Bug ID 570563: CRL is not being imported/exported properly

Last Modified: Oct 06, 2020

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 12.0.0, 12.0.0 HF1, 12.0.0 HF2

Fixed In:
12.1.0, 12.0.0 HF3, 11.6.1

Opened: Jan 28, 2016
Severity: 3-Major
Related AskF5 Article:


CRL assigned as part of Machine Cert Auth is not being imported/exported properly.


Prevents CRL from being exported. Might also impact the import/export of Certificate Authority Profiles.


This occurs when importing SSL Certificates and Keys using the CRL type. Or when adding the Machine Cert Check agent to import an Access Profile in when creating a New Certificate Authority Profile.


1. Copy and install the CRL to the other BIG-IP system separately. 2. Modify the exported configuration to use CRL from step 1

Fix Information

Import and export of CRL is fully supported.

Behavior Change