Applying hotfix to ISE

Hello

Today I was hotfixing my ISE because of CSCvm14030 vulnerability. Here’s the output.

The only difference between patching and hotfixing is that the command is „application install” rather than ”patch install”.

I chose to do this manually on all nodes rather than the GUI automatic mode because i wanted to be in control over when I hotfix what node.

myISE/admin# application install ise-apply-CSCvm14030_2.1.0.474_common_1-SPA.tar.gz MyREPO
Save the current ADE-OS running configuration? (yes/no) [yes] ? yes
Generating configuration…
Saved the ADE-OS running configuration to startup successfully

Getting bundle to local machine…
Unbundling Application Package…
Verifying Application Signature…
Initiating Application Install…

Checking if CSCvm14030_2.1.0.474_common_1 is already applied
– Successful

Checking ISE version compatibility
– Current ISE Version: 2.1.0.474 Patch Version: 7
– Successful

Applying hot patch CSCvm14030_2.1.0.474_common_1
– Taking backup of integrity files
– Taking backup of patch related files
– Running hotpatch wrapper script
– Restarting ISE services

Stopping ISE Monitoring & Troubleshooting Log Collector…
grep: write error
Stopping ISE Monitoring & Troubleshooting Log Processor…
grep: write error
grep: write error
grep: write error
grep: write error
grep: write error
grep: write error
grep: write error
ISE PassiveID Service is disabled
ISE pxGrid processes are disabled
Stopping ISE Application Server…
ISE PassiveID Service is disabled
ISE pxGrid processes are disabled
Stopping ISE Application Server…
Stopping ISE Certificate Authority Service…
Stopping ISE EST Service…
ISE Sxp Engine Service is disabled
ISE TC-NAC Service is disabled
Stopping ISE Profiler Database…
Stopping ISE Indexing Engine…
grep: write error
Stopping ISE Monitoring & Troubleshooting Session Database…
ISE PassiveID Service is disabled
ISE pxGrid processes are disabled
Stopping ISE Application Server…
Stopping ISE Certificate Authority Service…
Stopping ISE EST Service…
ISE Sxp Engine Service is disabled
ISE TC-NAC Service is disabled
Stopping ISE Profiler Database…
Stopping ISE Indexing Engine…
grep: write error
Stopping ISE Monitoring & Troubleshooting Session Database…
Stopping ISE AD Connector…
grep: write error
Stopping ISE Database processes…
Starting ISE Monitoring & Troubleshooting Session Database…
Starting ISE Profiler Database…
grep: write error
Starting ISE Application Server…
Starting ISE Certificate Authority Service…Starting ISE EST Service…
Starting ISE Monitoring & Troubleshooting Log Processor…
Starting ISE Monitoring & Troubleshooting Log Collector…
Starting ISE Indexing Engine…
Starting ISE AD Connector…
Note: ISE Processes are initializing. Use ‚show application status ise’
CLI to verify all processes are in running state.

 

Skomentuj

Wprowadź swoje dane lub kliknij jedną z tych ikon, aby się zalogować:

Logo WordPress.com

Komentujesz korzystając z konta WordPress.com. Wyloguj /  Zmień )

Zdjęcie na Google

Komentujesz korzystając z konta Google. Wyloguj /  Zmień )

Zdjęcie z Twittera

Komentujesz korzystając z konta Twitter. Wyloguj /  Zmień )

Zdjęcie na Facebooku

Komentujesz korzystając z konta Facebook. Wyloguj /  Zmień )

Połączenie z %s