top of page

Upgrade Readiness Tool (URT)

Cisco ISE Upgrade Readiness Tool (URT) helps detect and fix any data upgrade issues before you start the upgrade process.

Most of the upgrade failures occur because of data upgrade/corruption issues.


The URT is designed to validate the data before the upgrade to identify, and report or fix the issue. If the URT fails it will create a file which can be shared with TAC for further troubleshooting.


The URT can be downloaded from the ISE download page on Cisco. The URT tool can be run on a Secondary Administration Node (PAN), for high availability and other deployments with multiple nodes, or on the Standalone Node for a single-node deployment. There is no downtime for running this tool.

⚠️ In multiple-node deployments, do not run the URT on the Primary PAN. ⚠️

The following prerequisites are checked by the URT tool:

  • Version compatibility;

  • Persona checks;

  • Disk space;

  • NTP server;

  • Memory;

  • System and trusted certificate validation.


#1) Upload the files to the SFTP server from your laptop.

ISE/admin# copy sftp://<ip>/ise-urtbundle-3.0.0.458-1.0.0.SPA.x86_64.tar.gz disk:/

In this example, you already have a repository configured! 🕶


#2) Install the Upgrade Readiness Tool.

ISE/admin# application install ise-urtbundle-3.0.0.458-1.0.0.SPA.x86_64.tar.gz <repo-name>

Save the current ADE-OS running configuration? (yes/no) [yes] ? yes

Once the URT has finished all the checks, we should be able to see the time estimate for the upgrade. If you get all "successful" message, the actual ISE upgrade should go smooth.

Running data upgrade for node specific data on cloned database

- Successful


Time estimate for upgrade

=========================

(Estimates are calculated based on size of config and mnt data only. Network latency between PAN and other nodes is not considered in calculating estimates)

Estimated time for each node (in mins):

MNT data is 40 GB, purging this data can reduce upgrade time

ISE-A(PRIMARY PAP,MNT,PDP,PXG):278

MNT data is 40 GB, purging this data can reduce upgrade time

ISE-B(SECONDARY PAP,MNT,PDP,PXG):291


Final cleanup before exiting...


Application successfully installed

#3) We can now remove URT from ISE.

ISE/admin# application remove urt Continue with application removal? (y/n) [n] ? y Application successfully uninstalled




281 views0 comments

Recent Posts

See All

Securing IOS-XE Routing Protocols

Securing the routing information prevents an attacker from introducing false routing information into the network, which could be used as part of a Denial of Service (DoS) or Man-in-the-Middle (MiTM)

Cisco Duo Log Sync (DLS)

Duologsync (DLS) is a utility written by Duo Security that supports fetching logs from Duo endpoints and ingesting them to different SIEMs. Logging: A logging filepath can be specified in config.yml.

Umbrella VA logging to Remote Syslog Server

Syslog is a protocol that computer systems use to send event data logs to a central location for storage. Logs can then be accessed by analysis and reporting software to perform audits, monitoring, tr

bottom of page