Edit

Software Upgrade

Upload Image File

  • Download Image File (iso) from F5 website. Remember to check md5sum

  • Import image to device: Main > System > Software Management > Image List

    • Image files will be uploaded to /shared/image folder. Use bash shell to check md5sum

bash
cd /shared/image
md5sum $image.iso

Verify configuration integrity

  • (tmos)# load sys config verify

  • (tmos)# load sys config partitions all verify

Check system license date

(tmos)# bash
# cd /config
# grep "Service check" bigip.license

  • The date shown from above command must be later than license date of version to be upgraded from this link: https://support.f5.com/csp/article/K7727

  • If not, have to reactivate license mentioned in the link before upgrading. Otherwise, the system will not load configuration when rebooting. This will cause short outage so do standby device or during maintenance window

Verify device certificate

  • Connecting to GUI to check validity of certificate

  • From Configuration Utility: System > Certificate Management > Device Certificate Management > Device Certificate

    • For version 12.1.2 and earlier: System > Device Certificate > Device Certificate

  • From CLI:

    • cd /config/httpd/conf/ssl.crt

    • openssl x509 -x509toreq -in server.crt -out ../ssl.csr/server.csr -signkey ../ssl.key/server.key

  • Renewing Certificate: Updating a self-signed SSL device certificate on a BIG-IP system (f5.com)

Create a user configuration set (UCS) archive

  • GUI: Main > System > Archive

  • CLI: tmsh save /sys ucs $archivename

    • can specify another folder by specifying /path before $archivename

  • By default, file saved in: /var/local/ucs/

  • Backing up BIG-IP config files with a UCS archive using the command line: https://www.youtube.com/watch?v=sP5Td8PU72k

Verifying Upgrading Path

  • Overview of supported BIG-IP upgrade paths and an upgrade planning reference (f5.com): https://my.f5.com/manage/s/article/K13845

Generate QKView Diagnostics File

  • If seeing error message: "Error generating QKView snapshot.", use CLI command to generate

Reference

  • Overview of BIG-IP system software upgrades (f5.com): https://support.f5.com/csp/article/K84554955

  • AskF5 | Manual: BIG-IP Systems: Upgrading Software: https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-system-upgrading-software-13-0-0.html

  • K55879220: Overview of F5 vulnerabilities (May 2022): https://support.f5.com/csp/article/K55879220

  • K7727: License activation may be required before a software upgrade for BIG-IP: https://support.f5.com/csp/article/K7727

  • K9476: The F5 hardware/software compatibility matrix: https://support.f5.com/csp/article/K9476:

  • Generating diagnostic data using the qkview utility (f5.com): https://support.f5.com/csp/article/K12878

  • A Running Snapshot of BIG-IP: BIG-IP iHealth Diagnostic Tool | F5

  • ConfigSync state shows Disconnected or Changes Pending following BIG-IP Upgrade (f5.com): https://support.f5.com/csp/article/K47938055

  • K40906221: Unable to generate qkview BIG-IP with error "Error generating QKView snapshot.": https://support.f5.com/csp/article/K40906221

  • K10604702: Unable to generate qkview getting Error Generating QKView snapshot and ntlmconnpool restarting: https://support.f5.com/csp/article/K10604702

  • K13946: Troubleshooting ConfigSync and device service clustering issues: https://my.f5.com/manage/s/article/K13946

PreviousPartitionNextSystem Settings

Last updated