profiles from profile_base.conf - how to remove from bigip.conf

Over the years some default profiles like serverssl and fastL4 have been altered. This causes a "newer" version of the serverssl or fastL4 profiles to be in the bigip.conf file. However, after a few upgrades the default option parameters have changed, so after each TMOS update, we have to double-check all the parameter options in the profiles that should only be in profile_base.conf, but are now in our bigip.conf files .... I tried to remove the profiles from the bigip.conf and re-load, but get a sync error ... is there any way to get around this ? (can't remove in CLI or GUI)

 

It seems there are profiles which are parented by the serverssl profile in the bigip.conf instead of the profile_base.conf.

 

tmsh show /cm sync-status

 

CM::Sync Status

Color red Status Sync Failed Summary A validation error occurred while syncing to a remote device Details /Common/device.company.com: connected (for 10141560 seconds) /Common/device-group-failover-b4c9e3 (Sync Failed): A validation error occurred while syncing to a remote device - Sync error on /Common/device.company.com: Load failed from /Common/device.company.com 01020036:3: The requested parent profile (/Common/serverssl) was not found. - Recommended action: Review the error message and determine corrective action on the device

 

[zkdla44@hewqbt1gwmlb01b:Active:Sync Failed] ~