Bug ID 681850: APMD process may fail to initialize on start either after upgrade or after adding certain configurations

Last Modified: May 14, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0, 12.1.3.6

Opened: Sep 06, 2017
Severity: 2-Critical

Symptoms

APMD process may fail at initialization time with errors similar to the following: -- createAgent - initInstance() failed for agent xxx_saml_auth_ag type (46) -- Exiting due to failure in loading access policy objects

Impact

APMD service may become unresponsive, dropping all traffic protected by APM access policies.

Conditions

-- BIG-IP system is configured as SAML SP. -- Certificate used by configured SAML Agent was imported onto BIG-IP system in DER format.

Workaround

Convert DER encoded certificate used by SAML SP agent into PEM format.

Fix Information

DER certificate no longer cause APMD process errors at initialization time.

Behavior Change