Bug ID 425884: Failed to install epsec package

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.4.0, 11.4.1

Fixed In:
11.5.0, 11.4.1 HF2, 11.4.0 HF6

Opened: Jul 22, 2013

Severity: 3-Major

Related Article: K14614

Symptoms

The epsec installation fails after you attempt to install it from the list on the Package Status screen. 1. Configure an 11.4.0 device 2. Upload any epsec ISO using the Configuration utility (used v1.0.0-242.0) 3. Select uploaded epsec package in the list on the Package Status page 4. Click Install Package 5. Note that the package installation fails

Impact

Unable to install epsec packages.

Conditions

The following conditions reproduce this issue: 1. Configure an 11.4.0 device 2. Upload any epsec ISO using the Configuration utility (used v1.0.0-242.0) 3. Select uploaded epsec package in the list on the Package Status page 4. Click Install Package 5. Note that the package installation fails A new epsec package is uploaded for the first time and then an installation is attempted. The error occurs because the /Images folder is missing. After this folder is created, subsequent installs go through.

Workaround

There are 2 workarounds - 1. Use TMSH to create a folder in the /Common/EPSEC path: root@(bigip114-1-demo)(cfg-sync Standalone)(Active)(/Common/EPSEC)(tmos.sys.folder)# create Images And then try the installation again. 2. Change the bigip.conf config: apm epsec epsec-package /Common/epsec-1.0.0-242.0.iso { cache-path /config/filestore/files_d/Common_d/epsec_package_d/:Common:epsec-1.0.0-242.0.iso_110044_1 oesis-version 3.6.7336.2 revision 1 version 1.0.0-242.0 } - mv /config/filestore/.trash_bin_d/.current_d/Common_d/epsec_package_d/\:Common\:EPSEC\:Upload\:epsec-1.0.0-242.0.iso_110044_1 /config/filestore/.trash_bin_d/.current_d/Common_d/epsec_package_d/\:Common\:epsec-1.0.0-242.0.iso_110044_1 - touch /config/filestore/.trash_bin_d/.current_d/Common_d/epsec_package_d/:Common:EPSEC:Upload:epsec-1.0.0-242.0.iso_110044_1 - tmsh load sys config

Fix Information

When an admin tries to upload and install a new epsec package, the admin will no longer see a Configuration error.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips