Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IQ SSL Orchestrator
Opened: Sep 26, 2022 Severity: 3-Major
After upgrading SSLO from v8.0.0.1 to v9.3 version or from v9.0 to v9.3, the SSL Configuration screen in the Topology is showing a message saying 'Non-SSL Orchestrator managed SSL settings have been selected. Please go to Local Traffic >> Profiles >> SSL to manage the SSL Profiles directly.' When we re-add the BIG-IP device to BIG-IQ after upgrading SSLO, in the Configuration > SSL Orchestrator > Topologies Grid when we open an existing topology here the SSL Configurations are shown in the flow.
After upgrading of BIG-IP SSLO, while we re-add the device to BIGIQ, SSL Configurations are missing in Topology grid screen in BIG-IQ.
This error is seen only after upgrading of BIG-IP SSLO to 9.3 and later.
Steps for Workaround: 1. Select the Virtuals which contains the copy-ssloT* ssl profiles. 2. Removed the copy-ssloT profiles and attach the correct ssl profiles from the list. 3. Update the Virtual 4. Removed the copy-ssloT profiles as mentioned below. [root@localhost:Active:Standalone] restnoded # tmsh delete ltm profile client-ssl copy-ssloT* These following objects will be deleted: /Common/ /Common/ /Common/ Are you sure you want to delete these items (y/n)? y [root@localhost:Active:Standalone] restnoded # tmsh delete ltm profile server-ssl copy-ssloT* These following objects will be deleted: /Common/ /Common/ /Common/ Are you sure you want to delete these items (y/n)? y 5. If we try to execute step 4 directly without executing steps from 1-3. Will land into below error. [root@localhost:Active:Standalone] restnoded # tmsh delete ltm profile client-ssl copy-ssloT* These following objects will be deleted: /Common/ /Common/ /Common/ Are you sure you want to delete these items (y/n)? y 01070265:3: The ClientSSL Profile (/Common/copy-ssloT_test3-cssl-vhf) cannot be deleted because it is in use by a virtual server profile (/Common/sslo_test3.app/sslo_test3-in-t-4 /Common/copy-ssloT_test3-cssl-vhf).
None