Patch ISE 2.6 patch-4 to patch-10

[adamscottmaster2013]

I have two nodes ISE running ISE 2.6 patch-4 on SNS-3615K9 in this configuration:

node1:  Primary Admin, Primary MNT, PSN

node2:  Secondary Admin, Secondary MNT, PSN

I would like to patch them from patch-4 to patch-10.  Is it just as simple as downloading patch 10 ise-patchbundle-2.6.0.156-Patch10-21081000.SPA.x86_64.tar.gz (3.2GB in size) and from the UI:  Administration ---> Maintenance --> Patch Management and load up ise-patchbundle-2.6.0.156-Patch10-21081000.SPA.x86_64.tar.gz.  Is it that simple?

How long will it to install the patch? a couple of hours?

TIA

[Rob Ingram]

@adamscottmaster2013 

Yes. When you install a patch from the Primary PAN that is part of a two-node deployment, Cisco installs the patch on the primary node and then on the secondary node. If the patch installation is successful on the Primary PAN, Cisco then continues patch installation on the secondary node. If it fails on the Primary PAN, the installation does not proceed to the secondary node.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215406-patch-installation-on-ise-and-faq-durin.html

The patch install can take up to 1 hour, take all precautions - backups etc

[adamscottmaster2013]

@Rob Ingram:  Thank you.  Take up to 1 hour.  Is that for each node or both nodes?

[Rob Ingram · Accepted solution]

@adamscottmaster2013 up to 1 hour per node, likely less though.

[adamscottmaster2013]

@Rob Ingram:   I notice that patch-4 is no longer available on Cisco website.  Does it mean that this patch has issue and had to be pulled from Cisco website?  What is the likelihood that I will have issue with patching from patch-4 to patch-10?

[Marcelo Morais]

Hi @adamscottmaster2013 ,

 1st, please take a look at Cisco ISE 2.4 Release Notes. search for Patch 4.

 2nd, although 2.4 P4 is not on the Deferred Release, please take a look at this post: ISE 2.4 Patch 4 Warning + Release Notes Feedback.

Note: the last release of 2.4 is Patch 14 since Apr, 2021.

Hope this helps !!!

[Damien Miller · Accepted solution]

This is 2.6 p4 which was very much deferred. It was deferred due to this catastrophic sev 1 profiling bug. 
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt18276

[adamscottmaster2013]

@Damien Miller:  Thanks.  Basically Cisco released a lemon.  So much for doing QA work