Could not list EM ceritifcate directory '/shared/em/ssl.crt' in function LoadEmCertificates: Permission denied

Do you have any EM in your infra. The /shared/em/ssl.crt/ is a folder.

This folder has certain EM certs in it. abchostname.crt could be the hostname of an EM in your infra. So that EM's cert would reside on the F5 devices for communication. If the cert does not exist, it means the EM could not establish communication with the F5 device.

No we migrated from EM to BIG-IQ recently, Not getting these alerts related to BIG-IQ or older EM date.

Also here why big3d is trying to list EM, as we dont have EM now.

Hello,

after upgrade to 14.1.2.1-0.0.4, this logs log message don't appears.

Before that, I opened a service request and received the following response (I'm not using BIG-IQ):

"Due to the change in 14.1.0 SELinux prevents big3d process access to files in /shared/em/ssl.crt/."

If you are seeing this error on the GTM, the EM may be added as a server there. Try listing that.

You may have the EM's IP or the hostname of it. Try a netstat & grep to see who the source is.

netstat -a | grep <em-name>

Were you able to check from which F5 big3d the probe is still taking place.

Did you try the netstat command.