Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP Install/Upgrade, SSLO
Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5
Fixed In:
16.0.0, 15.1.5.1, 14.1.5
Opened: Mar 31, 2020 Severity: 2-Critical
After the ISO upgrade, any attempt to access the SSL Orchestrator guided configuration user interface results in the following error: The requested URL /iapps/f5-iappslx-ssl-orchestrator/sgc/sgcIndex.html was not found on this server.
Cannot perform SSL Orchestrator configuration tasks using the SSL Orchestrator guided configuration user interface.
Upgrade the BIG-IP system.
(1) Query the f5-iappslx-ssl-orchestrator package ID (9beb912b-4f1c-3f95-94c3-eb1cbac4ab99), and use the returned ID in the following step. restcurl shared/iapp/installed-packages | jq -r '.items[] | select(.appName=="f5-iappslx-ssl-orchestrator") | .id' 9beb912b-4f1c-3f95-94c3-eb1cbac4ab99 (2) Delete existing f5-iappslx-ssl-orchestrator package references. restcurl -X DELETE shared/iapp/global-installed-packages/9beb912b-4f1c-3f95-94c3-eb1cbac4ab99 restcurl -X DELETE shared/iapp/installed-packages/9beb912b-4f1c-3f95-94c3-eb1cbac4ab99 (3) Stop the REST framework daemons. bigstart stop restjavad restnoded (4) Make sure the /var/iapps/www/ directory exists. mkdir -p /var/iapps/www/ (5) Create the RPMS.save directory. mkdir -p /var/config/rest/iapps/RPMS.save (6) Check if the current f5-iapplx-ssl-orchestrator RPM (e.g., 14.1.0-5.5.8) is present at the default location. ls -la /var/config/rest/iapps/RPMS/ -- If it is not present, try to get it from either the /usr/share/packages/f5-iappslx-ssl-orchestrator/ directory or from the remote high availability (HA) peer device (/var/config/rest/iapps/RPMS/). Make sure the RPM version matches the current SSL Orchestrator configuration/version (e.g., 14.1.0-5.5.8). If you cannot find a copy of your original RPM locally, download the latest RPM available for your chosen BIG-IP version from downloads.f5.com. -- Once obtained, copy the RPM to /var/config/rest/iapps/RPMS/ (locally). (7) Copy the current f5-iapplx-ssl-orchestrator (e.g., 14.1.0-5.5.8) RPM to the RPMS.save directory. cp /var/config/rest/iapps/RPMS/f5-iappslx-ssl-orchestrator-14.1.0-5.5.8.noarch.rpm /var/config/rest/iapps/RPMS.save/ (8) Make sure you have only one f5-iappslx-ssl-orchestrator RPM in the RPMS.save/ directory and that it matches the RPM version. Remove other RPMs, if any. (9) Remove the current SSL Orchestrator user interface artifacts. rm -rf /var/iapps/www/f5-iappslx-ssl-orchestrator/ rm -rf /var/config/rest/iapps/f5-iappslx-ssl-orchestrator (10) Restart the REST framework. bigstart restart restjavad restnoded (11) Wait at least 30 seconds. (12) Open TMUI (the GUI) on the affected device, and navigate to SSL Orchestrator :: Configuration. (13) The SSL Orchestrator Self-Guided Configuration page should initialize and eventually load successfully.
After ISO upgrade the SSL Orchestrator guided configuration user interface is now available.