Upgrade ISE 2.3 to 2.6 and URT

[LUCA_ITALY]

Hi to all. 

I want to upgrade an ISE infrastructure with 2 main nodes and 4 policy node.

I check in the documentation that URT should not be installed on the primary admin node.

My question is: Must the URT run only on the secondary admin node or must run on the secondary and all the Policy nodes?

Thank you

[Mike.Cifelli · Accepted solution]

My question is: Must the URT run only on the secondary admin node or must run on the secondary and all the Policy nodes?
-Run the URT on the secondary PAN only
Couple of things to note:
-To save time, upgrade to the latest patch for 2.3 prior to doing upgrade bundle
-I recommend opening a TAC case just in case you encounter any issues that way you can escalate if need be.
This link below should definitely help you during the process:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/upgrade_guide/b_ise_upgrade_guide_26/b_ise_upgrade_guide_26_chapter_01.html
HTH!

[Damien Miller]

To highlight the section for OP.
"The URT is available as a separate downloadable bundle that can be run on a Secondary Policy Administration node or standalone node. There is no downtime to run this tool. The following video explains how to use the URT: https://www.cisco.com/c/en/us/td/docs/security/ise/videos/urt/v1-0/cisco-urt.html

Warning
Do not run the URT on the Primary Policy Administration Node. The URT tool does not simulate MnT operational data upgrades."

[Mohammed al Baqari]

Hi, URT should run on each node

**** please remember to rate useful posts

[poongarg]

URT is supported only on secondary ISE admin node and standalone node only.

[hslai]

In addition to what said by the others, I would recommend to use Cisco Identity Services Engine Upgrade Journey, Release 2.6, which evolved from the best practice doc on ISE upgrade previously in Cisco communities.