Upgrade from ISE 1.1.4 to 1.2 (VMWare)

[janncarlopucan]

We are planning to do an upgrade on our ISE runing on VMWare. Our current version is 1.1.4 and we are planning to upgrade it to 1.2. Based on released notes, 1.2 is running on 64-bit and we are currently using 32-bit on our ISE. I have red all releases notes and upgrade guide from Cisco and all doesn't include the upgrade process from 32-bit to 64-bit. I have created the draft for the upgrade plan, here is what I am thinking for the upgrade. Create backup of ISE 1.1.4, install ISE 1.2 to new VMs then restore the databases from 1.4 and from then will upgrade the databases to 1.2.

[Mikael Gustafsson · Accepted solution]

Hi,

You can run the upgrade stright on, the v1.2 installer takes care of 32 to 64bit conversion.

Edit: You will need to change host OS from RHEL 5 32bit to RHEL 5 64bit.

Is this a stand alone ISE or a depoymentof more then one?

If you have a deployment you can start with your secondary PAN (admin) node. When done the secondary announces that it's v1.2 and when you upgrade the next node, a PSN, it will conect automatically to secondary PAN. 

It can be problems when upgrading ISE, but with my latest customer going to 1.2 everything worked as it should. 

But I did prepare for the worst with backup of DB, backup of certifiactes + pvk, having access to AD admins etc.

Tip is to copy the upgrade file to the local disk and run upgrade from there and to reset the DB on the PSN nodes to shorten the time of the upgrade.

See this

https://supportforums.cisco.com/community/netpro/security/aaa/blog/2013/07/19/upgrading-to-identity-services-engine-ise-12

See here for more info on depolyment upgrade.

http://www.cisco.com/en/US/docs/security/ise/1.2/upgrade_guide/b_ise_upgrade_guide_chapter_011.html

Tarik has a good post about upgrade to 1.2 as well:

https://supportforums.cisco.com/message/4077655?tstart=0#4077655

Cheers

Message was edited by: Mikael

[janncarlopucan]

Deployment ISE.

How about the vmware OS? Our ISE is currently installed on a 32bit vmware. I am also thinking of imaging our current ISE 1.1.4 and installing it to a 64bit vmware, then will run the upgrade command.

[Mikael Gustafsson]

Im by no way a VMware tech but I dont think it should matter. (Might be out of my depth here.)

Cheers

[Nicholas Poole]

To run a 64bit OS VM you need hardware that support 64 bit in the BIOS.

[janncarlopucan]

mikael and nicholas, thank you for your responses.

Assuming that we have hardware that supports 64bit vmware, is there an upgrade process that we can follow?

[blenka]

Kindly find the link below for all information precautions before and  activity to done after to get into production with the existisng  database.

http://www.cisco.com/en/US/docs/security/ise/1.2/upgrade_guide/b_ise_upgrade_guide_chapter_01.html