In this post we will see how to upgrade prime using its command line interface (CLI). You can use GUI as well, but it is much quicker if you could upload the patch/upgrade files onto local FTP server & then apply it onto prime. You can use “show version” CLI command to verify current prime version.
primedev/admin# show version Cisco Application Deployment Engine OS Release: 2.0 ADE-OS Build Version: 2.0.1.038 ADE-OS System Architecture: x86_64 Copyright (c) 2005-2010 by Cisco Systems, Inc. All rights reserved. Hostname: primedev Version information of installed applications --------------------------------------------- Cisco Prime Network Control System ------------------------------------------ Version : 1.4.0.45 Patch: Cisco Prime Network Control System Version: Update-1_16_for_version_1_4_0_45
We will use this to upgrde to PI 1.4.1 (patch PI_1.4_0_45_Update_1-39.tar.gz) to support new 3700 series AP. You can download these patches from the software section of PI in CCO page as shown below. You also need to check the release notes (Here is 1.4.1 release notes) to make sure your upgrade path is correct & its compatibility with other products.
You can upload these patches or upgrade images to a repository on your prime. There is default repository called “defaultRepo” . I have created a separate repository called “localftp” & create a username password like “admin/Cisco123”
primedev/admin(config)# repository ? <WORD> Repository name (Max Size - 80) primedev/admin(config)# repository localftp primedev/admin(config-Repository)# ? Configure Repository: do EXEC command end Exit from configure mode exit Exit from this submode no Negate a command or set its defaults url Configure Repository URL user Configure repository username and password for access primedev/admin(config-Repository)# url disk:/ftp primedev/admin(config-Repository)# user ? <WORD> Username for repository access (Max Size - 30) primedev/admin(config-Repository)# user admin ? password Configure repository password for access primedev/admin(config-Repository)# user admin password ? hash Specifies an ENCRYPTED (hashed) password will follow plain Specifies an UNENCRYPTED plain text password will follow primedev/admin(config-Repository)# user admin password plain ? <WORD> Plain text password for repository access (Max Size - 40) primedev/admin(config-Repository)# user admin password plain Cisco123 primedev/admin(config-Repository)# exit primedev/admin(config)# exit primedev/admin# write memory Generating configuration...
You can create username & password for FTP access using the below command. There is default FTP user called “ftp-user” also there if you like to use it.
rimedev/admin# ncs password ?
ftpuser Modifies ftp username and password
root Modifies root user login password
primedev/admin# ncs password ftpuser ?
<WORD> Type in the username (Max Size - 80)
primedev/admin# ncs password ftpuser admin ?
password Modifies ftp password
primedev/admin# ncs password ftpuser admin password ?
<WORD> Type in the ftp password (Max Size - 80)
primedev/admin# ncs password ftpuser admin password Cisco123
Initializing...
Updating FTP password.
This may take a few minutes...
Successfully updated location ftp user
Now using any FTP client you can connect to this FTP server to upload the patch file. I have used Filezila client which is freely available from here. You can use the “admin/Cisco123” user credential connect to prime FTP server as shown below.
Then you can drag & drop the required patch file onto PI repository you created as shown below.
Once copied you can verify using “show repository <Repository_Name>” command as shown below.
primedev/admin# show repository localftp PI_1.4_0_45_Update_1-16.tar.gz PI_1.4_0_45_Update_1-39.gz
Then you can install patch using the “patch install <filename> <repository_name>” CLI command as shown below. It may take few minutes (depend on the upgrade) & you should see the successful patch information message at the end.
primedev/admin# patch install ? <WORD> Patch bundle file name (Max Size - 255) primedev/admin# patch ? install Install a Patch Bundle remove Uninstall An Application Patch primedev/admin# patch install ? <WORD> Patch bundle file name (Max Size - 255) primedev/admin# patch install PI_1.4_0_45_Update_1-39.gz ? <WORD> Name of the configured remote repository (Max Size - 255) primedev/admin# patch install PI_1.4_0_45_Update_1-39.gz localftp Save the current ADE-OS running configuration? (yes/no) [yes] ? yes Generating configuration... Saved the ADE-OS running configuration to startup successfully Initiating Application Patch installation... Patch successfully installed
If it is software upgrade with upgrade bundle, then you have to use “application upgrade <upgradebundle_filename> <repository_name>” command
primedev/admin# application ?
install Install An Application Bundle
remove Uninstall An Application
reset-config Reset application configuration to factory defaults
start Start an Application
stop Stop an Application
upgrade Upgrade An Application Bundle
primedev/admin# application upgrade ?
<WORD> Application bundle file name (Max Size - 255)
primedev/admin# application upgrade <PI_Upgrade_bundle> ?
<WORD> Name of the configured remote repository (Max Size - 255)
primedev/admin# application upgrade <PI_Upgrade_bundle> <repository_name>
You can verify the version with “show version” or “show application version NCS” command.
primedev/admin# sh version Cisco Application Deployment Engine OS Release: 2.0 ADE-OS Build Version: 2.0.1.038 ADE-OS System Architecture: x86_64 Copyright (c) 2005-2010 by Cisco Systems, Inc. All rights reserved. Hostname: primedev Version information of installed applications --------------------------------------------- Cisco Prime Network Control System ------------------------------------------ Version : 1.4.0.45 Patch: Cisco Prime Network Control System Version: Update-1_39_for_version_1_4_0_45 Patch: Cisco Prime Network Control System Version: Update-1_16_for_version_1_4_0_45 **** OR **** primedev/admin# show application ? > Output Redirection. status Show Application status Information version Show Application Version Information | Output modifiers. <cr> Carriage return. primedev/admin# show application version ? <WORD> Application name for version (Max Size - 255) primedev/admin# show application version ncs <- lowerecase not working % Error finding version information for the application: ncs primedev/admin# show application version NCS Cisco Prime Network Control System ------------------------------------------ Version : 1.4.0.45 Patch: Cisco Prime Network Control System Version: Update-1_39_for_version_1_4_0_45 Patch: Cisco Prime Network Control System Version: Update-1_16_for_version_1_4_0_45
Here is some other useful CLI commands you can use with this product.
primedev/admin# show application status NCS Health Monitor Server is running. Reporting Server is running Ftp Server is running Database server is running Tftp Server is running Matlab Server is running NMS Server is running. SAM Daemon is running ... DA Daemon is running ... Syslog Daemon is running ... status primedev/admin# show logins cli admin pts/0 131.172.70.180 Sun Jan 12 12:25 still logged in admin pts/0 131.172.70.180 Sun Jan 12 10:43 - 12:15 (01:32) admin pts/0 131.172.70.180 Sat Jan 11 10:35 - 11:05 (00:30) wtmp begins Sat Jan 11 10:35:13 2014 primedev/admin# show running-config Generating configuration... hostname primedev ip domain-name latrobe.edu.au ! interface GigabitEthernet 0 ip address 10.129.0.6 255.255.254.0 ipv6 address autoconfig ! ip name-server x.x.x.2 x.x.x.1 ip default-gateway 10.129.1.250 clock timezone Australia/Melbourne ntp server x.x.x.x ! username admin password hash $1$l3Q9q2Zv$g7QRjguS.VJ8TuBlpSRww1 role admin service sshd ! repository defaultRepo url disk:/defaultRepo repository localftp url disk:/ftp user admin password hash 74a43cee8d45b06fab03e0c57149222938d8f3a9 ! password-policy lower-case-required digit-required no-username ! logging x.x.34.118:50003 logging loglevel 6 ! cdp timer 60 cdp holdtime 180 cdp run GigabitEthernet 0 icmp echo on primedev/admin# show udi SPID: Cisco-VM-SPID VPID: V01 Serial: PDEBFHIEJAG primedev/admin# show ports Process : portmap (3504) tcp: 0.0.0.0:111 udp: 0.0.0.0:111 Process : Decap_main (28033) tcp: 127.0.0.1:2000 udp: 0.0.0.0:514, 0.0.0.0:162 Process : Xvfb (27791) tcp: 0.0.0.0:6100, :::6100 Process : rpc.statd (3549) tcp: 0.0.0.0:763 udp: 0.0.0.0:757, 0.0.0.0:760 Process : sam_daemon (28493) tcp: 0.0.0.0:2012 udp: 127.0.0.1:24336 Process : java (28690) tcp: :::8009, :::48238, :::8080, :::16113, :::2001, ::ffff:10.129.0.6:61617, :::61237, :::8090, :::443 udp: :::9991, :::14221, :::48909, :::52322 Process : java (27061) tcp: :::5001, :::8082 Process : java (27793) tcp: :::20555 Process : java (27360) tcp: :::20556, :::1199, :::9745, :::1299 udp: :::18773 Process : java (27491) tcp: :::20558, :::21 Process : java (27674) tcp: :::20559 udp: :::69, :::29001, :::29002, :::29003, :::29004, :::29005 Process : tnslsnr (27101) tcp: :::1522 Process : sshd (3929) tcp: :::22 Process : rsyslogd (28391) udp: 0.0.0.0:514, :::514 Process : ntpd (3910) udp: 10.129.0.6:123, 127.0.0.1:123, 0.0.0.0:123, fe80::250:56ff:feb9:123, ::1:123, :::123 Process : ora_pmon_wcs (27199) udp: ::1:11838 Process : ora_mmon_wcs (27228) udp: :::17770
Full list of PI v1.4.1 command reference you can find here.
References
1. Tips for Upgrading Prime Infrastructure (DOC-26972)
2. Steps to Install Update Patch for Prime Infrastructure (DOC-38649)
3. Cisco PI Classic View Configuration Guide, Release 1.4
mrn-cciew 
Excellent guide. Thanks for your hard work.
Thank Clark for feedback…
Hi,
Do you know if it’s possible to add a domain before or after the username.
