Forum Discussion

VFB's avatar
VFB
Icon for Cirrus rankCirrus
Feb 13, 2019

license error after upgrading from 11.6.0 HF5 to 13.1.1

I received a license error after upgrading from 11.6.0 HF5 to 13.1.1. The UCS came from an older device and going to a vCMP guest. The error is as follows - "This device is not operational because the loaded configuration contained errors or unlicensed objects. Please adjust the configuration and/or the license, and re-license the device".

 

Naturally, the license on the new device is up to par, as I activated it not 2 days ago.

 

19 Replies

    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus

      I did execute that command during the restore and still got the above error

       

    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus

      I did execute that command during the restore and still got the above error

       

  • Okie. can you verify on new device under resource proivisioning any other modules are enabled other than what is required or vice versa (enabling required module is missing).

     

    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus

      Verified all my modules are selected on the new device. Checked the license on the new device as well.

       

  • Okie. can you verify on new device under resource proivisioning any other modules are enabled other than what is required or vice versa (enabling required module is missing).

     

    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus

      Verified all my modules are selected on the new device. Checked the license on the new device as well.

       

  • Can you please try below command:

     

    tmsh load sys ucs [ucs file name] no-platform-check

     

    also you can include no-license.

     

    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus

      Tried that as well. Logs don't show anything

       

  • Can you please try below command:

     

    tmsh load sys ucs [ucs file name] no-platform-check

     

    also you can include no-license.

     

    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus

      Tried that as well. Logs don't show anything

       

  • Can you try below steps on new device.

     

    1. touch /service/mcpd/forceload
    2. reboot

    Still not working. I suggest you to open a ticket with F5.

     

    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus

      I tried that as well. I don't get any errors from doing a forceload. I have a ticket open with F5 but wanted to see if anyone else experienced the same issue. Thanks for trying to help.

       

  • Can you try below steps on new device.

     

    1. touch /service/mcpd/forceload
    2. reboot

    Still not working. I suggest you to open a ticket with F5.

     

    • VFB's avatar
      VFB
      Icon for Cirrus rankCirrus

      I tried that as well. I don't get any errors from doing a forceload. I have a ticket open with F5 but wanted to see if anyone else experienced the same issue. Thanks for trying to help.

       

  • Have you verified that the Master Key is the same on the vCMP guest as the UCS archive being loaded? The BIG-IP uses a Secure Vault feature to encrypt certain configuration objects using what is known as Master Key. The Master Key is a password which you can display on the BIG-IP by using the command:

    f5mku -K

    If you have access to the old device, run that command to identify the Master Key.

    Then on the vCMP guest run the following command to change the Master Key:

    f5mku - r 

    After you have done that, try and load the UCS archive again.

    Please check out this article for more details:

    K9420: Installing UCS files containing encrypted passwords or passphrases

    I hope this helps! 🙂

  • I worked with F5 to resolve this. There were some APM configs in the UCS that the device didn't like. After removing the profiles, the device came online. Right now I'm working with them to add those configs back to the device. I'll keep all posted in their findings and possible resolution.