ACS Appliance Upgrade path

I am seeing patches and CSUpdate files with the same release date. My current version is Acs-4.2.0.124.9-CSUpdate fix Base image 4.2.0.107, Appliance Management Software 4.2.0.124,
Question is which patch do I apply, the Cumulative, the CSUpdate, or both. Do I need to apply them one after the other, or is the .12 patch a rollup that includes the fixes in the previous versions, 10 and 11.
One other thing, other than physically going to the colo and reading it off the server itself, where can I find the serial number of the unit.

Appliance serial number cannot be viewed via GUI or serial.
For upgrading ACS always apply most recent patch available and it covers all fix till date.
First apply csupdate and then apply patch.
Please post ACS related under head AAA.
Regards,
~JG
Do rate helpful posts

Similar Messages

ACS Appliance Upgrade

I obtained the 3.3 release from Cisco. I'm currently running v3.2. When I go to System Configuration -> Appliance Upgrade Status -> Download -> Connect -> Download Now, it returns "No Distribution in Appliance". I can see the 3.3.3.11 in the software install table. but it returns the error above when trying to transfer the file. I'm running Apache / Windows XP SP2. Anyone seen this before?

Hi,
Without Distribution server, normally you need to load the new image into the current ACS appliance itself before execute the upgrade process. The new image can be transferred via serial or ACS web-based 'system upgrade' option.
If I am not mistaken, the error you're getting was due to unavailability of distribution server.
If you stuck with the image transfer, try to use CLI/console mode.
Typicall upgrade method has 3 steps:
1. Load new image (download from Cisco or using CD) onto a distribution server.
2. Load the upgrade image onto the Cisco Secure ACS Appliance from the distribution server. Do it either from within the HTML interface, or from the serial console. The Cisco Secure ACS Appliance will verify the transferred files to ensure that they have not been corrupted.
3. Apply the Cisco Secure ACS Appliance system upgrade. You can do this either from within the HTML interface, or from the serial console.
Refer to the following url for complete upgrade processes & options:
http://www.cisco.com/en/US/partner/products/sw/secursw/ps5338/products_installation_guide_chapter09186a0080203004.html#wp1044616
Rgds,
AK

Upgrade path for Cisco Secure ACS 4.X Solution Engine 1113 Appliance.

Hello,
I am having Cisco Secure ACS 4.X Solution Engine 1113 Appliance, and is running on version Cisco Secure ACS Release 4.1(1) Build 23 and now want to upgarde it to the latest version. Need to know the upgrade path for the same. As per my information ACS 4.1(1) runs on windows server and releases post to 5.X uses Linux. Please guide how can i upgrade Appliance 1113 from 4.1 to 5.x

Hi,
Cisco ACS 1113 appliance doesn't support ACS 5.x version. 1113 appliance supports till ACS 4.2.1 version.
Cisco ACS SE 1120/1121 appliance models are required for ACS 5.x
The upgrade path for ACS 4.1 to 4.2.1 version can be found in the following link :
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2.1/Installation_Guide/solution_engine/upgap.html#wp1237189
Regards,
Karthik Chandran
*kindly rate helpful post*

ACS upgrade from 4.0.x to 4.1.x "Appliance upgrade in progress"

Hello friends,
We are in the process of upgrading ACS 4.0 to 4.1 in a SE appliance 1113.
We followed very carefuly the steps, and upgraded de Appliance management ACS 4.1. The second upgrade (Software for appliance 4.1) keeps showing "Appliance upgrade in progress..." (near 2 hours by now). I know that it can stick even finishing, but it seems it has not finished because we can not log in with the GUI Administrator account like we did when upgrading the management software (previous step).
Is this normal? what can be missing?, I attach the console text output below (IP adds obscured).
Note the management upgrade went fine.
Thanks.
Cisco Secure ACS: 4.1.1.23
ACS 4.0.1.49-CSAdmin-CSCsd96293_CSCse26719 Fix: (Patch: 4.0.1.49 Tue 01/09/2007
7:50:00.17)
Appliance Management Software: 4.1.1.23
Appliance Base Image: 4.0.1.2
CSA build 4.0.1.543.2: (Patch: 4_0_1_543)
Appliance upgrade in progress...
Session Timeout: 10
Last Reboot Time: Fri Jun 06 11:46:40 2008
Current Date & Time: 6/6/2008 13:17:40
Time Zone: (GMT-05:00) Bogota, Lima, Quito
NTP Server(s): 131.107.1.10
CPU Load Free Disk Free Physical Memory
0.00% 16.9 GB 765 MB
Appliance IP Configuration
DHCP Enabled. . . . . . . . . . .: No
IP Address. . . . . . . . . . . .: 172.16.x.y
Subnet Mask . . . . . . . . . . .: 255.255.255.0
Default Gateway . . . . . . . . .: 172.6.x2.y2
DNS Servers . . . . . . . . . . .: 172.16.x3.y3
CSAdmin running
CSAuth running
CSDbSync running
CSLog running
CSMon running
CSRadius running
CSTacacs running
CSAgent stopped
Appliance upgrade in progress...

