Panic: Upgrade 11.3.0 to 11.5.1 failed with "EC key contains unsupported curve. Unexpected Error: Loading configuration process failed"

Question

Hi folks&nbsp;
Did anyone experience this as well? We upgraded several BIG-IP from 11.3.0 to 11.5.1 without any hassle, but one failed with: &nbsp;
May 28 17:04:41 hostname err tmsh[9720]: 01420006:3: Loading configuration process failed.
May 28 17:04:41 hostname emerg load_config_files: "/usr/bin/tmsh -n -g load sys config partitions all" - failed. -- 010717e6:3: EC key contains unsupported curve. Unexpected Error: Loading configuration process failed.
May 28 17:04:42 hostname err mcpd[6100]: 01070425:3: Full configuration load failed.&nbsp;
This is the standby side of a 2 node HA group.&nbsp;
Any ideas welcome&nbsp;
Sven&nbsp;

pk_bhatia · Answer

It could be something to do with SSL cyphers which are no longer supported in 11.5.1. &nbsp;
http://openssl.6102.n7.nabble.com/Null-or-default-certificates-td43431.html&nbsp;

sven_leupold_85 · Answer

Obviously 11.5.1 installs, but does not check platform compatibility.
[me@hostname:Active:In Sync] ~  cat /PLATFORM
    platform=Mercury
    family=0x90000000
    host=Mercury
    systype=0x68

Release notes say that platform must be C102 for BIG-IP 1600. See http://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/product/relnote-ltm-11-5-1.html

nitass · Answer

mercury is family name. 1600 platform is in mercury family. c102 is type number.

what_lies_bene1 · Answer

EC could be Elliptic Curve which would relate to SSL/TLS.&nbsp;

Forum Discussion

Panic: Upgrade 11.3.0 to 11.5.1 failed with "EC key contains unsupported curve. Unexpected Error: Loading configuration process failed"

4 Replies

Recent Discussions

Client certificate Authentication - open multiple tabs

google autenticator broken barcode

Chrome V 124+ on MacOS - Virtual Server Access Issue

vulnerabilities (CVE-2020-36363), CVE-2016-0736,CVE-2019-6593-FOR VERSION BIGIP LTM-16.1.4

Port Group on F5OS network setting

Related Content

Unsupported Snort Keywords in Protocol Inspection

ASM secheduled reports "SMTP Error: The following recipients failed"

Certificate Expiry Email alert configuration

F5 BIG-IP SSL Orchestrator Configuration with Advanced WAFaaS

relocation cpu core on vcmp host the guest configuration back to default configuration