topic Re: Booteable USB upgrade ISE in Network Access Control

Booteable USB upgrade ISE

lilimtzrmz — Tue, 14 Mar 2023 15:30:25 GMT

Hi team , it is possible that the appliance recognizes booteable USB is inserted? I mean is there any way to validate the USB without rebooting the server? (I'm executing an ISE upgrade)

Re: Booteable USB upgrade ISE

davidgfriedman — Tue, 14 Mar 2023 15:40:25 GMT

We've used it on SNS-3515-K9, SNS-3595-K8, SNS-3655-K9 and SNS-3695-K9. A few times we've had go to into the CIMC to enable the front or the back USB ports and reboot the unit & CIMC, before we could see the USB drive. Patches, well, we still need to download them from a repository once the system is staged, of course.

Re: Booteable USB upgrade ISE

Charlie Moreton — Tue, 14 Mar 2023 16:45:49 GMT

Booting to an upgrade bundle is not supported in any fashion. Only booting to a full version .iso is supported and will overwrite ALL ISE data. The procedure is found in the Create a Bootable USB Device to Install Cisco ISE chapter of the Installation Guide.

As for the patches ( @davidgfriedman ), you can follow the procedure found at ISE Zero Touch Provisioning (ZTP) to install a patch during installation.

Re: Booteable USB upgrade ISE

davidgfriedman — Tue, 14 Mar 2023 16:49:26 GMT

@Charlie Moreton I'll keep an eye out for that. I'm about to start looking for ways to spin up and fully pre-provision and restore to a VM with little manual effort... We want to start quarterly tests of the profiler feed, as leaving it running is (sometimes) breaking things for us...And now, back to your sponsored thread(s)....:)