Bulk Network Device Fails

[joepena10]

I did an export of all my devices because I need to change the description field for each device, the export has a simple passcode. When I update the "description" and save it, I next do the import however this is where it goes sideways. I select my file, enter the passcode created during the export, and select overwrite existing devices and stop on first error.  The import fails immediately with "Failed invalid Key". Can someone tell me what does that mean? What invalid key is it taking about?

[Scott Fella]

That is because you modified the file.  Take what you have in the file, download the template and make changes to that file.  That is the one you should upload. Beware of any columns that is not in the template.  So make sure you populate what is in the template, you don't need to have all the column, but you can't add any columns that might be in your backup to the template you will use.

[Arne Bier]

What version of ISE?

I was making some bulk modifications this morning in ISE 3.3p4. 

The CSV template for import, has the identical headers found in the export - at least that's the case in ISE 3.3 - it never used to be like this in older versions. Therefore, when I export the selected Network Devices, I make the secret key as simple as possible - e.g. Cisco12345 - and use the same key during import to decrypt the encrypted RADIUS/TACACS shared secrets.

I use Excel for all my mods and then save the file as a CSV with the extension .csv - open in text editor to ensure it's plain text, comma delimited.

[Scott Fella]

I always just build a new csv file, that seemed easier to me, but I agree with v3.3 and v3.4 the headers are identical.  

[joepena10]

Thank you @Arne Bier. That was the issue with the secret key for radius. During my exports it was being exported encrypted, and thus failing during the import. That took me a while to figure out, sorry for the late response. I was OOO.

[Arne Bier]

I am glad it worked out for you.  Same thing happened to me and I used to ignore that column that flagged the password as being encrypted TRUE/FALSE.  When adding network devices to an existing list (e.g. appending them to the list) you need to set it to FALSE and then you can put the plaintext password in the CSV.