ISE Patching

[benolyndav]

Hi

Would an expired ISE  system certificate cause an ISE deployment patch to fail ??

Thanks

[Marcelo Morais · Accepted solution]

Hi @benolyndav ,

 PPAN replication status is Not Applicable, because the PPAN is the Publisher (responsible for the replication), the other Nodes are the Subscribers:

ise/admin# show tech-support
 ...
 NAME             PERSONA   ROLE       ACTIVE  REPLICATION
 ---------------  -------   ---------- ------  ---------------
 ...
 <Node Hostname>  PAN       PRIMARY    NONE    Not Applicable
 ...

You can also check that in the GUI ... at Administration > System > Deployment > mouse on the Node Status bullseye:

for PPAN (Publisher) ... Message Count:

for the Other Nodes (Subscribers) ... Sync Status:

Hope this helps !!!

[Rob Ingram]

@benolyndav for patches no I don't believe so, but expired certificates are highlighted when you run a pre-upgrade health check and you should ensure the health check is sucessful before starting the upgrade.