Bug ID 611240: Import of config with securid might fail

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
12.1.0, 12.1.1

Fixed In:
13.0.0, 12.1.2

Opened: Aug 16, 2016

Severity: 3-Major

Related Article: K49781523

Symptoms

Import of the profile used for securid auth might fail if the profile has already been used for auth purposes at the moment of export.

Impact

Unable to import certain configurations.

Conditions

This occurs when the following conditions are met: -- Profile configured for securid authenticaiton with securid server attached. -- Profile has been used for authentication more than 0 times. -- Full import (no reuse) or Reuse import when secureid server under the same name is not present.

Workaround

1. In VPE, open securid auth item and set server to none before export. 2. Export profile. 3. Import profile. 4. Re-create the aaa securid server. 5. In VPE, open the securid auth item and set server to one from step #4. Or 1. Export profile. 2. Create aaa securid server under the same name. 2. Import profile with reuse. It is also possible to remove securid entry from config-files of securid server configuration in .conf.tar.gz, which would also work.

Fix Information

It is now possible to successfully export and the import profile using securid in any state.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips