cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2009
Views
10
Helpful
2
Replies

Patch Installation in ACS Distributed Deployment

fatalXerror
Level 5
Level 5

Hi Guys,

Good Day!

Just want to know if it is possible to install a patch of ACS if the ACS is in a distributed deployment? May I know how? Because what I always do is to deregister each secondary ACS in the deployment then apply the patch in it.

Thank you and have a nice day!

2 Replies 2

Aditya Ganjoo
Cisco Employee
Cisco Employee

Hi,

Here is the process of patch installation for the ACS cluster:

On the secondary servers:


- Go to each secondary server under System Administration - Operations - Local Operations - Deployment Operations.

- From here select the option Deregister from Primary . (This might take 5-10 minutes to be complete)

- This will restart the services on each secondary server while doing this process.


On the primary server:

- Go to the primary server under System Administration - Operations - Distributed System management.

- From here please select each secondary server under the Secondary Instances and make sure to deregister each entry first and then deleted from this section.


Once each secondary server is showing as primary / stand-alone unit please proceed and install the patch you need on each server through the CLI.


Instructions on how to install the patch

=================================

1. open CLI console

2. define new repository in which the patch file resides

3. issue: 'acs patch install *.tar.gpg repository YOUR_REPOSITORY'

4. verify installation by getting the following version information via CLI by issuing:

#show application version acs

Cisco ACS VERSION INFORMATION

=============================

Version :

Internal Build ID :

Patches :


Once the patch is install on each server you can now proceed and add servers back as secondary servers.

On each secondary server

- Go to System Administration - Operations - Local Operations - Deployment Operations.

- Fill out the registration fields (this information needs to be the one for the primary server) The credentials you will use here are the ones for the web GUI access. On the primary instance please include the IP address of the primary server.

- Wait 5 - 10 minutes for the process to be complete.

On primary server

- Monitor the synchronization process under the under System Administration - Operations - Distributed System management.

- This process might take around 5-10 minutes however this might be longer depending on your environment.

- All secondary instances under this section should show as updated after the synchronization is complete.


Hope the process is clear enough.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

Hi Aditya,

Sorry for your reply .

No need to remove the servers from distributed deployment to acs patch install .

We can ask them to install the patch in Log collector server ,then primary and followed by secondary servers.

Please see the instructions below.

instructions on how to install the patch

=================================

1. open CLI console

2. define new repository in which the patch file resides

3. issue: 'acs patch install *.tar.gpg repository YOUR_REPOSITORY'

4. verify installation by getting the following version information via CLI by issuing:

#show application version acs

Cisco ACS VERSION INFORMATION

=============================

Version :

Internal Build ID :

Patches :

If they are upgrading to higher version like 5.5 to 5.6  ,then we need to remove the servers from deployment .

Thanks

VenkataKrishna

Please rate helpful posts and mark correct answers.