Bug ID 584655: platform-migrate won't import password protected master-keys from a 10.2.4 UCS file

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Fixed In:

Opened: Mar 31, 2016

Severity: 3-Major


If you run the platform-migrate command to migrate from a UCS file generated on a platform running 10.2.4, the password protected master key won't import


The platform-migrate command will fail if the 10.2.4 UCS contains a password protected master key.


You would encounter this when doing platform migration from an older platform running 10.2.4, and using the UCS file from that platform to platform-migrate to 12.1.1. This also only occurs if your 10.2.4 UCS contains secure attributes, such as clientssl or serverssl keys and profiles



Fix Information

The 12.1.1 release can successfully platform-migrate UCS files from a 10.2.4 configuration if some steps are taken to generate a password protected master key on the 10.2.4 release. Without these steps, this impact exists. The 10.2.4-specific solution https://support.f5.com/csp/#/article/K9420

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips