Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

license error after upgrading from 11.6.0 HF5 to 13.1.1

I received a license error after upgrading from 11.6.0 HF5 to 13.1.1. The UCS came from an older device and going to a vCMP guest. The error is as follows - "This device is not operational because the loaded configuration contained errors or unlicensed objects. Please adjust the configuration and/or the license, and re-license the device".

Naturally, the license on the new device is up to par, as I activated it not 2 days ago.

0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

While restoring UCS from one device to another use below command.

tmsh load /sys ucs <path/to/UCS> no-license

Refer article: https://support.f5.com/csp/article/K13132

0
Comments on this Answer
Comment made 1 month ago by VFB 375

I did execute that command during the restore and still got the above error

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Okie. can you verify on new device under resource proivisioning any other modules are enabled other than what is required or vice versa (enabling required module is missing).

0
Comments on this Answer
Comment made 1 month ago by VFB 375

Verified all my modules are selected on the new device. Checked the license on the new device as well.

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Can you please try below command:

tmsh load sys ucs [ucs file name] no-platform-check

also you can include no-license.

0
Comments on this Answer
Comment made 1 month ago by VFB 375

Tried that as well. Logs don't show anything

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Can you try below steps on new device.

  1. touch /service/mcpd/forceload
  2. reboot

Still not working. I suggest you to open a ticket with F5.

0
Comments on this Answer
Comment made 1 month ago by VFB 375

I tried that as well. I don't get any errors from doing a forceload. I have a ticket open with F5 but wanted to see if anyone else experienced the same issue. Thanks for trying to help.

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Have you verified that the Master Key is the same on the vCMP guest as the UCS archive being loaded? The BIG-IP uses a Secure Vault feature to encrypt certain configuration objects using what is known as Master Key. The Master Key is a password which you can display on the BIG-IP by using the command:

f5mku -K

If you have access to the old device, run that command to identify the Master Key.

Then on the vCMP guest run the following command to change the Master Key:

f5mku - r <master_key>

After you have done that, try and load the UCS archive again.

Please check out this article for more details:

K9420: Installing UCS files containing encrypted passwords or passphrases

I hope this helps! :)

0
Comments on this Answer
Comment made 1 month ago by VFB 375

Did that as well in the early stages but still no luck.

0
Comment made 1 month ago by VFB 375

"Error trying to rekey: 01071029:5: Invalid master key" is the error I get when attempting to change it on the vCMP guest.

0
Comment made 1 month ago by Philip Jonsson 1094

Hey VFB

I found this DevCentral Article explaining that apparently, f5mku -r does not work on vCMP guests. But this should work:

1. After installing a BIGIP or vCMP Guest, log in on to de device and force the master key with a password by typing the following command:
# tmsh
# modify /sys crypto master-key prompt-for-password
enter password:
password again:
# save /sys config
Saving running configuration...
  /config/bigip.conf
  /config/bigip_base.conf
  /config/bigip_user.conf

2. Save regulary the configuration (using iApp or remote expect script):
save /sys ucs passphrase

3. Log in to the RMA BIG-IP system command line.

4. Install the master key with the password you enter in step 1 to the RMA BIG-IP system using the following command syntax:
# tmsh
# modify /sys crypto master-key prompt-for-password
enter password:
password again:
# save /sys config
Saving running configuration...
  /config/bigip.conf
  /config/bigip_base.conf
  /config/bigip_user.conf

5.Restore the UCS file to the RMA BIG-IP system using the following command syntax:
tmsh load sys ucs .ucs no-license

Source: Working with MasterKeys

Can you try that?

0
Comment made 1 month ago by VFB 375

Actually it does work on vCMP guests. The reason why I was having issues is because I was doing too much on the device and didn't reboot. I performed a reboot, tried again and it took. I appreciate your insight on this though. Thank you

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

I worked with F5 to resolve this. There were some APM configs in the UCS that the device didn't like. After removing the profiles, the device came online. Right now I'm working with them to add those configs back to the device. I'll keep all posted in their findings and possible resolution.

0
Comments on this Answer
Comment made 1 month ago by RaghavendraSY 1176

Thanks for an update

0