ISE Upgrade downtime

[Turbo727]

Just a question regarding the ISE GUI upgrade sequence.

GUI allows choosing the sequence of the nodes, I am wondering if I have two node deployment (i.e. primary and secondary), the secondary admin node (backup node) needs to be upgraded first and then primary admin node, but what if I don't choose the primary admin node.

Would the upgrade process stop once the secondary admin node is upgraded? What would HA look like in this scenario, i.e. version mismatch?

Would it be possible to use GUI again to upgrade the primary node at a later time? 

[Kasun Bandara]

Hi, what is the ISE version. check below link for version 2.7. you better understand upgrade process clearly before start.

https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/upgrade_guide/Upgrade_Journey/PDF/b_ise_upgrade_guide_2_7_pdf/m_upgrademethods.html

[Mike.Cifelli]

Definitely take a peek at the shared guide from @Kasun Bandara 

Would the upgrade process stop once the secondary admin node is upgraded? What would HA look like in this scenario, i.e. version mismatch?

-In this scenario you would be in a split deployment.  Not sure why you would consider doing one node and not the other.  

Would it be possible to use GUI again to upgrade the primary node at a later time? 

-What is the version path (to/from)? Take a look at this discussion for additional information too: Upgrade ISE from 2.7 to 3.1 - Cisco Community

-Lastly, if going to 3.0 there are licensing model changes that you should be aware of: Products - ISE Licensing Migration Guide - Cisco

[thomas · Accepted solution]

Upgrading your Cisco ISE Deployment

Learn the options to migrate your ISE deployment to the latest version. This will prepare you with strategies to upgrade your deployment to take advantage of the latest features.
You will learn :

• what changes went into the latest patches and previous releases
• how upgrades are more reliable
• your available upgrade options
• pre-upgrades, methods for upgrade as well as post-upgrade tasks
• best practices for migrating your ISE deployments

00:20 Agenda
01:44 ISE Versions and Suggested Releases
02:57 ISE 3.1 Release Features
03:40 Supported Releases for Upgrading to ISE 3.1
06:02 Upgrade Workflow
07:04 Upgrade Methods: Backup & Restore, GUI, or CLI
11:00 Upgrade Preparations: Backup, Certs, Health Check
14:32 Upgrade Options Overview: Split and Full Upgrades
17:40 Full Upgrade Process Details
21:28 Upgrade Pre-Checks
27:09 Demo of Full Upgrade from ISE 2.7 to 3.1
38:45 Split Upgrade Process Details
44:11 Demo of Split Upgrade from ISE 2.6 to 3.1
52:38 Split vs Full Upgrade Process Comparison
54:38 Post Upgrade Tasks
56:13 ISE Upgrade Resources

• https://cs.co/ise-3-1-upgrade
• https://cs.co/ise-rn
• https://cs.co/ise-license-migration
• https://cs.co/URT-overview
• https://cs.co/ise-resources
• https://cs.co/ise-community
• https://cs.co/ise-videos
• https://cs.co/ise-licensing
• https://cs.co/ise-api
• https://cs.co/ise-webinars