Last Modified: Jul 13, 2024
Affected Product(s):
F5OS Velos
Known Affected Versions:
F5OS-A 1.5.0
Fixed In:
F5OS-C 1.6.0, F5OS-A 1.5.2, F5OS-A 1.5.1
Opened: Jun 29, 2023 Severity: 1-Blocking
When setting a new primary key after upgrading from an older release (such as 1.1.1 or older), where tenants are deployed, to 1.5.0 or newer, the key migration may fail. The migration failure may cause configuration database corruption for the entire system.
Setting a new primary key may fail. When this failure occurs, system configuration corruption may occur.
Tenants are deployed on release 1.1.1 or older. Upgrade to 1.5.0 or newer (including through intermediate upgrades, such as 1.1.1 -> 1.3.2 -> 1.5.1). Set new primary key.
Mitigation to prevent failure: - Change all tenants to the configured state - Set a new primary key - Wait for key migration to complete - Return tenants to deployed state. Recovery for corruption: - Reset device to default configuration - Set the primary key to the known primary key for a known-good backup - Restore with known-good backup
Fix known causes of database corruption on primary key migration failure. While the primary key configuration may still fail if tenants are in deployed state, it should no longer cause system corruption.