There are several versions where changes have been made that could be important to you.  Some of these changes are:

    • TC5.x - required serial connection is by default enabled (important only if you use control 3rd party such as Crestron or AMX systems)
    • TC6.x - layouts have changed, especially when using two screens with presentation and selfview.
    • TC7.x - Root access has been removed (I noticed that mention you SCP that requires root access), also instantaneous behavior has changed over the previous day.
  • 13.2.2 to 14.5.0 TMS upgrade path

    Hello

    I'm looking to make an upgrade to TMS 13.2.2 we currently have running on an old box of Windows 2003 R2.

    We are looking to set up a new server using 2012 R2 as the operating system.

    The environment:

    Windows 2003 R2

    SQL Express 2005 w/DB hosted locally

    13.2.2 TMS

    TMSXE (on another server) 3.0.2

    The methodology of Migration:

    Migrate the existing database to a SQL server hosted and test all the features

    If it is successful then

    • Remove the old server from domain/network
    • Rename the new server the same as
    • Install the TMS 14.3.0 on the new connection to the existing database server, hosted on the external SQL Server
    • Run the time zone update tool that comes in 14.3.0
    • Update the 14.3.0 existing install 14.5.0

    This methodology seems as if it was the right way to go? There are fundamental flaws, that I don't see here?

    I did this upgrade path in the laboratory successfully using a copy of our existing database, I have no alternative endpoints or vcs-control etc. to connect to the lab to prove everything works after upgrade.

    I look forward to your responses.

    Thank you

    Alex

    Hello Alex.

    You should consider upgrading to TMS 14.6, which is the most recent version.  14.6 TMS notes.

    TMS 14.5 supports only Windows Server 2012, not 2012 R2, but 14.6 done TMS.  Also, if you are not already the case, consider using SQL Server 2012 or 2008 R2 64 bit, to be compatible with future versions of TMS.

    The steps that you listed sounds good, just check on that TMS installation guides for supported versions of WIndows and SQL details, as well as all the required components.

  • vCD 8 upgrade path

    Hi all

    Can upgrade you form vCD 5.5 directly to vCD8.0 or are you to go first to 5.6.4?  I can't find anything in the notes version or installation & Upgrade guide.

    Dave

    OK - I answered my own question with the Matrices of the interoperability of VMware products.  I don't know if the "Upgrade Path" option is new, but I don't remember having seen it before.  In any case, the vCD 8.0 upgrade is supported from version 5.5.4 and 5.6.4.

    Dave

  • Upgrade paths for vCenter Server 4.0/32-bit to 64-bit/5.0

    So, for various reasons beyond my control, when we installed vCenter server when we migrated from 3.5 to 4.0, it has been installed on 32-bit Windows.

    Data backended by a full instance of SQL Server (not the MSDE version that comes pre-packaged with vCenter).

    So, I try to understand the strategy of less impact for the trip to 5.0.

    One idea I had is simply to build a new 'home' for vCenter Server on x 86-64 and point the application on the existing database running on 32-bit windows server. (I'm guessing that the 32/64-bit nature of the database server itself is largely irrelevant as it allows 64-bit vCenter Server to talk to it). I think then that all information cluster all would remain intact since it's in the database, etc..

    If I had to, I guess, we could install vCenter 4.0 (64-bit) on the new host and THEN perform the upgrade, if it was really important, but I somehow don't think it is.

    Once that is done, we would eventually just make a backup/restore type upgrade path to move data out of the old host and the new host and re-point vCenter Server in its local database now.

    A that someone does something similar to this? Traps, we should be aware of? Warnings that it would never work the way we expect it to be, etc, etc. ?

    One idea I had is simply to build a new 'home' for vCenter Server on x 86-64 and point the application on the existing database running on 32-bit windows server. (I'm guessing that the 32/64-bit nature of the database server itself is largely irrelevant as it allows 64-bit vCenter Server to talk to it). I think then that all information cluster all would remain intact since it's in the database, etc..

