06-14-2023 07:50 AM
Hi Team,
I have upgraded the ISE from 2.3 to 2.7 version. I have a total of 4 nodes on VM ESXI and 4 VM licenses.
What if I do not install the VM licenses on ISE nodes?
As per the Cisco Document, there will be no service interruption. Please find the snap below.
If there is now service impact then what is the actual use of VM licenses?
Solved! Go to Solution.
06-14-2023 09:10 AM - edited 06-14-2023 09:10 AM
Correct, missing VM licenses display a warning message in the GUI. You are not in license compliance without installing 4 VMC licenses. Also why not upgrade to 3.1 or 3.2? https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-2943876.html
06-14-2023 07:57 PM
The actual use of the licenses is to demonstrate that you are compliant with the terms and conditions you accepted when accepting the End User License Agreement (EULA).
06-14-2023 09:39 PM
just keep one additional thing in mind if you are using TACACS, in 2.3 you only need a single license per deployment, once you upgrade to 2.7 I think you need 1 tacacs license per node. you don't need to purchase anything as it change entitlement for 50 device administration licenses but it is not an automated entitlement, so you will have to call Cisco Licensing most likely.
If you don't use ISE for TACACS, then don't worry about it.
06-14-2023 09:10 AM - edited 06-14-2023 09:10 AM
Correct, missing VM licenses display a warning message in the GUI. You are not in license compliance without installing 4 VMC licenses. Also why not upgrade to 3.1 or 3.2? https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/bulletin-c25-2943876.html
06-14-2023 07:57 PM
The actual use of the licenses is to demonstrate that you are compliant with the terms and conditions you accepted when accepting the End User License Agreement (EULA).
06-14-2023 09:39 PM
just keep one additional thing in mind if you are using TACACS, in 2.3 you only need a single license per deployment, once you upgrade to 2.7 I think you need 1 tacacs license per node. you don't need to purchase anything as it change entitlement for 50 device administration licenses but it is not an automated entitlement, so you will have to call Cisco Licensing most likely.
If you don't use ISE for TACACS, then don't worry about it.
06-16-2023 09:27 PM
Thank you all for your quick response.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide