ISE Direct Upgrade URT

Run Upgrade Readiness Tool (URT) to validate config DB upgrade from 2.7,3.0,3.1 to 3.2. This is a signed bundle for image integrity (ise-urtbundle-3.2.0.542a-1.0.0.SPA.x86_64.tar.gz)

In this case i am running ise 3.1 patch 7 and will upgrade to 3.2

As we are running an HA the URT need to run on secondary admin node.

Got the below error once i tried to run it on Primary

Checking ISE persona

======================================================

  - Failed (URT can only be run on Secondary Admin Node or Standalone

% Application install or upgrade cancelled.

ise03/admin#

======================================================


*Note

When you need to run it on secondary note, you have to generate on secondary the key

(crypto host_key add host 10.10.10.10)

and then you can run the URT. Below is URT logging


ise04/adMIN# application install ise-urtbundle-3.2.0.542a-1.0.0.SPA.x86_64.tar.gz  ""SFTP-SRV01""

Save the current ADE-OS running configuration? (yes/no) [yes] ? yes

Generating configuration...

Saved the ADE-OS running configuration to startup successfully


Getting bundle to local machine...

Unbundling Application Package...

Verifying Application Signature...

Verified OK

Initiating Application Install...


###########################################

# Installing Upgrade Readiness Tool (URT) #

###########################################


Checking ISE version compatibility

  - Successful


Checking ISE persona

  - Successful


Along with Administration, other services (MNT,PROFILER,SESSION) are enabled on this node. Installing and

Do you want to proceed with installing and running URT now (y/n):y


Checking if URT is recent(<45 days old)

  - Note: URT is 288 days old and its version is 1.0.0. There might be a recent URT bundle on CCO, please

Do you want to proceed with this version which is 288 days old (y/n):y

Proceeding with this version of URT itself


Installing URT bundle

  - Successful


########################################

# Running Upgrade Readiness Tool (URT) #

########################################

This tool will perform following tasks:

1. Clone config database

2. Copy upgrade files

3. Data upgrade on cloned database

4. Time estimate for upgrade


Clone config database

=====================

 [####################--------------------] 50% Exporting data from ISE database

Do you want to proceed with installing and running URT now (y/n):y


Checking if URT is recent(<45 days old)

  - Note: URT is 288 days old and its version is 1.0.0. There might be a recent                          URT bundle on CCO, please verify on CCO

Do you want to proceed with this version which is 288 days old (y/n):y

Proceeding with this version of URT itself


Installing URT bundle

  - Successful


########################################

# Running Upgrade Readiness Tool (URT) #

########################################

This tool will perform following tasks:

1. Clone config database

2. Copy upgrade files

3. Data upgrade on cloned database

4. Time estimate for upgrade


Clone config database

=====================

 [####################--------------------] 50% Exporting data from ISE database                         ###########################################

# Installing Upgrade Readiness Tool (URT) #

###########################################


Checking ISE version compatibility

  - Successful


Checking ISE persona

  - Successful


Along with Administration, other services (MNT,PROFILER,SESSION) are enabled on                          this node. Installing and running URT might consume additional resources.

Do you want to proceed with installing and running URT now (y/n):y


Checking if URT is recent(<45 days old)

  - Note: URT is 288 days old and its version is 1.0.0. There might be a recent                          URT bundle on CCO, please verify on CCO

Do you want to proceed with this version which is 288 days old (y/n):y

Proceeding with this version of URT itself


Installing URT bundle

  - Successful


########################################

# Running Upgrade Readiness Tool (URT) #

########################################

This tool will perform following tasks:

1. Clone config database

2. Copy upgrade files

3. Data upgrade on cloned database

4. Time estimate for upgrade


Clone config database

=====================

 [####################--------------------] 50% Exporting data from ISE database                         

###########################################

# Installing Upgrade Readiness Tool (URT) #

###########################################


Checking ISE version compatibility

  - Successful


Checking ISE persona

  - Successful


Along with Administration, other services (MNT,PROFILER,SESSION) are enabled on this node. Installing and running URT might consume additional resources.

