Solved: Cisco ISE Patch Installation and hot fix query

palani2010 · ‎06-06-2025

marce1000 · ‎06-06-2025

- @palani2010 Patch installations will propagate automatically when started from the primary PAN with the GUI. In contrast you need to apply a hotfix to each node in the order of your choosing keeping in mind that the services will restart when you run it on that specific node, so most would do it one node at a time.

Personally I prefer to manually install patches too with the CLI (and avoid the overall procedure with the GUI) because it gives more control and verbose output when something goes wrong

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

View solution in original post

marce1000 · ‎06-06-2025

- @palani2010 What is your essential question ?

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

palani2010 · ‎06-06-2025

In a Cisco ISE distributed deployment, if I install a patch on the Primary Administration Node (PAN), will the patch also install on the remaining nodes, such as the Backup PAN, Monitor Node (MNT), and Policy Services Node (PSN)?

In a distributed deployment of Cisco ISE, if I install a hotfix on the CLI of the PAN, will it also be installed on the remaining nodes via CLI?

Will the hotfix be installed only on the CLI?

Thank you in advance

marce1000 · ‎06-06-2025

- @palani2010 Patch installations will propagate automatically when started from the primary PAN with the GUI. In contrast you need to apply a hotfix to each node in the order of your choosing keeping in mind that the services will restart when you run it on that specific node, so most would do it one node at a time.

Personally I prefer to manually install patches too with the CLI (and avoid the overall procedure with the GUI) because it gives more control and verbose output when something goes wrong

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

palani2010 · ‎06-06-2025

In a Cisco ISE distributed deployment, if I install a patch on the Primary Administration Node (PAN), will the patch also install on the remaining nodes, such as the Backup PAN, Monitor Node (MNT), and Policy Services Node (PSN)?

In a distributed deployment of Cisco ISE, if I install a hotfix on the CLI of the PAN, will it also be installed on the remaining nodes via CLI?

Will the hotfix be installed only on the CLI?

Thank you in advance

bearman97 · ‎06-07-2025

A VERY important point to remember: when preparing for your next round of patches be sure to remove any applied hotfixes prior to patch installation. Failure to do so can result in very bad things happening, ultimately resulting in a need to rebuild your environment.