Import csv file from ACS to ISE

[jeremytetart]

Hello guys,

I would like to export all my hosts (Users and Identity Stores => Internal Identity Stores => hosts) from Cisco ACS 5.8 to Cisco ISE 2.3.0.

Export csv file working fine from ACS but I can't import it to Cisco ISE (facing an error).

OK no problem, so I use the Cisco ISE csv template but surprise I have not the same number of excel cell between my ACS csv and ISE csv.

My ACS csv :

MACAddress:String(64):Required,description:String(1024),"enabled:Boolean(true,false):Required",HostIdentityGroup:String(256)

ISE template csv :

MACAddress,EndPointPolicy,IdentityGroup,PortalUser.GuestType,Description,PortalUser.Location,PortalUser.GuestStatus,StaticAssignment,User-Name,DeviceRegistrationStatus,PortalUser.CreationType,AUPAccepted,PortalUser.EmailAddress,PortalUser.PhoneNumber,FirstName,ip,Device Type,host-name,StaticGroupAssignment,MDMEnrolled,MDMOSVersion,PortalUser.LastName,PortalUser.GuestSponsor,EmailAddress,PortalUser,PortalUser.FirstName,BYODRegistration,MDMServerName,LastName,MDMServerID,Location,

Ok no problem, I need to add only four information in the ISE csv template :

- MACAddress

- Description

- User-name

- host-name

The others excel cell are deleted.

Here my csv :

MACAddress,Description,User-Name,host-name,
00:16:6F:30:67:AE,Laptop-Choley,Bob,Choley,

I import my CSV but i'm facing an new error (see attachment). It appear the all excel cell are required.

Someone can help me ? How may I fill correctly the csv ?

Regards.

[jeremytetart · Accepted solution]

Update : I found the solution after few hours of research

In fact, these columns (MACAddress, EndPointPolicy, and  IdentityGroup) are the minimal required in the CSV file for endpoint import

So to import information, you have to keep these columns and add the columns you need :)

For example :

MACAddress,EndPointPolicy,IdentityGroup,Description,User-Name,Location
68:04:71:BC:AD:BE,,,bob,Choley,Venus
68:AD:48:66:BC:13,,,Trump,Donald,UsA

Regards.

[ajc · Accepted solution]

Still investigating if 2 additional columns are required: static profile assignment and static endpoint group assignment, both columns with value = TRUE for all the entries. We have seen changes on the Endpoint Profile and Endpoint Group even though those values should be fixed/permanent