Migration from 3315 to to SNS 3415 Appliance

[Revocatus Kishiwa]

I have a customer with ISE 3315 with software release 1.3 four pieces running, Two nodes(Active-Active) for Policy and Two nodes(Active-Standby) for Admin. He has purchased a new four(4) appliances 3415 with software release 2.0 purposely to replace the existing one. Any guidance to achieve this task.

- Advice of knowing if the running configuration on release 1.3 will work with 2.0 release without any problem.

- How to migrate the licenses, certificates, etc.

[hariholla]

Hi Revocatus,

Use Backup and Restore ISE feature to migrate from the older appliance to the newer one. From ISE 2.0 config guide:

Restore operation, can be performed with the backup files of previous versions of Cisco ISE and restored on a later version. For example, if you have a backup from an ISE node from Cisco ISE, Release 1.3 or 1.4, you can restore it on Cisco ISE, Release 2.0.

The following guide explains certificate export options:

http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_01011.html

ISE licenses are not tied to the appliance, hence portable.

[Ping Zhou]

Licenses need to be re-hosted via TAC / licensing team, they are bound to machine UDI. Local cert aka System cert can be exported with private key, if you keep the same FQDN. Root CA certs are restored by doing Configration Backup and Restore.

[hariholla · Accepted solution]

Thanks for correction on license comment alzhou. Yes, valid ISE licenses need to be re-hosted, details here:

https://communities.cisco.com/docs/DOC-63826