how to migrate ISE to new servers

[tachyon05]

We have SNS-3415-K9 at each branch office and a pair of SNS-3495-K9 at our Headquarters. The branch office servers run policy service persona only, while the 2 HQ servers back up each other and run both the administration and monitoring in addition to the policy service personas. We are running the highest software version the existing hardware can support, 2.3.0.298 patch 7. We have placed an order for a number of SNS-3615-K9 to replace the existing hardware.  Each remote office will still get only 1 new server to replace the old one, but HQ will get 4 new servers to replace the current 2 servers.  How would you migrate the cluster from the old to the new servers?

[gizasystems]

Hello Marvin,

Is there an option to edit in the Backup file?

Best Regards

[Marvin Rhoads]

@gizasystems you cannot edit the backup file in any meaningful way that would result in a usable backup.

[tachyon05]

Thanks for the detailed reply.  We have CA issued certs on the old servers that will expire in a few month.  In the past, users always see some popups and have to accept the new certs whenever we renew ISE certs.  Would it make sense to use CA issued new certs on the new servers (with new and permanent IPs and hostnames), so users see those popups the first time their devices connect to a floor/building that has been cutover to new ISE?  And if they go back to a floor/building that is still on the old ISE, they won't see any popups and their devices would auto connect successfully since they have seen and accepted the certs on the old servers in the past?