Introduction

Unfortunately ISE does not offer an option for a graceful shutdown in the GUI yet. In this short guide we will use the CLI to stop all ISE services and shutdown the node properly.

Stopping Services

Login to your ISE node using ssh.

Run the following command to stop ISE application:

application stop ise

Once the command is completed your output should look similar to the following:

PassiveID WMI Services is disabled
PassiveID Syslog Service is disabled
PassiveID API Service is disabled
PassiveID Agent Service is disabled
PassiveID Endpoint Service is disabled
PassiveID SPAN Service is disabled
Stopping ISE Application Server...
Stopping ISE Process Monitoring Service...
Stopping ISE Certificate Authority Service...
Stopping ISE EST Service...
ISE Sxp Engine Service is disabled
Stopping TC-NAC Service ...
VA Service is not running
ISE VA Database is not running
Segmentation Policy Service is disabled
REST Auth Service is disabled
Stopping ISE Messaging Service...
Stopping ISE API Gateway Service...
Stopping ISE API Gateway Database Service...
Stopping ISE  Profiler Databse...
Stopping ISE Indexing Engine...
Stopping ISE Monitoring & Troubleshooting Session Database...
Stopping ISE AD Connector...
Stopping ISE Database processes...

You can double-check the service status with the following command:

show application status ise

Once all services are in the state not running or disabled for those not in use you can continue with the shutdown command:

halt

Save the current ADE-OS running configuration by hitting enter (default is yes). The Cisco ADE-OS configuration includes items such as the network settings, CLI password policy and backup history.

Confirm the shutdown with y. The node should now begin with the shutdown process.

Conclusion

There may be other options available in new ISE releases but for now the only option to shut down a node is via CLI.