Thanks Jagdeep, but the upgrade has not finished.
The documentation mentions (please read it carefully):
"IF YOU COMPLETE THE UPGRADE and the ACS console displays the message Appliance upgrade in progress, this indicates that the upgrade PROGRESS is hanging.
If this condition occurs, start an ACS console session and enter the command download [hostAddress], where hostAddress can be any IP address. This action releases the ACS console from the upgrade process."
What worries me is that it has not finished.
As I said in my post, we can not log in :( (the GUI gets blocked during the upgrade).
I appreciate the help. Many Thanks.

Upgrade path from Riverbed Whitewater V110 to AltaVault Virtual Appliance

Hi,
We have users on the V110 model of the virtual appliances of Whitewater (Riverbed edition) that haven't transitioned to the NetApp varients as yet.
What would be the upgrade path if they wanted to keep running a virtual on-premise SteelStore/AltaVault?
Would there need to be an intermediate step to SteelStore 3.2 between Whitewater (3.1.2a) and AltaVault?
Thanks
Garth

Hi Garth,To get to the AltaVault release, you'll do this in 2 phases. 1. Upgrade the software. This is done by downloading the 3.2.2 code from mysupport.netapp.com and then installing it on the current v110. Use the Configure > Maintenance > Service page to stop the optimization service, then use the Configure > Maintenance > Software upgrade page to update it with the downloaded image. Reboot after the update is done. 2. Migrate to AltaVault software. This is done by following the instructions in Appendix A. of the Install Guide for Virtual Appliances:https://library.netapp.com/ecm/ecm_download_file/ECMP12455064 Regards,Christopher

No access to serial console in ACS appliance 111

We have 2 Cisco ACS appliances running version ...
Cisco Secure ACS 3.2.2.5
Appliance Management Software 3.2.2.5
Appliance Base Image 3.2.2.1
The fact is that after initial setup, we have never used the console mainly because in a production environment we manage them through the Web Admin application. Now we have decided to upgrade both appliances to the latest version (3.3.3) and when we tried to connect to the serial console (115200,N,8,1, no flow control) we don't get any response from none of both ACS. It's quiet strange but we have found no way to make them work. We have tried several things I expose to you in case you can give us any hint:
1. We have rebooted the appliance and we can see through the console all the start-up process but when it finally finishes the start-up, we see no login prompt.
2. We have also shutdown the appliance properly and power it off and on again. Same results. The appliances boot normal but still we don't have console access.
3. We have tried boot the appliance with the recovery CD-ROM and the console works fine. I can reset the Admin password, but when it restart from its own system ( I mean without the recovery CD_ROM), I can see all the starting messages but when it finish the start-up process ... no console access.
4. Finally I have connected a monitor and a keyboard to the appliance ( I know Cisco dosn not recommned it but when in trouble....) and I see the full start-up process and it includes the base Windows 2000 server operating system startup. When Windows finishes loading, we get a lock screen in which the appliance informs you that it have started correctly and that we could access it for management through the serial console port or through the web console. 10 seconds later I see a pop up window stating that on or more services have not started correctly and that we shoulkd check the Event viewer, something we wished we could do but as you you, this is a secured system and I don't know if there is a back door method to verify windows services in this appliance.
Any help would be appreciated, as the problem is identical in both the appliances and upgrading them without access to the admin console is difficult and risky.
Kind regards.

Hi
I had similair problem being locked out of console after initial configuration wizard.
I think there is a bug within the console session in that if you input a hostname of more than 15 characters, it locks up the ACS service when the server reboots. If you keep your hostname to less than 15 characters, the server reboots and you get console access. If you then access the GUI, you will see that 15 characters is the maximum, and you cannot enetr any more than this. This is not the case with the console, where you can enter more than 15 without getting an error message.
I rescued the server by doing F8 and rebooting server with last known good configuration. from there, you can reset the hostname to something valid. You can check to see which CS services are running through console session, and start any services that may not be running..
deliverance1> start CSAgent
Starting service: CSAgent..
CSAgent is starting
CSAgent is running
Regards
Ian

Upgrade path

we are upgrading from ACS 2.6 to 4.1
should we order the upgrade software (CSACS-4.1-WINUP-K9) or should we order the regular package (CSACS-4.1-WIN-K9)since 2.6 is so out of date?

Hi Martin,
I agree with Scott (no surprise!) One of my co-workers just went down the upgrade path (albeit from a more recent version) and it was very messy. I'm pretty sure he finally just ditched the whole plan and started fresh.
Hope this helps!
Rob

Cisco acs 1120 upgrade to 4.2.1.15 help

Hi All,
I have cisco 1120 appliance downgrade from acs 5.0 to acs 4.2.0.124 , I need to upgrade to acs 4.2.1.15 . Does cisco 1120 acs appliance supports 4.2.1.15 , How can i upgrade to 4.2.1.15 from 4.2.0.124 .
It requires any distribution server for upgrade process . Please suggest on this , Thank you

Yes, you can upgrade it to 4.2.1.15 and you can download the version from the below listed link;
http://tools.cisco.com/squish/d4e4A
Here are the files you need to download:
ACSse-Upgrade-Pkg-acs-v4.2.1.15-K9.zip
ACSse-Upgrade-Pkg-appl-mng-v4.2.1.15-K9.zip
NOTE: Please apply the management upgrade first and then software upgrade. ..
Distribution server is a machine from where you can upload the patch onto the Cisco Secure ACS Appliance so If you will download the version on your laptop and upload it from there then that would be distribution server (Nothing special)
Upgrade an appliance to 4.2.1.15
http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2.1/Installation_Guide/solution_engine/upgap.html#wp1148376
Hope this helps.
Rgds, Jatin
Do rate helpful posts~

Ciscoworks 3.2.1 Upgrade Path

We have Ciscoworks 3.2.1 (Windows Server). We also currently have Cisco Prime Infrastructure 1.2 (appliance) for wireless management.
I'm getting a bit confused trying to determine the appropriate upgrade path for the LMS server. I'm wondering if I should be upgrading the existing server to Prime Infrastructure 1.2 which will run on the windows server or migrate the wired management to the Prime Infrastructure 1.2 appliance? I like the idea of one management portal for both wired and wireless networks. Does Cisco take a module based approach to the licensing of the Prime Infrastructure products? In other words, do I need to simply buy the "LMS module" for use on the existing appliance? The Windows Server has dated hardware so I would also need to confirm that it supports the upgrade if that is the recommended path.
I'd like to hear what others have done that have made the switch to Prime Infrastructure from LMS.

LMS and Cisco PI are intended to merge in coming period, but in Cisco PI it almost run a parallel to LMS and is not the complete replacement of LMS.
Every new release comes out with more LMS featured baked inside Cisco PI. Hence I recommend you to keep your LMS for LAN Management tasks.
Cisco PI is an complete and evolved upgrade to WCS/NCS. You can upgrade the following Cisco Prime Network Control System products to Cisco Prime Infrastructure 1.2:
•Cisco Prime Network Control System 1.0.0 (NCS 1.0 MR2, 1.0.2.29)
•Cisco Prime Network Control System 1.1.0 (NCS 1.1 FCS, 1.1.0.58)
•Cisco Prime Network Control System 1.1.1 (NCS 1.1 K MR1, 1.1.1.24)
On Server side, I think CPI can't be installed on LMS Windows server as it has to have a virtulized environment. You should keep and treat both separately. However, if you have got the LMS 4.2 license with CPI , you should upgrade your LMS to version 4.2 and get CPI to manage wireless infrastructure.
-Thanks

Apply patch to acs Appliance

I was wondering if someone can help me to upgrade my ACS Appliance with patch 4.1.1.23.4-SW. It was simple to apply this one in a normal server 2000. The ACS appliance I think is different because that we can access by normal terminal, keyboard and mouse.
Some were I read that is necessary a tomcat server?
Please help
adi

Hi,
ACS v4.1.1.23 patch 5 is available so go for this new patch.
You should have a pc which can access ACS through web interface. Keep the patch file on the PC.
Follow the steps below on the PC:
[1] Extract zipped file
[2] Look for ?autorun.exe? file and double click on it
[3] It will start a tomcat server on your desktop and you?ll see a web page asking for ACS
SE ip address :
Provide in the ACS SE ip address and press ?Install?
[4] It will prompt for ACS admin username and password as shown below :
Provide in the username and password and login.
[5] Then it bring up ACS GUI, then go to
System Configuration > Appliance Upgrade Status > Download,
Then we?ll get a screen where it will ask for ip address of Install Server :
Provide in ip address of system from where we are applying this patch, in our case our
desktop ip address, then click connect.
[6] It will show us following screen :
Click on ?Download Now?
Then it?ll show us this screen :
Press ?Refresh? Till we see following screen :
[7] Now press ?Apply Upgrade?. Then it?ll ask for confirmation :
Press ?Upgrade?, then we?ll get information regarding the patch.
Click ?Yes?.
It?ll take few minutes to apply that patch on appliance.
Then it?ll show us a confirmation message :
Press ?Done?, then system will reboot.
To confirm that patch has been applied successfully, goto
System Configuration > Appliance Upgrade Status
After everything is fine stop the tomcat server by clicking on ?stop distribution server? or
if you want to apply this patch on some more appliance click on ?Install Next?
Hope this helps.
~Rohit

ACS Windows vs ACS Appliance

I have ACS 3.3 running on Win2k and am looking to upgrade. Would it be a better idea to get the ACS appliance instead? What are the pros/cons?

Hi
Personally I wouldnt choose an appliance over software. Cost aside they are harder to integrate (esp if you use AD), harder to diagnose and patch.
From experience I know ACS sometimes needs a little TLC to keep it working. ACS v3/v4 was not designed as appliance software. This has been retro-fitted with all the issues that go with it.
ACS v5 is supposed to be appliance from day 1 so maybe that'll be ok!
This is my own personal view, Im sure there are a lot of happy appliance owners out there.
Main differences
1) Appliance cant talk direct to AD. You need to install an agent somewhere (possibly requiring a dedicated windows server.. ouch what happened to lower TCO!)
2) No native ODBC, RSA (done via RADIUS instead)
3) Logging. CSVs hard coded to rollover at 10MB. Requires log agent or extraxi csvsync to collect logs.
If you like to be "hands on" stick with s/w

WLSE to WCS upgrade path

Hi,
Could anybody tell me if they are aware of an upgrade path from WLSE to WCS using existing WLSE hardware? Can anybody point out the main benefits/features moving to WCS from WLSE?
Many thanks
SJ

Hi Scott,
Just the 1130-19 or 1133 are supported;
The new Cisco WCS SKU family, WCS-WLSE-UPG-K9, is now available for CiscoWorks WLSE customers that wish to migrate from CiscoWorks WLSE (Models 1130-19 or 1133) to Cisco WCS. These new SKUs are price-adjusted to make transitioning from CiscoWorks WLSE to Cisco WCS cost-effective.
All CiscoWorks WLSE conversion SKUs ship with two special conversion CDs. These CDs check to make sure that a CiscoWorks WLSE is installed prior to beginning the Cisco WCS conversion process. The software will not install if the CiscoWorks WLSE software check, performed by the conversion software, does not pass.
This SKU family supports only ***CiscoWorks WLSE hardware models 1130-19 and 1133. To find the model number of a CiscoWorks WLSE, look at the compliance label on the bottom of the chassis front bezel. ***Only CiscoWorks WLSE with a compliance label that says 1130-19 or 1133 can be converted to Cisco WCS.
Note: CiscoWorks WLSE Express (Model 1030) and CiscoWorks WLSE (Model 1105) are not supported with CiscoWorks WLSE conversion SKUs. Do not install the CiscoWorks WLSE CDs on the CiscoWorks WLSE Express (Model 1030) appliance or CiscoWorks WLSE (Model 1105). This conversion is not supported and it will not work.
Once converted, a CiscoWorks WLSE is no longer a self-contained appliance; it becomes a server that runs Cisco WCS software using RedHat Linux ES v. 4.0. The converted CiscoWorks WLSE operates as a new Cisco WCS installation and supports only lightweight access points and wireless LAN controllers that are running Lightweight Access Point Protocol (LWAPP). Autonomous access points are not supported by a converted CiscoWorks WLSE.
Customers migrating their CiscoWorks WLSE to Cisco WCS do not need to buy a copy of RedHat Linux ES v. 4.0 software. A copy of RedHat Linux ES v. 4.0 software is included with the CiscoWorks WLSE migration CDs. (RedHat Linux AS v. 4.0 is not supported by a converted CiscoWorks WLSE.)
From this good doc;
http://www.cisco.com/en/US/products/sw/cscowork/ps3915/prod_bulletin0900aecd804b4635.html
Hope this helps!
Rob

Trunked connections to ACS appliance

We are replacing our Cisco ACS 4x server with a new ACS appliance. It is a Cisco UCS C220.
We went with the hardened Linux option for the underlying OS.
Our old server had multiple network adapters on different subnets so that it could authenticate devices on different VRFs (rings basically).
I see the new appliance has only 2 network adapters in it. Is it possible to configure these as a 802.1q trunk in order to have the device service requests on 4-5 subnets? I haven't seen documentation on how to do this.

