Forum Discussion
VFB
Cirrus
Cirruslicense error after upgrading from 11.6.0 HF5 to 13.1.1
I received a license error after upgrading from 11.6.0 HF5 to 13.1.1. The UCS came from an older device and going to a vCMP guest. The error is as follows - "This device is not operational because the loaded configuration contained errors or unlicensed objects. Please adjust the configuration and/or the license, and re-license the device".
Naturally, the license on the new device is up to par, as I activated it not 2 days ago.
RaghavendraSYAltostratus
While restoring UCS from one device to another use below command.
tmsh load /sys ucs no-license
Refer article: https://support.f5.com/csp/article/K13132
VFBI did execute that command during the restore and still got the above error
RaghavendraSY_7Cumulonimbus
While restoring UCS from one device to another use below command.
tmsh load /sys ucs no-license
Refer article: https://support.f5.com/csp/article/K13132
- VFB
I did execute that command during the restore and still got the above error
- RaghavendraSY
Okie. can you verify on new device under resource proivisioning any other modules are enabled other than what is required or vice versa (enabling required module is missing).
- VFB
Verified all my modules are selected on the new device. Checked the license on the new device as well.
- RaghavendraSY_7
Okie. can you verify on new device under resource proivisioning any other modules are enabled other than what is required or vice versa (enabling required module is missing).
- VFB
Verified all my modules are selected on the new device. Checked the license on the new device as well.
- RaghavendraSY
Can you please try below command:
tmsh load sys ucs [ucs file name] no-platform-check
also you can include no-license.
- VFB
Tried that as well. Logs don't show anything
- RaghavendraSY_7
Can you please try below command:
tmsh load sys ucs [ucs file name] no-platform-check
also you can include no-license.
- VFB
Tried that as well. Logs don't show anything
- RaghavendraSY
Can you try below steps on new device.
- touch /service/mcpd/forceload
- reboot
Still not working. I suggest you to open a ticket with F5.
- VFB
I tried that as well. I don't get any errors from doing a forceload. I have a ticket open with F5 but wanted to see if anyone else experienced the same issue. Thanks for trying to help.
- RaghavendraSY_7
Can you try below steps on new device.
- touch /service/mcpd/forceload
- reboot
Still not working. I suggest you to open a ticket with F5.
- VFB
I tried that as well. I don't get any errors from doing a forceload. I have a ticket open with F5 but wanted to see if anyone else experienced the same issue. Thanks for trying to help.
Have you verified that the Master Key is the same on the vCMP guest as the UCS archive being loaded? The BIG-IP uses a Secure Vault feature to encrypt certain configuration objects using what is known as Master Key. The Master Key is a password which you can display on the BIG-IP by using the command:
f5mku -KIf you have access to the old device, run that command to identify the Master Key.
Then on the vCMP guest run the following command to change the Master Key:
f5mku - rAfter you have done that, try and load the UCS archive again.
Please check out this article for more details:
K9420: Installing UCS files containing encrypted passwords or passphrases
I hope this helps! 🙂
- VFB
I worked with F5 to resolve this. There were some APM configs in the UCS that the device didn't like. After removing the profiles, the device came online. Right now I'm working with them to add those configs back to the device. I'll keep all posted in their findings and possible resolution.
- RaghavendraSY
Thanks for an update
