F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

JXLIAN_151831's avatar
JXLIAN_151831
Icon for Nimbostratus rankNimbostratus
Jan 12, 2015

Ucs or scf

Does UCS contain essential linux configuration elements like scf?

 

In the event for migrating, which option will be consider more optimal?

 

application delivery
LTM

6 Replies

  • JXLIAN_151831's avatar
    JXLIAN_151831
    Icon for Nimbostratus rankNimbostratus
    Jan 12, 2015

    Thanks Vitaliy Savranskiy, I had read the SOL but i could not find a straightforward answer.

     

    For UCS it contains:

     

    • All BIG-IP-specific configuration files
    • BIG-IP product licenses
    • User accounts and password information
    • Domain Name System (DNS) zone files and the ZoneRunner configuration
    • Secure Socket Layer (SSL) certificates and keys

    For SCF it contains:

     

    • All native BIG-IP system configuration elements
      • bigip.conf
      • bigip_base.conf
      • bigip_user.conf
    • BIG-IP module configuration
      • BIG-IP GTM, ASM, and APM.
    • Essential Linux configuration elements
      • /etc/resolv.conf
      • /config/ssh/sshd_config
      • /config/ntp.conf
      • /etc/localtime
      • /etc/sysconfig/clock
      • /config/bigip/auth/pam.d/system-auth
      • /config/bigip/auth/pam.d/httpd
      • /config/httpd/conf/httpd.conf
      • /config/httpd/conf.d/ssl.conf
      • /var/run/config/httpd.conf.d/mod_auth_pam.conf
      • /etc/logrotate.conf
      • /etc/logrotate_common.conf
      • /etc/syslog-ng/syslog-ng.conf
      • /etc/hosts
      • /etc/sysconfig/network
      • /config/bigip/auth/userroles
      • /etc/hosts.allow
      • /config/snmp/snmpd.conf

    I am still confuse on whether UCS or SCF is more optimal when using it to do migration.

     

  • StephanManthey's avatar
    StephanManthey
    Icon for Nacreous rankNacreous
    Jan 12, 2015

    Hi JXLIAN,

     

    For a migration the .ucs will contain the relevant information. Especially in case you are terminating SSL you probably want to use the private keys and certificates be be imported to TMOS filestore on the target system.

     

    If the target system is a different unit (with a different license) you may want to use the commandline to import the .ucs with the "no-license" option to avoid overwriting the license of the new device.

     

    If you are trying to migrate (new software version) on the same unit make sure to update the license first as it contains a time stamp (service check date).

     

    Thanks, Stephan

     

  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Jan 12, 2015

    Good question. Unable to find a straightforward answer myself, not soon enough anyway, I simply applied the scf file first and then the ucs file with appropriate options in the past. I recall that the ucs did not contain those ssl certificate files, but it certainly does now.

     

  • roadrunner's avatar
    roadrunner
    Icon for Nimbostratus rankNimbostratus
    Nov 05, 2017

    On older versions the UCS did not contain the SSL certificate/keys. The newer version contains all the thing to replicate the original box