Cisco ISE Patch Installation and hot fix query

[Mark Elsen]

  - @palani2010              What is your essential question ?

   M.

[palani2010]

In a Cisco ISE distributed deployment, if I install a patch on the Primary Administration Node (PAN), will the patch also install on the remaining nodes, such as the Backup PAN, Monitor Node (MNT), and Policy Services Node (PSN)?

In a distributed deployment of Cisco ISE, if I install a hotfix on the CLI of the PAN, will it also be installed on the remaining nodes via CLI?

Will the hotfix be installed only on the CLI?

Thank you in advance

[Mark Elsen · Accepted solution]

  - @palani2010    Patch installations will propagate automatically when started from the primary PAN with the  GUI.  In contrast you need to apply a hotfix to each node in the order of your choosing keeping in mind that the services will restart when you run it on that specific node, so most would do it one node at a time. 

              Personally I prefer to manually install patches too with the CLI (and avoid the overall procedure with the GUI) because it gives more control and verbose output when something goes wrong

 M.

[palani2010]

In a Cisco ISE distributed deployment, if I install a patch on the Primary Administration Node (PAN), will the patch also install on the remaining nodes, such as the Backup PAN, Monitor Node (MNT), and Policy Services Node (PSN)?

In a distributed deployment of Cisco ISE, if I install a hotfix on the CLI of the PAN, will it also be installed on the remaining nodes via CLI?

Will the hotfix be installed only on the CLI?

Thank you in advance

[bearman97 · Accepted solution]

A VERY important point to remember: when preparing for your next round of patches be sure to remove any applied hotfixes prior to patch installation. Failure to do so can result in very bad things happening, ultimately resulting in a need to rebuild your environment.