Bug ID 2130349: Older BIG-IP image import fails with signature verification

Last Modified: Oct 19, 2025

Affected Product(s):
F5OS F5OS-A(all modules)

Fixed In:
F5OS-A 1.5.4

Opened: Oct 09, 2025

Severity: 1-Blocking

Symptoms

The TMOS tenant images prior to certificate rotation fail to verify the signature. An error is logged: appliance-1.chassis.local image-agent[14]: priority="Err" version=1.0 msgid=0x2002000000000010 msg="Failed to verify image signature. Removed." IMAGE="<image>.tar.bundle" FAILURE="signature".

Impact

You can't import the image. But images that were imported before the F5OS-A upgrade continue to work.

Conditions

Importing a BIG-IP tenant image that was released prior to certificates being rotated.

Workaround

Import a BIG-IP tenant image which has had its certificates rotated.

Fix Information

Updated the F5OS-A image verification to successfully verifies the TMOS tenant images contain certificate rotation.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips