Transfer certificate and license when upgrading ios

[Leftz]

Hi we have PAN SAN and several service nodes of ISE, which all need to upgrade from 2.4 to high level. Reviewing cisco protocol to upgrade these ios, it seems more steps for the upgrading. So we think if we can do it like this: since all nodes are VM, can we create new nodes and transfer all license, certificates and config to the new nodes? After testing all nodes are good, then shutdown old nodes. Is this practical? Thank you

[Rob Ingram]

@Leftz sounds like you want to perform the backup and restore method. The link below has all the steps for this procedure.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/upgrade_guide/HTML/b_upgrade_method_3_0.html#id_125062

You can pre-stage build the VMs on the new version instead of re-imaging.

Beware if you upgrade to version 3.x the licensing model has changed, you will need to use smart licensing and convert your licenses.

https://www.cisco.com/c/en/us/products/collateral/security/identity-services-engine/ise-licensing-migration-guide-og.html