Bug ID 2524309: ConfigSync fails for a certificate with an existing OCSP cert-validator

Last Modified: Oct 16, 2026

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
21.1.0, 21.1.0.1, 21.1.0.2, 21.1.0.3

Opened: Sep 17, 2026

Severity: 3-Major

Symptoms

ConfigSync fails with error 01071bae:3, reporting that the certificate already has another OCSP cert-validator configured.

Impact

The sync fails, preventing the affected configuration from being applied to the peer.

Conditions

BIG-IP devices have the same OCSP cert-validator associated with a certificate, and ConfigSync reapplies that association during synchronization.

Workaround

On the standby device, remove the validator reference and disable OCSP for the affected certificate, then initiate ConfigSync from the active device. If OCSP does not synchronize, disable and re-enable it on the active device.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips