Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IQ SSL Orchestrator
Known Affected Versions:
8.2.0.1
Opened: Sep 26, 2022 Severity: 3-Major
After upgrading SSL Orchestrator from v8.0.0.1 to v9.3 version or from v9.0 to v9.3, the SSL Configuration screen in the Topology is showing a message saying 'Non-SSL Orchestrator managed SSL settings have been selected. Please go to Local Traffic >> Profiles >> SSL to manage the SSL Profiles directly.' When you re-add the BIG-IP device to BIG-IQ after upgrading SSL Orchestrator, in the Configuration > SSL Orchestrator > Topologies Grid when you open an existing topology the SSL Configurations are shown in the flow.
After upgrading of BIG-IP SSL Orchestrator, when you re-add the device to BIG-IQ, SSL Configurations are missing in the Topology grid screen in BIG-IQ.
This error is seen only after upgrading of BIG-IP SSL Orchestrator to 9.3 and later.
Steps for Workaround: 1. Select the virtual servers which contains the copy-ssloT* ssl profiles. 2. Removed the copy-ssloT profiles and attach the correct ssl profiles from the list. 3. Update the Virtual 4. Removed the copy-ssloT profiles as mentioned below. [root@localhost:Active:Standalone] restnoded # tmsh delete ltm profile client-ssl copy-ssloT* These following objects will be deleted: /Common/ /Common/ /Common/ Are you sure you want to delete these items (y/n)? y [root@localhost:Active:Standalone] restnoded # tmsh delete ltm profile server-ssl copy-ssloT* These following objects will be deleted: /Common/ /Common/ /Common/ Are you sure you want to delete these items (y/n)? y 5. If you try to execute step 4 directly without executing steps from 1-3, you will encounter the following error. [root@localhost:Active:Standalone] restnoded # tmsh delete ltm profile client-ssl copy-ssloT* These following objects will be deleted: /Common/ /Common/ /Common/ Are you sure you want to delete these items (y/n)? y 01070265:3: The ClientSSL Profile (/Common/copy-ssloT_test3-cssl-vhf) cannot be deleted because it is in use by a virtual server profile (/Common/sslo_test3.app/sslo_test3-in-t-4 /Common/copy-ssloT_test3-cssl-vhf).
None