Bug ID 1315121: Key migration failure and potential corruption updating to 1.5.0 or later with deployed tenants

Last Modified: May 29, 2024

Affected Product(s):
F5OS Velos(all modules)

Known Affected Versions:
F5OS-A 1.5.0

Fixed In:
F5OS-C 1.6.0, F5OS-A 1.7.0, F5OS-A 1.5.2, F5OS-A 1.5.1

Opened: Jun 29, 2023

Severity: 1-Blocking


When setting a new primary key after upgrading from an older release (such as 1.1.1 or older), where tenants are deployed, to 1.5.0 or newer, the key migration may fail. The migration failure may cause configuration database corruption for the entire system.


Setting a new primary key may fail. When this failure occurs, system configuration corruption may occur.


Tenants are deployed on release 1.1.1 or older. Upgrade to 1.5.0 or newer (including through intermediate upgrades, such as 1.1.1 -> 1.3.2 -> 1.5.1). Set new primary key.


Mitigation to prevent failure: - Change all tenants to the configured state - Set a new primary key - Wait for key migration to complete - Return tenants to deployed state. Recovery for corruption: - Reset device to default configuration - Set the primary key to the known primary key for a known-good backup - Restore with known-good backup

Fix Information

Fix known causes of database corruption on primary key migration failure. While the primary key configuration may still fail if tenants are in deployed state, it should no longer cause system corruption.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips