ISE 3.3 patch 4 to patch 6

[MonkeyBear007]

I can jump patch 4 to 6 ?

patch 5 has interface bug so want to skip it

[Rob Ingram · Accepted solution]

@MonkeyBear007 yes, you can go directly from patch 4 to 6 without requiring to install patch 5 before installing patch 6.

[MonkeyBear007]

better to use web gui or cli?
if i doing cli i have to upload the file to the disk first but gui and auto download the file

[Rob Ingram]

@MonkeyBear007 either will work, but if you are installing the patch from the CLI, you can control the order in which the nodes are patched. The path file can be copied locally or on a remote repository.

https://video.cisco.com/detail/video/6361621409112

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/upgrade_guide/HTML/b_upgrade_install_patch_3_1.html#ID202

[MonkeyBear007]

Does ISE itself have a md5 checker?

[Rob Ingram]

@MonkeyBear007 no, download the file from the Cisco website to your computer - then from windows use the certutil CLI command “certutil -hashfile <path\filename> MD5” to find the MD5 checksum and compare against the MD5 checksum value listed on the cisco website. 

[MonkeyBear007]

I already did i prefer to test once it copy to Ise to be really sure

[Aref Alsouqi]

I think there is a way to do it on ISE but only from root shell which is reserved to TAC, otherwise you would need to do it off the box as suggested by @Rob Ingram.

[adamscottmaster2013]

I am also on 3.3 patch-4, and I run into this bug:  https://bst.cisco.com/bugsearch/bug/CSCwn30984?rfs=qvlogin

Have to reboot the appliance from time to time to temporarily alleviate the issue.  Will patch the box to patch-6 in about a week.

[jlobb2]

I upgraded to 3.3 p6 last week and I'm hitting this bug now.

[MonkeyBear007]

i just upgrade from Patch 6 to Patch 7 last night