Bug ID 681850: APMD process may fail to initialize on start either after upgrade or after adding certain configurations

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0, 12.1.3.6

Opened: Sep 06, 2017

Severity: 2-Critical

Symptoms

APMD process may fail at initialization time with errors similar to the following: -- createAgent - initInstance() failed for agent xxx_saml_auth_ag type (46) -- Exiting due to failure in loading access policy objects

Impact

APMD service may become unresponsive, dropping all traffic protected by APM access policies.

Conditions

-- BIG-IP system is configured as SAML SP. -- Certificate used by configured SAML Agent was imported onto BIG-IP system in DER format.

Workaround

Convert DER encoded certificate used by SAML SP agent into PEM format.

Fix Information

DER certificate no longer cause APMD process errors at initialization time.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips