Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IQ Platform
Fixed In:
5.1.0
Opened: Aug 08, 2016 Severity: 3-Major
When trying to add a 11.5.x device from BIG-IQ v5.0.0, the operation fails with the error "could not upgrade REST framework" if the BIG-IP does not allow TLSv1 in its httpd config.
BIG-IQ fails to discover the device from the UI.
SSLv3 and TLSv1 have been disabled on BIG-IP by use of the tmsh command modify sys httpd ssl-ciphersuite "DEFAULT:!SSLv3:!TLSv1"
The framework can be manually upgraded using /usr/lib/dco/packages/upd-adc
The list of ssl-ciphercuites used for updating the 11.5.x framework has been expanded to include newer TLS protocols.