ISE 1.3 Upgrade fails

[Thomas Buergi]

Hi All

I did upgrades from 1.2.1.198 to 1.3. With one box (SNS-3495-K9) out of four I have a problem.

I've tried it many times, I even made it to a standalone and did an application reset-config ise to initialize the box prior updating, but it always fails at step 40.

- Data upgrade step 40/67, CertMgmtUpgradeService(1.3.0.616)... % Error: ISE Global data upgrade failed!
Rolling back the configuration database...
Starting application after rollback...

% Error: The node has been reverted back to its pre-upgrade state.
% Application install or upgrade cancelled.

Any Idea ?

Thanks Thomas

[nspasov]

Hmm, that is interesting. Is this a management/monitoring node or PSN?

[Thomas Buergi]

It was part of 2-Node Setup.  But since I was not able to upgrade the box I made a standalone out of it.

So currently it's a all in one, freshly initialized with no prod data on it.

[nspasov]

If your primary node is upgraded and healthy, you can blow away the secondary node and build one from scratch. Then register it to the primary node and let it sync. 

[Thomas Buergi]

That's what I actually did. But it was not my intention since I wanted to understand why....

and also the  box is in a colocation and I didn't have CIMC in place.....

[Venkatesh Attuluri]

Post-Upgrade Tasks

http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/upgrade_guide/b_ise_upgrade_guide_13/b_ise_upgrade_guide_13_chapter_0100.html

[mohanak]

Upgrade Failures

During upgrade, the configuration database schema and data upgrade failures are rolled back automatically. Your appliance would return to the last known good state. If this is encountered, the following message appears on the console and in the logs:

% Warning: The node has been reverted back to its pre-upgrade state.
error: %post(CSCOcpm-os-1.2.0-899.i386) scriptlet failed, exit status 1
% Application upgrade failed. Please check logs for more details or contact Cisco Technical Assistance Center for support.

In case of upgrade failures, before you try to upgrade again:

•  

  Analyze the logs. Check the application bundle for errors.

•  

  Identify and resolve the problem by submitting the application bundle that you generated to the Cisco Technical Assistance Center (TAC).