Do you want to proceed with installing and running URT now (y/n):y


Checking if URT is recent(<45 days old)

  - Note: URT is 288 days old and its version is 1.0.0. There might be a recent URT bundle on CCO, please verify on CCO

Do you want to proceed with this version which is 288 days old (y/n):y

Proceeding with this version of URT itself


Installing URT bundle

  - Successful


########################################

# Running Upgrade Readiness Tool (URT) #

########################################

This tool will perform following tasks:

1. Clone config database

2. Copy upgrade files

3. Data upgrade on cloned database

4. Time estimate for upgrade


Clone config database

=====================

 [####################--------------------] 50% Exporting data from ISE database                    ORA-24247: network access denied by access control list (ACL)

executing the acl_config


SQL*Plus: Release 19.0.0.0.0 - Production on Fri Aug 4 09:44:16 2023

Version 19.10.0.0.0


Copyright (c) 1982, 2020, Oracle.  All rights reserved.



Connected to:

Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - Production

Version 19.10.0.0.0



PL/SQL procedure successfully completed.


Disconnected from Oracle Database 19c Enterprise Edition Release 19.0.0.0.0 - Production

Version 19.10.0.0.0

ise04

 Not executed the acl_config

 GET_HOST_NAME is working fine

 [########################################] 100%  Successful


Copy upgrade files

==================

  - N/A


Data upgrade on cloned database

===============================

Modifying upgrade scripts to run on cloned database

  - Successful

/opt/CSCOcpm/upgrade/bin/upgdb_sanity.sh: line 67: warning: command substitution: ignored null byte in input


Running schema upgrade on cloned database

- Running db sanity to check and fix if any index corruption

- Auto Upgrading Schema for UPS Model

- Upgrading Schema completed for UPS Model

  - Successful


Running sanity after schema upgrade on cloned database

% Warning: Sanity test found some indexes missing in CEPM schema. Please recreate missing indexes after upgrade using app configure ise cli

  - Successful


Running data upgrade on cloned database

- Data upgrade step 1/18, ProvisioningRegistrationNew(3.2.0.0)... Done in 12 seconds.

- Data upgrade step 2/18, NetworkAccessUpgrade(3.2.0.100)... Done in 1 seconds.

- Data upgrade step 3/18, PassiveIdAttributeRegistration(3.2.0.225)... Done in 0 seconds.

- Data upgrade step 4/18, RegisterPostureTypes(3.2.0.250)... Done in 0 seconds.

- Data upgrade step 5/18, FiveGUpgradeService(3.2.0.256)... Done in 4 seconds.

- Data upgrade step 6/18, EADictionaryCreation(3.2.0.300)... Done in 0 seconds.

- Data upgrade step 7/18, CdaRegistration(3.2.0.302)... Done in 0 seconds.

- Data upgrade step 8/18, GeneralMdmSettingsRegistration(3.2.0.308)... Done in 0 seconds.

- Data upgrade step 9/18, TelemetryUpgrade(3.2.0.311)... Done in 0 seconds.

- Data upgrade step 10/18, NSFUpgradeService(3.2.0.312)... Done in 4 seconds.

- Data upgrade step 11/18, GuestAccessUpgradeService(3.2.0.339)... Done in 0 seconds.

- Data upgrade step 12/18, RestIDStoreRegistration(3.2.0.464)... Done in 0 seconds.

- Data upgrade step 13/18, UPSUpgradeHandler(3.2.0.468)... Done in 4 seconds.

- Data upgrade step 14/18, NSFUpgradeService(3.2.0.542)... Done in 0 seconds.

- Data upgrade step 15/18, ProfilerUpgradeService(3.2.0.542)... Done in 0 seconds.

- Data upgrade step 16/18, GuestAccessUpgradeService(3.2.0.542)... Done in 4 seconds.

- Data upgrade step 17/18, UPSUpgradeHandler(3.2.0.542)... Done in 1 seconds.

- Data upgrade step 18/18, ESUpgradeService(3.2.0.542)... Done in 0 seconds.

  - Successful


Running data upgrade for node specific data on cloned database

  - Successful


Time estimate for upgrade

=========================

(Estimates are calculated based on size of config and mnt data only. Network latency between PAN and other nodes is not considered in calculating estimates)

Estimated time for each node (in mins):

ise03(PRIMARY PAP,MNT,PDP):81

ise04(SECONDARY PAP,MNT,PDP):85



Final cleanup before exiting...


Application successfully installed

ise04/adMIN#


https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/upgrade_guide/Upgrade_Journey/PDF/b_ise_upgrade_guide_3_2_pdf/m_prepareforupgrade.html


Comments

Popular posts from this blog

Upgrade WLC / Supplementary image

Converting lightweigh to standalone AP and vice versa