KT Labs EP5 :: ACS to ISE Migration

In the video, I show you how you can leverage the ACS to ISE migration tool to migrate objects from ACS to ISE. As mentioned in the video, a few prerequisites need to be met, these are listed below.

Prerequisites

  • Direct connectivity to both the ACS and ISE platforms
  • The correct version of ACS (see here for more information)
  • Certificates from both platforms added to the migration tool
  • ACS and ISE Migration interfaces enabled via the CLI
    • ACS CLI Command: acs config-web-interface migration enable
    • ISE CLI Command: application configure ise and select option 11 and enter Y
  • Windows-based machine to host the migration tool
  • Windows-based machine with Jave 7.1 or above
  • FQDN’s for each platform

Added notes 10/09/2018

More recently it was observed that not all users would successfully export using the migration tool. No errors were output while using the ACS to ISE migration tool meaning internal users were unknowingly missed as part of the migration. It was found that in order to rectify this problem a patch had to be applied to the Access Control Server. In my case, I was running ACS 5.5 with no patch until patch 11 was applied.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.