Last Modified: Jul 28, 2026
Affected Product(s):
BIG-IQ Device
Known Affected Versions:
8.4.1, 8.4.2, 8.4.2.1
Opened: Jun 04, 2026 Severity: 3-Major
Upgrade attempts from BIG-IQ 8.4.1, including both Final and Engineering Hotfix builds, to any later version may fail. The issue can also affect upgrades between versions derived from BIG-IQ 8.4.1. This occurs because required Elasticsearch configuration files are missing, preventing SSL communication between devices during the upgrade process.
The upgrade process fails, preventing SSL communication between devices from being established. As a result, the upgrade cannot be completed successfully.
This issue may occur under the following conditions: - The system is upgraded from BIG-IQ 8.4.1, including Final and Engineering Hotfix builds. - One or more Data Collection Devices (DCDs) are present in the configuration. - The upgrade is performed to a later BIG-IQ version or between versions derived from BIG-IQ 8.4.1.
1. To remount the /usr file system in read-write mode, type the following command: mount -o remount,rw /usr 2. Backup the current cs.dat configuration saved to a file named /usr/libdata/configsync/cs.dat.bak cp -b /usr/libdata/configsync/cs.dat{,.bak} 3. Execute the following commands: FILE=/usr/libdata/configsync/cs.dat if ! grep -q "save.2641.file" "$FILE"; then sed -i '/^save\.2640\.file.*elasticsearch\.yml/a\ \ # elasticsearch ssl certificate files\ save.2641.file = /var/config/rest/elasticsearch/config/es_admin-key.pem\ save.2642.file = /var/config/rest/elasticsearch/config/es_admin.pem\ save.2643.file = /var/config/rest/elasticsearch/config/es_node-key.pem\ save.2644.file = /var/config/rest/elasticsearch/config/es_node.pem\ save.2645.file = /var/config/rest/elasticsearch/config/es_root-ca-key.pem\ save.2646.file = /var/config/rest/elasticsearch/config/es_root-ca.pem' "$FILE" fi if ! grep -q "save.6005.ignore" "$FILE"; then sed -i '/^save\.6004\.ignore.*remoterole/a\ save.6005.ignore = /config/snmp/snmpd.conf\ save.6006.ignore = /config/net-snmp/snmpd.conf' "$FILE" fi FILE='' 4. To remount the /usr file system in read-only mode, type the following command: mount -o remount,ro /usr Note: The workaround must be applied before the upgrade process.
None