Bug ID 468021: UCS file from earlier version may not load into 11.5.0 or later image

Last Modified: Mar 14, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP Install/Upgrade, LTM(all modules)

Known Affected Versions:
10.2.2, 10.2.4, 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4

Fixed In:
11.6.0, 11.5.2, 11.5.1 HF5

Opened: Jun 19, 2014
Severity: 3-Major
Related AskF5 Article:
K15974

Symptoms

When attempting to upgrade to 11.5.0 or later, from an earlier release, some .ucs files may cause the system to run out of memory, and the kernel to kill the process. You may also see an error: "UCS application failed; unknown cause."

Impact

It can be impossible to upgrade the software image to 11.5.0 or later because the config fixup exits in error.

Conditions

In the .ucs file, in bigip.conf, is a section like this: ltm profile client-ssl /Common/my-clientssl { ... defaults-from /Common/wom-default-clientssl ... } The problem happens because /Common/wom-default-clientssl and /Common/clientssl-insecure-compatible was not defined in a couple of our fixup scripts, resulting in infinite recursion in another fixup script.

Workaround

A workaround is to change instances of "wom-default-clientssl" and "clientssl-insecure-compatible" to "clientssl" in the configuration files in the UCS archive.

Fix Information

"wom-default-clientssl" and "clientssl-insecure-compatible" were added to two fixup scripts, and code to prevent infinite recursion was added to another script.

Behavior Change