Hi,
ACS v4.1.1.23 patch 5 is available so go for this new patch.
You should have a pc which can access ACS through web interface. Keep the patch file on the PC.
Follow the steps below on the PC:
[1] Extract zipped file
[2] Look for ?autorun.exe? file and double click on it
[3] It will start a tomcat server on your desktop and you?ll see a web page asking for ACS
SE ip address :
Provide in the ACS SE ip address and press ?Install?
[4] It will prompt for ACS admin username and password as shown below :
Provide in the username and password and login.
[5] Then it bring up ACS GUI, then go to
System Configuration > Appliance Upgrade Status > Download,
Then we?ll get a screen where it will ask for ip address of Install Server :
Provide in ip address of system from where we are applying this patch, in our case our
desktop ip address, then click connect.
[6] It will show us following screen :
Click on ?Download Now?
Then it?ll show us this screen :
Press ?Refresh? Till we see following screen :
[7] Now press ?Apply Upgrade?. Then it?ll ask for confirmation :
Press ?Upgrade?, then we?ll get information regarding the patch.
Click ?Yes?.
It?ll take few minutes to apply that patch on appliance.
Then it?ll show us a confirmation message :
Press ?Done?, then system will reboot.
To confirm that patch has been applied successfully, goto
System Configuration > Appliance Upgrade Status
After everything is fine stop the tomcat server by clicking on ?stop distribution server? or
if you want to apply this patch on some more appliance click on ?Install Next?
Hope this helps.
~Rohit

ACS SE upgrade

Hi,
We have an existing ACS running 4.1.4.13 and have purchased a new device running 4.1.1.23. I understand that to replicate they need to be the same version. Can someone please clarify the upgrade path from 4.1.1.23? Do I need to request the software from TAC or is it here -http://www.cisco.com/cgi-bin/tablebuild.pl/acs-soleng-3des ?
TIA

Certain Software Downloads/Upgrades from Cisco requires Additional access/Valid Service contract. Availing this contract would gives you access to most of the tools and to the Encrypted Software's.
To know more details about Cisco service contract choose from the following:
a) Contact your Cisco Account team if you have a Direct Purchase Agreement.
b) Contact a Cisco Partner or Reseller to purchase a service agreement:
http://tools.cisco.com/WWChannels/LOCATR/jsp/partner_locator.jsp
c) Use the Profile Manager to update your Cisco.com profile and request association to service agreement:
http://tools.cisco.com/RPF/profile/edit_entitlement.do?Tab=3
d) Also you can contact your Cisco Representative or Cisco Accounts Manager for more detail
Cisco does provide a warranty period where you could obtain software. However to get access to the software you need to contact TAC using the following link http://tools.cisco.com/ServiceRequestTool/create/launch.do for additional help. They would be in a position to assist you better.

ACS 1112 upgrade

Hi everyone,
I want to upgrade my ACS appliance 1112 running software version 3.3 to 5.x?
How can i go about this or should i go and purchase new ACS appliance(1120)?
br
sam

a.kiprawih is right, you need to upgrade your ACS 3.2(1) to ACS 4.0, then take a backup of it and restore it in new ACS 1112 ACS 4.0. The easiest way to accomplish it would be take a backup of ACS SE 1111 3.2(1), open a TAC case send your backup to TAC, get it upgraded to 4.0, they'll send you upgraded backup, restore it in ACS SE 1112 4.0 appliance, you are ready to roll. If you dont want to send your backup to TAC, create a test Win2000 server, install ACS 3.2(1), take a backup oif ACS SE 1111 3.2(1), restore it. Upgrade it to ACS 3.3(3) build 11 on Win2000, take a backup. Then again upgrade it to ACS 4.0 on Win2000, take this backup(Final one).
Configure your ACS SE 1112 4.0 basic setup, then restore the ACS 4.0 backup from Win2000, and make sure you have all your IP address and other stuff in place, you are good to roll.
NOTE : While uprading from ACS 3.3(3) build 11 to ACS 4.0 on Win2000 serer, you may hit a bug due to trailing spaces in NAS ip address defined on ACS server. Best way.. Open a TAC case.
Let me know if this helps :)

ACS Appliance Upgrade path

Similar Messages

Maybe you are looking for