Bug ID 584655: platform-migrate won't import password protected master-keys from a 10.2.4 UCS file

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Fixed In:
12.1.1

Opened: Mar 31, 2016

Severity: 3-Major

Symptoms

If you run the platform-migrate command to migrate from a UCS file generated on a platform running 10.2.4, the password protected master key won't import

Impact

The platform-migrate command will fail if the 10.2.4 UCS contains a password protected master key.

Conditions

You would encounter this when doing platform migration from an older platform running 10.2.4, and using the UCS file from that platform to platform-migrate to 12.1.1. This also only occurs if your 10.2.4 UCS contains secure attributes, such as clientssl or serverssl keys and profiles

Workaround

None

Fix Information

The 12.1.1 release can successfully platform-migrate UCS files from a 10.2.4 configuration if some steps are taken to generate a password protected master key on the 10.2.4 release. Without these steps, this impact exists. The 10.2.4-specific solution https://support.f5.com/csp/#/article/K9420

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips