cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7559
Views
10
Helpful
23
Replies

Importing/Uploading ISE License

dot1x
Level 3
Level 3

Hi Members,

Could someone assist me how to upload ISE license?

We are running ISE 1.3 and our licenses expired.

Cisco provided us with 60 days temporary licenses (Zip File).

Would restart be required once we import the license?

23 Replies 23

hslai
Cisco Employee
Cisco Employee

It works the same for ISE 1.3.

For redundancy, just ensure the licenses are issued with the UIDs from both the primary and secondary PAN, but you would only need it in case that the original secondary made the primary and in case that the licenses needed to be re-imported, for example, when you rebuild the whole deployment. There is also an option to rehost, as shown in the ISE License FAQ section of the ISE ordering guide.

I'm currently going through Cisco ISE Admin Guide Release 1.3 and it's confusing:

It says:

If you have two Administration nodes deployed in a high-availability pair, you must ensure that each of them have the same license capabilities. Generate licenses with both UDIs and then add the licenses while each node is in a standalone or primary state.

Also:

You register all licenses to the Cisco ISE primary Administration node via the primary and secondary Administration node hardware UID. The primary Administration node then centrally manages all the licenses that are registered for your deployment.

hslai
Cisco Employee
Cisco Employee

That appears due to CSCuj50471. I will check it with our teams.

Thanks mate.

hslai
Cisco Employee
Cisco Employee

BTW Cisco Identity Services Engine Software Version 1.3 EoL/EoS shows only severity 1 and security vulnerability issue will be addressed until Dec 31, 2017.

If you can't upgrade right away, please ensure on the latest patch level.

hslai
Cisco Employee
Cisco Employee

I tested it myself with ISE 1.3 Patch 8 plus struct2 fix. I imported the same license files with both UDIs to two ISE nodes in standalone mode, before making them a deployment. I de-registered the 2nd PAN from the deployment, after sync completed. After that, I found the de-registered ISE node had only a 90-day eval license and lost the ones with dual-UDIs.

Thus, I confirmed what I said is correct and will ask our tech team to correct the admin guides.

Thanks hslai,

We are yet to get license file from cisco with both UDIs mentioned.

As of now, the license file which they sent over, has same UDI for both Primary and Secondary Node.

Once we receive the correct license file, I'll upload on primary node.

Hope it works and we wouldn't need to install anything on secondary node.

Oh cool - I must have misinterpreted what the docs meant when they said "license can only be installed when STANDALONE or Primary" - therefore I concluded that a Secondary node wasn't going to receive the license.  But thanks for clearing that up.  Apologies for the confusion. 

Adding and Upgrading Licenses

 

You can add a license only on a standalone or primary Administration ISE node. You can upgrade your existing evaluation license on or before the expiry of the 90-day evaluation period. You must install the base license before upgrading to the advance license.

It says we could add a license only on primary Admin Node.

Managing Licenses  [Cisco Identity Services Engine] - Cisco Systems

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: