Cisco ISE 3.2 patch 7 installation steps

[atifali.zaidi1]

i have the following Cisco ISE deployment .  i will need to deploy patch 7 on the whole cluster and i will need to do it using the CLI option , what should be the order ?  i will take backups for each node before applying the patch.  

DC1 

PAN (secondary)

PSN 1 for internal auth

PSN2 for Guest 

DC2

PAN (Primary)

PSN 1 for internal auth

PSN2 for Guest 

[PSM]

You need to do it on Primary PAN first. After that you can choose your sequence no problem in that. 

[PSM]

As you mentioned above after completing Primary PAN, I would choose DC2 PSN1( Hope you have configured DC1 PSN1 as backup in NAD devices). Then DC2 PSN2, DC1 PAN, DC1 PSN1 and DC1 PSN2.

[Ambuj M]

As recommended you can start with Primary PAN, additionally I would recommend to copy the patch file into ISE local repository (DISK) before starting install and verify the hash, follow this document