Forum Discussion

jmanya_44531's avatar
jmanya_44531
Icon for Nimbostratus rankNimbostratus
Jul 06, 2014

upgrade from 11.2.1 to 11.5.1 failed

Hello friends,

I need some support urgently. I have called F5 and the operator has told me that the engineers are out.

Please, I follow the steps to upgrade a HA pair and I re-activated the license as recommended in the askF5. But I got this error:

License is not operational (expired or digital signature does not match contents).
Jul  5 22:43:15 ns1 emerg load_config_files: "/usr/bin/tmsh -n -g load sys config partitions all" - failed. -- Error: failed    to reset strict operations; disconnecting  from mcpd.  Will reconnect on next command. The connection to mcpd has been lost, try again.
Jul  5 22:43:16 ns1 emerg logger: Re-starting mcpd
Jul  5 22:43:36 ns1 emerg mcpd[30346]: 0107070e:0: Software version not covered by service agreement.  Reactivate license before continuing.
Jul  5 22:43:36 ns1 emerg mcpd[30346]: 01070608:0: License is not operational (expired or digital signature does not match contents).
Jul  5 22:43:43 ns1 emerg load_config_files: "/usr/bin/tmsh -n -g load sys config partitions all" - failed. -- Error: failed to reset strict operations; disconnecting  from mcpd.  Will reconnect on next command. The connection to mcpd has been lost, try again.
Jul  5 22:43:44 ns1 emerg logger: Re-starting mcpd
Jul  5 22:44:06 ns1 emerg load_config_files: "/usr/bin/tmsh -n -g load sys config partitions all" - failed. -- Error: failed to reset strict operations; disconnecting  from mcpd.  Will reconnect on next command. The connection to mcpd has been lost, try again.

I know F5 is a leader, but it cannot happen with a simple license. I have the license re-activated right now

Licensed date :               20130927
Service check date :          20140705
Service Status :              As of 2014-07-05 this system has an active service contract.

I issued this commands: /usr/libexec/bigpipe daol but nothig happens.

Please, Help me..!

thanks

Jorge

APM
application delivery
BIG-IP DNS
LTM
management
security

9 Replies

Sort By
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jul 06, 2014

    I follow the steps to upgrade a HA pair and I re-activated the license as recommended in the askF5. But I got this error:

     

    i think re-activating license went well (since service check date is updated). i do not think the error you are getting is result from re-activating license.

     

    what did you get when you load configuration (i.e. tmsh load sys config)?

     

    I issued this commands: /usr/libexec/bigpipe daol but nothig happens.

     

    bigpipe daol is used to convert 10.x to 11.x configuration. it is not the case.

     

    I have called F5 and the operator has told me that the engineers are out.

     

    you can request to speak to an available engineer (new engineer). no need to wait if it is urgent.

     

  • afedden_1985's avatar
    afedden_1985
    Icon for Cirrus rankCirrus
    Jul 06, 2014

    did you reactivate the license before you built the 11.5 volume? if you don't that could be the problem and I have had that same problem. You can boot back into 11.2 using the cli switchboot command from bash. run util bash switchboot a menu will appear and you select the 11.2 volume and boot back into 11.2 reactivate the license, rebuild the 11.5 volume then boot into the 11.5 volume.

     

  • jmanya_44531's avatar
    jmanya_44531
    Icon for Nimbostratus rankNimbostratus
    Jul 06, 2014

    Hello nitass,

     

    Thanks a lot for responding.

     

    Yes, after googling I realized that such command was for v10 to v11 upgrade. I was able to talk with an engineer and we just performed a rollback due to the maintenance window finished. Yes, it could not be a date-related issue, but how to know what is the real cause? What about this message: (expired or digital signature does not match contents). ?

     

    Thanks

     

    Jorge

     

  • nitass_89166's avatar
    nitass_89166
    Icon for Noctilucent rankNoctilucent
    Jul 06, 2014

    but how to know what is the real cause? What about this message: (expired or digital signature does not match contents).?

     

    i think that message is not really useful. normally if restoring ucs fails, running "tmsh load sys config" would give useful error message (although restoring fails, config file is in /config already. so, when loading config, it will show an error if had) and we can start from it i.e. edit config file directly and re-load the config again.

     

    • nitass_89166's avatar
      nitass_89166
      Icon for Noctilucent rankNoctilucent
      Jul 06, 2014
      to be clear, re-activating license is done *before* upgrading (installing) software.
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jul 06, 2014

    but how to know what is the real cause? What about this message: (expired or digital signature does not match contents).?

     

    i think that message is not really useful. normally if restoring ucs fails, running "tmsh load sys config" would give useful error message (although restoring fails, config file is in /config already. so, when loading config, it will show an error if had) and we can start from it i.e. edit config file directly and re-load the config again.

     

    • nitass's avatar
      nitass
      Icon for Employee rankEmployee
      Jul 06, 2014
      to be clear, re-activating license is done *before* upgrading (installing) software.
  • jmanya_44531's avatar
    jmanya_44531
    Icon for Nimbostratus rankNimbostratus
    Jul 08, 2014

    Hello friend,

     

    I must thank you for not leaving me alone :)

     

    I carefully performed the upgrade again in a Standalone BIGIP 4000s box. I applied your suggestions and everything worked, except that the configuration could not be loaded, so I issued the "tmsh load sys config" command and it displayed one error about some pool which did not find a corrsponding node. I modified the bigip.conf by using the vi tool. Finally the configuration was loaded and the standalone BIGIP had the 11.5.1 version.

     

    Sincerely, I am afraid of getting an issue related to a fail in the loading of the configuration when I upgrade the HA system. I think the configuration loading must be smooth.

     

    Moreover, I realized that the virtual servers are not attached to a link after the upgrade. I must tell that I do not have an active link in such data center. Maybe, do you have any comment about? Please, find below the images related:

     

    BEFORE UPGRADE:

     

     

    AFTER UPGRADE:

     

     

    Thanks a lot. Really, you helped me.

     

    Regards

     

    Jorge

     

  • jmanya_44531's avatar
    jmanya_44531
    Icon for Nimbostratus rankNimbostratus
    Jul 27, 2014

    GTM does not respond to DNS queries after upgrade. I have some WideIPs configured and listeners of each ISP. Do I need to perform any change in the configuration?

     

    Thanks

     

    JM