topic Re: Old ISE as VMware server in Network Access Control

Old ISE as VMware server

KevinR99 — Wed, 12 Jan 2022 09:47:17 GMT

We have decommissioned an old ISE (SNS-3515) which is a UCS C220 M4. Is it possible to re-provision this as a non-production VMware server? I've tried some initial steps and get some problems firstly when trying to boot the VMare install iso. I get an error related to an invalid signature. That led me to finding something on secure boot. I then disabled Secure boot and got a further error related to ISE. I can't recall that exact issue.

So, am I trying to do something here that's just not possible? Some discussions I find elsewhere suggest the device is locked down to stop converting it from its original purpose.

It's a pretty standard server we no longer have a use for as it's original purpose and it would be a pity if we can't use it for something else.

Thanks, Kev.

Re: Old ISE as VMware server

balaji.bandi — Wed, 12 Jan 2022 09:53:09 GMT

Not that i am aware you can use any other purpose - tried some time back WSA appliace - not got success. ( may be you can use spares to plug in other servers if you can use RAM / HDD and CPU.

Re: Old ISE as VMware server

Leo Laohoo — Wed, 12 Jan 2022 10:09:04 GMT

Yes, it can be done.

Re: Old ISE as VMware server

balaji.bandi — Wed, 12 Jan 2022 10:16:06 GMT

Yes, it can be done.

any pointers please so save money to business

Re: Old ISE as VMware server

Leo Laohoo — Wed, 12 Jan 2022 10:21:36 GMT

Same way on how to build VMware. Send the images of the OS via the CIMC.

Re: Old ISE as VMware server

KevinR99 — Wed, 12 Jan 2022 10:29:16 GMT

Leo

I think my original post already stated I had tried that method by booting the VMware ISO. That was done by mounting it via the CIMC/KVM but it didn't succeed due to the 2 issues I mentioned.

Have you managed to do this successfully and if so did you have any hurdles to overcome?

Thanks, Kev.

Re: Old ISE as VMware server

Marcelo Morais — Wed, 12 Jan 2022 11:06:03 GMT

Hi @KevinR99 ,

are you using the latest HUU (Host Upgrade Utility) for the UCS-C220-M4 (at UCS-C220-M4 Rack Server Software)?

Note: It worth the shot to upgrade de HUU since it upgrade the following components: CIMC, System BIOS; LOM, RAID Controllers and Adapters.

Hope this helps !!!

Re: Old ISE as VMware server

Arne Bier — Wed, 12 Jan 2022 21:35:23 GMT

@KevinR99 - are you using the Cisco-specific .iso images to build the ESXi server? There are very few of these specific images from VMWare that you must download to get the ball rolling. E.g. I recently built ESXi 7.0.2 on a UCS C220 M5 using this image.

I have never tried re-purposing an SNS server for ESXi but as Leo says, it works. And of course it should work. It's just a case of turning off the UEFI Secure Boot option, since this is only used by OS's like Windows and ... ISE.

Then you should also consider creating appropriate RAID Logical Volumes using the storage that is installed in that server, etc.

I hope the custom .iso solves your issue. If not, then please post what your exact issue is.

I wonder if clearing the CMOS is a good idea - to put the BIOS into factory default state - but then you need to go through the settings to see if the result is sane.

Re: Old ISE as VMware server

KevinR99 — Thu, 13 Jan 2022 13:59:56 GMT

Arne

Thank you for the reply. I wasn't aware of those custom ISO's. However, I downloaded the custom Cisco ISE and got the same issue. On first trying to boot the ISO it said

So I then disabled secure boot and got this

So it seems something in the BIOS identifies the server as an ISE and doesn't allow you to change that.

Kev.

Re: Old ISE as VMware server

Arne Bier — Thu, 13 Jan 2022 21:59:42 GMT

I wasn't aware that the UCS would even mention an "ISE mode". That means Cisco has hard coded something into the BIOS. Lots of searching on internet for "UCS ISE mode" has not revealed the answer and I think you're in pioneering territory now 🙂

My next step would be to reset the CMOS (or do it via the CIMC under Admin / Utilities) and just blast all the settings away.

Re: Old ISE as VMware server

KevinR99 — Sat, 15 Jan 2022 18:06:40 GMT

Thanks Cisco. A server that could be usefully re-purposed being tied down to one function.

There must be a way to blast this server and use it for something else. If I work it out I’ll update the discussion.

Kev.

Re: Old ISE as VMware server

Marcelo Morais — Sat, 15 Jan 2022 19:35:23 GMT

Hi @KevinR99 ,

have you tried to update the HUU as I described before?

Regards

Re: Old ISE as VMware server

balaji.bandi — Sat, 15 Jan 2022 23:14:38 GMT

I tried both ISE appliance and WSA appliance different ways ..never had any success rate honestly ...so gave up.

Re: Old ISE as VMware server

thomas — Sat, 22 Jan 2022 17:32:29 GMT

The Secure Network Servers are dedicated appliances and cannot be repurposed.

Re: Old ISE as VMware server

KevinR99 — Sun, 23 Jan 2022 12:50:38 GMT

Disappointing but not unexpected. Not very environmentally friendly by Cisco. Once a product has seen the end of its days for the primary purpose it’s essentially dead even though it is a very capable device that can be put to other uses.

Thank you for the reply. It saves me wasting further time on trying to achieve this.

Kev.