    That's what I'd do.  It your DB is remote, it is a fairly straightforward upgrade.

    1. turn off your old Instance vCenter

    2. backup your DB instance

    3 copy the SSL directory off the old vCenter and the new (you'll probably to manually create the path, before installing vCenter)

    4 set up your ODBC connection and test

    5. install vCenter and use existing DB

    Assuming that you are going to use the same host name and IP address for your new instance of vCenter, like your old, all stocks will be as it was before the upgrade.

  • Adobe Reader 8.1.7 upgrade path?

    Could someone please explain the upgrade path to Adobe Reader 8.1.7 for me? I read the tech note "Adobe Acrobat and Reader to date and deployment information" and I am still a little uncertain.

    Our most currently deployed version is 8.1.6 but some of our users still have older versions (8.1.2 ~ 8.1.5) installed. I've been distributing Adobe Reader via SMS 2003 from version 8.1.2 as below:

    8.1.2 - customized using Adobe Cusomtization 8 (Setup.exe /sPB /rps /rs) Assistant

    8.1.3 - customized using Adobe Cusomtization 8 (Setup.exe /sPB /rps /rs) Assistant

    8.1.4 - straight (number installAdbeRdrUpd814_all_incr.msp! /norestart)

    8.1.5 - right installation (number AdbeRdrUpd815_all_incr.msp! /norestart)

    8.1.6 - right installation (number AdbeRdrUpd816_all_incr.msp! /norestart)

    So, what is my upgrade for Adobe Reader 8.1.7 - right installation path (number AdbeRdrUpd817_all_incr.msp! /norestart) or do I need to customize using Adobe's Assistant to keep the desired settings? Appreciate any advice anyone can offer. Thank you very much.

    Adobe Reader 8.1.7 patch can be applied only to 8.1.6. Then first you must bring all your systems to 8.1.6 and then apply 8.1.7 patch.

    Custom settings do not download if you install 8.1.7.

    If you have a system with 8.1.3 or 8.1.4 or 8.1.5 so that-

    Apply 8.1.6 patch--> Apply 8.1.7 patch

    If you have a system with 8.1.6 then do-

    Apply 8.1.7 patch

    If you have a clean system, then the shortest is to install the reader 8.1.7-

    Install Reader 8.1.6 Apply patch 8.1.3-->--> Apply 8.1.7 patch

    NOTE: Reader 8.1.3 is an install (msi) full 8.1.6 and 8.1.7 are patches (msp).

  • ISE upgrade problem

    I tried to upgrade ISE in stand-alone deployment of the 1.2.1.198 to 1.3

    -My file name and size is identical to what I see in the cisco.com download article (name: ise-upgradebundle - 1.2.x - to-1.3.0.876.repackaged.x86_64.tar.gz, size: 4.02 GB (4,326,538,352 bytes))
    -J' used as a result of orders and both have the same error:

    upgrade the application prepare ise-upgradebundle - 1.2.x - to-1.3.0.876.repackaged.x86_64.tar.gz UPGRADE
    application upgrade UPGRADE of the ise-upgradebundle - 1.2.x - at-1.3.0.876.repackaged.x86_64.tar.gz

     
    ISE-application STANDALONE # upgrade ise-upgradebundle - 1.2.x - to-1.3.0.876.repackaged.x86_64.tar.gz UPGRADE
    Save the current running of ADE-OS configuration? (yes/no) [Yes]? Yes
    Building configuration...
    Save the current configuration of ADE-OS at startup

    Get the package to the local computer.
    MD5: 76e17877c2fb70d1006a20780fbf5b98
    SHA256: 461a0931c2f498399d96f195b1ab3d196fe7694f6e0cc2b4cb75928aced5f1c7
    % Please confirm above cryptographic hash matches that which is available on the Cisco download site.

    Downlod and MD5 exactly like Ciscoes published file size, but the SHA algorithm is different:
    Cisco download site show SHA512 Checksum: ea2e5eee527c145eb971e2a7806e6185

    The projection of the ISE: sha256: 461a0931c2f498399d96f195b1ab3d196fe7694f6e0cc2b4cb75928aced5f1c7

    Can someone please advise what the problem with the above steps or how to fix the above error. ?

    Check your SHA512 hash matches using an external control (such as http://download.cnet.com/MD5-SHA-Checksum-Utility/3000-2092_4-10911445.html ).

    Then use the same utility to calculate the SHA256 before transferring the file to ISE. Which allows to check.

  • Delicate ISE upgrade

    Thanks to all in advance.

    Here's my situation.

    1 (primary) node that is the version

    *****************************************************

    XXX-ISE01 / admin # sh version

    Deploying applications engine Cisco OS version: 2.0

    ADE-OS Build Version: 2.0.2.103

    ADE-OS System Architecture: i386

    Copyright (c) 2005-2011 by Cisco Systems, Inc.

    All rights reserved.

    HostName: XXX-ISE01

    Version information for the installed applications

    ---------------------------------------------

    Cisco Identity Services engine

    ---------------------------------------------

    Version: 1.1.0.665

    Date of construction: XXXXXXXXX

    Install Date: XXXXXXXXXX

    Cisco Identity Services engine Patch

    ---------------------------------------------

    Version: 3

    Install Date: XXXXXXXXXXXXXX

    **************************************************************

    I need this pair (with this being the main one) with a secondary node running ADE-OS and Application ISE 1.1.4

    I get an error stating that my application server must be at least the same version to match the two.

    My question is how can I upgrade the primary without losing my configuration and license information? Or maybe a better question. I need a script that allows me to upgrade the server applications and the pair in high school with minimal downtime.

    Concerning

    Nate,

    You should be able to move from 1.1.0.665 to 1.1.4 directly.  When download EHT 1.1.4 upgrade bundle, it indicates that a direct upgrade from 1.1.x is supported and which covers 1.1.0.665.  See the attached picture.

    Here is a link to the validated for 1.1.4 Release Notes:

    http://www.Cisco.com/en/us/docs/security/ISE/1.1.1/Release_notes/ise111_rn.html

    Note that they 1.1.x State, but have been downloaded from the 1.1.4 download page and have been updated to include the 1.1.4.

    If it helps, please note the answers and mark it as response.

    Good luck and happy updates!

    Charles Moreton

  • ISE upgrade fails for 1.1.2.145 1.1.0

    Hello

    I am trying to upgrade ISE 1.1.0 to 1.1.2.145 in vain. Find the details below.

    DR-ise-pdp-01 / admin # application upgrade to ise-appbundle - 1.1.2.145.i386.tar.gz ISE1

    Save the current running of ADE-OS configuration? (yes/no) [Yes]?

    Building configuration...

    Save the current configuration of ADE-OS at startup

    Launch the Application upgrade...

    Stop ISE application before upgrade...

    Being upgraded database ISE...

    Failure of the upgrade of request %. Please check the logs for more details.

    Concerning

    Hello

    Try to go to v1.1.1 first, add patch3 and then go to v1.1.2.

    ISE relaese notes:

    Upgrade Cisco ISE, version 1.1.1 for release 1.1.2

    Before you can upgrade to Cisco's ISE, version 1.1.2 you must be firstly that you have improved your machine at ISE of Cisco, version 1.1.1 with patch 3 applied. For specific instructions about how to upgrade, see the Cisco Identity Services engine Upgrade Guide, version 1.1.x.

    HTH

  • ISE upgrade question

    Try to 1.1.1.268 upgrade patch 5 at 1.1.2.145.  It fails to say that the package is not in the correct format via the GUI.  Tried via CLI and I see it in the newspapers.

