Bug ID 1935917: Users with custom permissions but lacking admin privileges are unable to view certificates and keys via the web UI or the iControl REST API.

Last Modified: Jul 28, 2026

Affected Product(s):
BIG-IQ ADC(all modules)

Known Affected Versions:
8.4.0

Fixed In:
8.4.1

Opened: May 08, 2025

Severity: 3-Major

Symptoms

- Certificates and keys were visible to the affected user on versions before v8.4.0. - Non-admin users with appropriate permissions are now unable to view the list of certificates and keys via the UI or iControl REST API. - Executing the following command for the affected user (e.g., f5testuser) returns an empty set: curl -su 'f5testuser' http://localhost:8100/mgmt/cm/adc-core/working-config/sys/file/ssl-cert | jq . Enter host password for user 'f5testuser': { "items": [], "generation": 2, "lastUpdateMicros": 1755557580126930, "kind": "cm:adc-core:working-config:sys:file:ssl-cert:adcsslcertcollectionstate", "selfLink": "https://localhost/mgmt/cm/adc-core/working-config/sys/file/ssl-cert" }

Impact

Users without admin privileges but with custom permissions are unable to manage certificates and keys via the UI or the iControl REST API.

Conditions

- BIG-IQ running on v8.4.0

Workaround

There is no workaround. Install an EHF with the fix for ID1935917 on version 8.4.0 to resolve this issue.

Fix Information

The issue is fixed.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips