Cisco ISE version upgrade

[ddesai]

Currently using Cisco ISE 3.0 version and do i need to download cisco ISE version 3 and then 3.4 patch two files or just one file ?

What is step by step process we have primary and secondary ISE ?

I am doing first time so Please help me

[Torbjørn · Accepted solution]

Hello @ddesai,

Note that 3.3 patch 4 still is the recommended release. I would stick with this unless there are specific reasons that you need 3.4.

The best place to start is the upgrade guide: https://www.cisco.com/c/en/us/td/docs/security/ise/3-3/upgrade_guide/Upgrade_Journey/Cisco_ISE_3-3_Upgrade_Journey.html 

I prefer doing upgrades the backup & restore option, but doing it inline should also work. Make sure you have good backups before proceeding. Good luck!

[Rob Ingram · Accepted solution]

@ddesai looks like you need to upgrade ISE 3.0 to 3.3 first, then you can upgrade 3.4.

For 3.3, you would need the upgrade file ise-upgradebundle-3.0.x-3.2.x-to-3.3.0.430b.SPA.x86_64.tar.gz and the latest patch file ise-patchbundle-3.3.0.430-Patch5-25040316.SPA.x86_64.tar.gz

Once on 3.3 you can upgrade to 3.4.

For 3.4, you would need the upgrade file ise-upgradebundle-3.1.x-3.3.x-to-3.4.0.608a.SPA.x86_64.tar.gz and then the patch file ise-patchbundle-3.4.0.608-Patch1-24121602.SPA.x86_64.tar.gz

Upgrade procedures:-

https://www.youtube.com/watch?v=q2JpC8oNssA

https://community.cisco.com/t5/security-videos/upgrade-planning-and-best-practices-upgrading-ise/ba-p/4665900

[ddesai]

awesome!

[ddesai]

Do i need first ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz ? correct?

[Rob Ingram]

@ddesai no, you need the upgrade bundle first - ise-upgradebundle-3.0.x-3.2.x-to-3.3.0.430b.SPA.x86_64.tar.gz then you install the patch bundle.

[ddesai]

what is file size ?

[ddesai]

Upgrade bundle for upgrading ISE version 3.0, 3.1, 3.2 to 3.3. This is a signed bundle for image integrity.
ise-upgradebundle-3.0.x-3.2.x-to-3.3.0.430b.SPA.x86_64.tar.gz this one is 14379.66 MB