    3 jan 18:25:42 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [245] []: install initiated with bundle - ise-appbundle - 1.1.2.145.i386.tar.gz, repo - patches

    3 jan 18:25:42 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [259] []: stage area - /storeddata/Installing/.1357237542

    3 jan 18:25:42 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [263] []: get the package to the local computer

    3 jan 18:25:42 oranetise02 debugd [2507]: [22327]: transfer: cars_xfer.c [54] []: ftp copy in ise-appbundle - 1.1.2.145.i386.tar.gz asked

    3 jan 18:26:12 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [272] []: Got bundle at-/storeddata/Installing/.1357237542/ise-appbundle-1.1.2.145.i386.tar.gz

    3 jan 18:26:12 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [282] []: unbundling package ise-appbundle - 1.1.2.145.i386.tar.gz

    3 jan 18:26:52 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [294] []: made the separation. Checking input parameters...

    3 jan 18:26:52 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [316] []: manifest file is at the - /storeddata/Installing/.1357237542/manifest.xml

    3 jan 18:26:52 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [326] []: Manifest file appname - ise

    3 jan 18:26:52 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [364] []: fixes batch contains patch ((null)) for app version (1.1.2.145)

    3 jan 18:26:52 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [367] []: patch for the version of the application (1.1.2.145) does not match the version of the installed app

    3 jan 18:26:53 oranetise02 debugd [2507]: [22327]: application: install install_cli.c [691] []: error message: the Patch can not be applied to the version of the installed application.

    The 3 January 18:26:53 oranetise02 debugd [2507]: [22327]: application: installation install_cli.c [694] []: error during installation - batch of patches: ise-appbundle repository - 1.1.2.145.i386.tar.gz: ErrorCode patches:-623 3 January 18:25:42 oranetise02 debugd [2507]: [22327]: application: installation cars_install.c [245] []: Install initiated with bundle - ise-appbundle - 1.1.2.145.i386.tar.gz, repo - patches
    3 jan 18:25:42 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [259] []: stage area - /storeddata/Installing/.1357237542
    3 jan 18:25:42 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [263] []: get the package to the local computer
    3 jan 18:25:42 oranetise02 debugd [2507]: [22327]: transfer: cars_xfer.c [54] []: ftp copy in ise-appbundle - 1.1.2.145.i386.tar.gz asked
    3 jan 18:26:12 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [272] []: Got bundle at-/storeddata/Installing/.1357237542/ise-appbundle-1.1.2.145.i386.tar.gz
    3 jan 18:26:12 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [282] []: unbundling package ise-appbundle - 1.1.2.145.i386.tar.gz
    3 jan 18:26:52 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [294] []: made the separation. Checking input parameters...
    3 jan 18:26:52 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [316] []: manifest file is at the - /storeddata/Installing/.1357237542/manifest.xml
    3 jan 18:26:52 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [326] []: Manifest file appname - ise
    3 jan 18:26:52 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [364] []: fixes batch contains patch ((null)) for version (1.1.2.145) app
    3 jan 18:26:52 oranetise02 debugd [2507]: [22327]: application: install cars_install.c [367] []: patch for the version of the application (1.1.2.145) does not match the installed app version

    3 jan 18:26:53 oranetise02 debugd [2507]: [22327]: application: install install_cli.c [691] []: error message: the Patch can not be applied to the version of the installed application.
    3 jan 18:26:53 oranetise02 debugd [2507]: [22327]: application: install install_cli.c [694] []: error during installation - batch of patches: ise-appbundle repository - 1.1.2.145.i386.tar.gz: ErrorCode patches:-623

    David,

    You can pass only the ise node when its autonomous and through cli mode. Please, use the command to upgrade the application to do the upgrade.

    Here are a few reference documents.

    http://www.Cisco.com/en/us/docs/security/ISE/1.1.1/upgrade_guide/upg_sta...

    Sent by Cisco Support technique Android app

  • ISE upgrade license

    I ise 1.4 with:

    1 license expired

    2. licenses for sale

    can upgrade EHT 1.4 to 2.0 with expired licenses?

    You can upgrade with expired license. However, best recommendation is to have the ISE in good shape wrt to all features.  If you renew the licence, it will also improve with upgrade of the ISE.

    concerning

    Gagan

    PS: Note If this can help!

Maybe you are looking for