Bug ID 821381: Client certificate authentication settings are not preserved after upgrading from BIG-IQ v7.0.0 to v7.0.0.1

Last Modified: Sep 17, 2019

Bug Tracker

Affected Product:  See more info
BIG-IQ Platform(all modules)

Known Affected Versions:
7.0.0, 7.0.0.1

Opened: Sep 04, 2019
Severity: 3-Major

Symptoms

If client certificate authentication is enabled for BIG-IQ v7.0.0, and you upgrade BIG-IQ, the webd.conf file gets overridden/replaced. This means the client certificate authentication settings are lost, and authentication no longer works correctly.

Impact

Authentication no longer works correctly.

Conditions

Client certificate authentication is enabled on BIG-IQ v7.0.0.

Workaround

You can avoid this issue by disabling client certificate authentication before you upgrade BIG-IQ, then re-enabling it back after the upgrade. Alternatively, if BIG-IQ v7.0.0 client certificate authentication is not disabled before the upgrade, ssh into the BIG-IQ and type the following command at the shell prompt: client-cert-auth -x This resets BIG-IQ authentication to the default username/password authentication using the local authentication provider.

Fix Information

None

Behavior Change