ise_update_deployment
Modify an existing ISE deployment's non-secret settings (host, ports, Data Connect, monitoring). Pass only the fields to change; passwords are preserved. Renaming to a new slug requires reslug=true.
Instructions
Modify an EXISTING deployment's non-secret settings — use this to fix a typo (e.g. wrong host) or add information later (e.g. enable Data Connect and set its certificate). Only the fields you pass change; everything else (including stored passwords) is preserved. Renaming to a name with a DIFFERENT slug changes the deployment's identity and moves its stored credentials, so it requires reslug=true; otherwise the rename is rejected with guidance. Passwords are NEVER set here (use the terminal: uv run cisco-ise-mcp set-credential ). Reports any remaining gaps.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| host | No | New ISE admin-node IP or FQDN. | |
| name | No | New descriptive label. If its slug differs from the current one, also pass reslug=true. | |
| reslug | No | Authorize a slug (identity) change when renaming; migrates stored credentials. Required for renames that change the slug. | |
| ers_port | No | ERS port (443 gateway, or 9060). | |
| deployment | Yes | Name, slug, or number of the deployment to modify. | |
| verify_ssl | No | Verify the ISE admin TLS cert. | |
| ca_cert_path | No | PEM CA bundle to trust for ERS/Open API/Monitoring TLS (private ISE CA). Needed when verify_ssl=true and ISE uses an internal CA — httpx trusts only certifi, not the OS/Keychain store. Pass '' to clear and fall back to certifi. | |
| ers_username | No | ERS/Open API admin username. | |
| openapi_port | No | Open API port (443 gateway, or 9070). | |
| dataconnect_sid | No | ||
| dataconnect_host | No | Data Connect (MnT/Monitoring node) IP or FQDN. Pass '' to clear and fall back to the admin host. | |
| dataconnect_mode | No | ||
| dataconnect_port | No | ||
| dataconnect_user | No | ||
| monitoring_enabled | No | Enable/disable the Monitoring API (MAPI / MnT) for this deployment. Needs the ERS account in ISE's 'MnT Admin' group. | |
| dataconnect_enabled | No | Enable/disable Data Connect for this deployment. | |
| dataconnect_os_trust | No | CA-signed Data Connect cert: validate against the OS/default CA store instead of a PEM (no cert_path needed). False for self-signed. | |
| dataconnect_cert_path | No | Path to THIS deployment's Data Connect certificate (PEM). Pass '' to clear (e.g. when switching to os_trust). | |
| dataconnect_verify_ssl | No | ||
| dataconnect_wallet_path | No | ||
| dataconnect_oracle_client_lib | No |