How to Install a Patch on Cisco ISE | Step-by-Step Cisco Identity Services Engine Update Guide

About this video

• Video Title: How to Install a Patch on Cisco ISE | Step-by-Step Cisco Identity Services Engine Update Guide
• Channel: Cisco
• Speakers: Erica
• Duration: 00:06:36

Overview

This video provides a step-by-step guide on how to install patches on Cisco Identity Services Engine (ISE) versions 3.1 and later. It covers important pre-installation checks, details two installation methods (GUI and CLI), and offers guidance on verifying the successful application of the patch.

Key takeaways

• Patching is Cumulative: Each new ISE patch includes all fixes from previous patches.
• Pre-Installation Checks: Verify the current ISE version, check if a patch is already installed, and ensure you have the correct patch for your version. In multi-node environments, check the patch status on each node.
• Upgrade Path: You cannot install or roll back to a patch version lower than the one currently installed.
• High Availability: If the patch installation fails on the primary node, it will not proceed to secondary nodes.
• Required Permissions: Ensure you have Super Admin privileges and that PAN failover is disabled before starting the installation.
• Download Patch: Obtain the necessary patch from software.cisco.com.
• GUI Installation: This method automatically installs the patch on the primary node first, followed by other nodes in the GUI's listed order. The order of node updates cannot be controlled.
• CLI Installation: This method allows control over the order of node updates and is recommended by Cisco for better visibility during the process.
• Verification: After installation and reboot, verify the updated version and patch through the "About ISE" option (GUI) or the "show version" command (CLI).