Example:
user CISCO.COM\admin password plain Cisco123
user admin@CISCO.COM password plain Cisco123
Thanks,
Nehmaan
Hi Rasika, any ideas about how to upgrade NCS/Prime from 1.4.0.45 patch 2 into 2.0. We are upgrading ISE and WLC’s 5508/8500 to an upper version and we are stuck on the NCS part. thanks
That version cannot be upgraded to 2.0. 1.4.x is a special train & not compatible with 1.3->2.0->2.1 etc.
http://www.cisco.com/en/US/docs/net_mgmt/prime/infrastructure/2.0/release/notes/cpi_rn.html
HTH
Rasika
thanks, any idea how to recover root patch password from NCS???. I need to check the path /opt/…./CA for the certificate installed on the NCS
Hi,Rasika,
can i upgrade prime 2.2 to 3.0 directly?? PI-Upgrade-3.0.0.0.78.tar.gz.zip.
do i need to backup or my data will be as it is??
Regards,
Quisher
Yes, you can do, but I do not recommend. If you come to see my blog in 1 week time, you will see why.
HTH
Rasika
Read this post & decide.
https://mrncciew.com/2015/11/26/cpi-3-0-disk-running-out-of-space/
HTH
Rasika
Dear Rasika,
i have question to you prime 2.2 related. can you help me to enable below for reporting and notification stuff.. in our network we have two types of switches one type for wireless and one type of wired.
1. Switch unreachable
2. Any uplink down for switches
3. switches CPU utilization exceed 70%
4. switches Memory utilization exceed 70%
5. Any Access point down.
6. Datacenter switches and core network devices – Any ‘up’ interface is down.
Hi Rasika,
Great Blog you maintian here, I just have a quick one, is there way on CIsco Prime to know which devices have SSH enabled and which one have Telnet Enabled like in a report or something.
Thanks,
Rehan
Hi Rasika,
I get “software update” pop up after log on PI 2.2 GUI and planeed to update patch.
Should i installed PI 2.2.3 maintanance release and after install Pi223_update_06-8.ubf ?
Which patch should i have update first?
Could you please help..
Software update
————————————————————————————–
1. Pi223_update_06-8.ubf -update 06 for for PI 2.2.3 only.**WARNING**If you have wireless (CA) and/or datacenter Tech Pack installed
2. pi222 update_04-3.ubf-update 04 for PI 2.2.2 only.
3. Patch to disable 3DES
4.Pi_2.2_device-pack_10.72.ubf-Prime 2.2 Device Pack 10
——————————————————————————————
Cisco prime # Sh version
********************
Cisco Prime Infrastructure
********************************************************
Version : 2.2.0
Build : 2.2.0.0.158
********************************************************
Installed Updates:
Critical Fixes:
PI 2.2.3 Maintenance Release ( 1.8.0 )
(ONLY for PI 2.2.3) November, 2015 Number 01 Update ( 2.0.0 )
********************************************************
Installed Updates:
Device Support:
Prime Infrastructure 2.2 Device Pack 8 ( 8.0 )
Prime Infrastructure 2.2 Device Pack 9 ( 9.0 )
********************************************************
Installed Updates:
Prime Add-Ons:
Data Center Technology Pack on Prime 2.2.3 Only ( 1.0.1 )
Data Center Technology Pack on Prime 2.2.3 Update 1 Patch ( 1.0.1 )
Wireless Technology Pack on Prime 2.2.3 Only ( 1.0.1 )
Refer release notes for accurate instructions.
Regarding patches, if you install latest patches, I think that will cover earlier patches as well.
HTH
Rasika
Hi Rasika,
I have attended Cisco live 2017(Melbourne ) and missed opportunity to meet you. I’m planning to install PRIME, Starting from scratch.
Could you please provide me step by step installation guide would be appreciated.
Thanks in Advance
Raj
Hi Raj,
Will meet next time when you come to CLMEL.
Regarding your query, pls find below URL which consist PI installation guides.
http://www.cisco.com/c/en/us/support/cloud-systems-management/prime-infrastructure/products-installation-guides-list.html
HTH
Rasika
Hi Rasika,
Definitely we will meet on CLMEL 2018.
Many Thanks for detail information.
Hi Rasika, Is there a way to increase the memory size with Cisco Primes CLI? I am getting am error 131. Any suggestions?
Thank you very much for the Writeup. Its very much appreciable when somebody wrote funtastic write up like this basically on Cisco Prime, Which is very much new to the market.
Hi Bhaskar,
Thank you for kind remarks. Glad to see it is useful to you
Rasika
you are a champ!!! thanks for the guide… worked for my setup
Glad to hear that Waqas, thanks for the note
Rasika
Can you install ubf updates via CLI?
Hello, i have configured the localftp repository and ftp credential. However, ftpclient cannot access to prime server through ftp. Really need your help 😦 Thank you
Hi Farid,
Did you try to access Prime using an FTP client (default username is ftp-user that you can’t change, password you can update using below command)
prime/admin# ncs password ftpuser ftp-user password Cisco123
Then using FTP client, you can upload image directly to /localdisk/ftp folder
HTH
Rasika
I want to create a report in Prime 3.1 showing me what APs have SSH enabled.
What steps do I need to do to produce this report?
Thanks,
Hello Rasika,
I am now going to upgrade my PI with 3.5 from 3.4.1, I have uploaded the file to PI but i am unaware how to cross verify the integrity of the image.
Could you please help with a command to verify ?
Regards
Sharath Karpur