Last Modified: Oct 19, 2025
Affected Product(s):
F5OS F5OS-A
Fixed In:
F5OS-A 1.5.4
Opened: Oct 09, 2025 Severity: 1-Blocking
The TMOS tenant images prior to certificate rotation fail to verify the signature. An error is logged: appliance-1.chassis.local image-agent[14]: priority="Err" version=1.0 msgid=0x2002000000000010 msg="Failed to verify image signature. Removed." IMAGE="<image>.tar.bundle" FAILURE="signature".
You can't import the image. But images that were imported before the F5OS-A upgrade continue to work.
Importing a BIG-IP tenant image that was released prior to certificates being rotated.
Import a BIG-IP tenant image which has had its certificates rotated.
Updated the F5OS-A image verification to successfully verifies the TMOS tenant images contain certificate rotation.