Export Guest Account Database

[umahar]

A customer of mine is moving from one ISE cluster to another ISE cluster but has about 500 active guest endpoints.

Is it possible to export guest accounts from existing ISE and import them to new ISE

[Jason Kunst · Accepted solution]

No. Passwords are encrypted and there is no mechanism. Please bring this up to ISE product management

Customer can point to old ISE as a radius server

[Tim Baum]

I have had several customers ask for this capability as well - export guest database to import into new system or different ISE version.

Is there a feature request for this capability that we can attach customers needing this?

Thanks

[umahar]

I am looking at this guide.

ISE Guest Sponsor API Tips & Tricks

Should GET /ers/config/guestuser/f4705ee2-748b-11e6-9e5e-000c2958a9f6

get you the username and password.

Maybe we can write a utility which transfers these accounts from old ISE to new ISE.

[hslai]

If a guest changes the password after the account created, then the sponsor would not have permission to see it, even through ERS.

[gbekmezi-DD]

Can you do a backup and recovery?

[TommasoOlmastroni1347]

Any update on this?

I'm facing the same scenario and I've to migrate at least 250 active guest endpoints from old ISE cluster to new one.

With that API could we force a reset of guest password before importing them?

[Jason Kunst · Accepted solution]

did you check out this post? https://community.cisco.com/t5/security-documents/ise-guest-amp-web-authentication/ta-p/3657224#toc-hId-739235510
I'd recommend just keeping the old system online.

please provide http://cs.co/ise-feedback to have export/import of guest accounts brought back