When trying to upgrade our first of six ISE servers from 1.1.4 to 1.2 we receive the following error message:
Data upgrade step 34/80, RegisterPostureTypes(188.8.131.523)... .......................Failed. Rolling back the configuration database... Starting application after rollback...
% Warning: Do the following steps to revert node to its pre-upgrade state. -Register this node back to old Primary error: %post(CSCOcpm-os-1.2.0-899.i386) scriptlet failed, exit status 1 % Application upgrade failed. Please check logs for more details or contact Cisco Technical Assistance Center for support.
I ran into this issue also, please take a backup of your 1.1.4 database, include certs, and any custom profiling policies...etc (basically follow the release notes). Then reimage the box to 1.2 and restore your 1.1.4 database, ISE 1.2 can now detect the older version of db and will upgrade it. I tried the same upgrade 3 times before I went this route and it worked flawlessly.
Also please check the md5sum of your download I had to download mine 3 times before I got a good copy. You can find the reference md5sum when you over the image name in the download section.
This command is not available through cli, were you able to verify the md5sum through the repository that you pulled the upgrade image from? You may need to open a case with tac to have the rootpatch installed and through there you can verify the md5sum.
While what Tarik mentioned will work, I wanted to add the cause and fix for the error for anyone else that runs into this.
The "RegisterPostureTypes" error will be seen if there is a blank posture rule/condition in the DB. Since none of the pre-built rules are blank, take a quick look at your custom rules from the GUI and remove the blank ones or add content to them before attempting to upgrade again.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...