Forum Discussion
I get the following when running "tmsh load sys config" on the standby unit:
Loading system configuration... /defaults/asm_base.conf /defaults/config_base.conf /defaults/low_profile_base.conf /defaults/policy_base.conf /defaults/wam_base.conf /defaults/analytics_base.conf /defaults/apm_saml_base.conf /defaults/app_template_base.conf /defaults/classification_base.conf /defaults/daemon.conf /defaults/fullarmor_gpo_base.conf /defaults/profile_base.conf /defaults/sandbox_base.conf /defaults/security_base.conf /usr/share/monitors/base_monitors.conf Loading configuration... /config/bigip_base.conf /config/bigip_user.conf /config/bigip.conf /config/bigip_script.conf 01070712:3: _identify_jobs_todo:(/Common/.generic.com-20140214.crt) :Failed: name (/Common/.generic.com-20140214.crt) No copy in trash-bin to restore from. - sys/validation/FileObject.cpp, line 3064
- nitassNov 25, 2014Employeeis this relevant? sol12812: The Configuration utility and tmsh incorrectly allow profile names that begin with a non-alphabetic character https://support.f5.com/kb/en-us/solutions/public/12000/800/sol12812.html
- Nathan_VitirittNov 25, 2014NimbostratusWe are running 11.4.1 so from the article this doesn't apply.
- natheNov 25, 2014Cirrocumulusthat's a new one on me. Anything else in /var/log/ltm? does the crt file exist on your bigip, or that active? hopefully some other DCer might have seen this. Have you got a recent UCS you can restore and then see if configsync works?
- nitassNov 25, 2014Employeesorry it is the wrong askf5 sol. anyway, i remember i run to it recently. can you try to remove the certificate starting with dot (i.e. .generic.com-20140214.crt)?
- Nathan_VitirittNov 25, 2014NimbostratusI would try to remove the certificate though it doesn't seem to exist on the active or passive device. The date in the certificate is the expiration date so it was replaced with a newer one that expires on 20150304. For other things in the /var/log/ltm there isn't much in there for today but I unzipped older ones from the past couple of days and found this message: Nov 24 21:15:21 prdatl-F5-b err tmsh[17682]: 01420006:3: Configuration cannot be saved unless mcpd is in the running phase. Save was canceled. See "show sys mcp" and "show sys service". If "show sys service" indicates that mcpd is in the run state, but "show sys mcp" is not in phase running, issue the command "load sys config" to further diagnose the problem. This previous log message occurred at the same time as my changes to allow-none on the port lock down. I ran the commands in the log output to find: [nathan.vitiritti@prdatl-F5-b:Standby:In Sync] ~ tmsh show sys service mcpd run (pid 6507) 268 days [nathan.vitiritti@prdatl-F5-b:Standby:In Sync] ~ tmsh show sys mcp ------------------------------------------------------- Sys::mcpd State: ------------------------------------------------------- Running Phase base Last Configuration Load Status high-config-load-failed