Bug ID 2313605: Upgrade from BIG-IQ 8.4.1 Fails Due to Missing Elasticsearch Configuration Files

Last Modified: Jul 28, 2026

Affected Product(s):
BIG-IQ Device(all modules)

Known Affected Versions:
8.4.1, 8.4.2, 8.4.2.1

Opened: Jun 04, 2026

Severity: 3-Major

Symptoms

Upgrade attempts from BIG-IQ 8.4.1, including both Final and Engineering Hotfix builds, to any later version may fail. The issue can also affect upgrades between versions derived from BIG-IQ 8.4.1. This occurs because required Elasticsearch configuration files are missing, preventing SSL communication between devices during the upgrade process.

Impact

The upgrade process fails, preventing SSL communication between devices from being established. As a result, the upgrade cannot be completed successfully.

Conditions

This issue may occur under the following conditions: - The system is upgraded from BIG-IQ 8.4.1, including Final and Engineering Hotfix builds. - One or more Data Collection Devices (DCDs) are present in the configuration. - The upgrade is performed to a later BIG-IQ version or between versions derived from BIG-IQ 8.4.1.

Workaround

1. To remount the /usr file system in read-write mode, type the following command: mount -o remount,rw /usr 2. Backup the current cs.dat configuration saved to a file named /usr/libdata/configsync/cs.dat.bak cp -b /usr/libdata/configsync/cs.dat{,.bak} 3. Execute the following commands: FILE=/usr/libdata/configsync/cs.dat if ! grep -q "save.2641.file" "$FILE"; then sed -i '/^save\.2640\.file.*elasticsearch\.yml/a\ \ # elasticsearch ssl certificate files\ save.2641.file = /var/config/rest/elasticsearch/config/es_admin-key.pem\ save.2642.file = /var/config/rest/elasticsearch/config/es_admin.pem\ save.2643.file = /var/config/rest/elasticsearch/config/es_node-key.pem\ save.2644.file = /var/config/rest/elasticsearch/config/es_node.pem\ save.2645.file = /var/config/rest/elasticsearch/config/es_root-ca-key.pem\ save.2646.file = /var/config/rest/elasticsearch/config/es_root-ca.pem' "$FILE" fi if ! grep -q "save.6005.ignore" "$FILE"; then sed -i '/^save\.6004\.ignore.*remoterole/a\ save.6005.ignore = /config/snmp/snmpd.conf\ save.6006.ignore = /config/net-snmp/snmpd.conf' "$FILE" fi FILE='' 4. To remount the /usr file system in read-only mode, type the following command: mount -o remount,ro /usr Note: The workaround must be applied before the upgrade process.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips