Unfortunately ISE does not offer an option for a graceful shutdown in the GUI yet. In this short guide we will use the CLI to stop all ISE services and shutdown the node properly.
Login to your ISE node using ssh.
Run the following command to stop ISE application:
application stop ise
Once the command is completed your output should look similar to the following:
PassiveID WMI Services is disabled PassiveID Syslog Service is disabled PassiveID API Service is disabled PassiveID Agent Service is disabled PassiveID Endpoint Service is disabled PassiveID SPAN Service is disabled Stopping ISE Application Server... Stopping ISE Process Monitoring Service... Stopping ISE Certificate Authority Service... Stopping ISE EST Service... ISE Sxp Engine Service is disabled Stopping TC-NAC Service ... VA Service is not running ISE VA Database is not running Segmentation Policy Service is disabled REST Auth Service is disabled Stopping ISE Messaging Service... Stopping ISE API Gateway Service... Stopping ISE API Gateway Database Service... Stopping ISE Profiler Databse... Stopping ISE Indexing Engine... Stopping ISE Monitoring & Troubleshooting Session Database... Stopping ISE AD Connector... Stopping ISE Database processes...
You can double-check the service status with the following command:
show application status ise
Once all services are in the state not running or disabled for those not in use you can continue with the shutdown command:
Save the current ADE-OS running configuration by hitting enter (default is yes). The Cisco ADE-OS configuration includes items such as the network settings, CLI password policy and backup history.
Confirm the shutdown with y. The node should now begin with the shutdown process.
There may be other options available in new ISE releases but for now the only option to shut down a node is via CLI.