F5 tmsh error : The application service () has strict updates enabled, the object () must be updated using an application management interface.

 

F5 tmos/tmsh cheat sheet

These one lines will be really helpful in order to create your automated solution of managing operation activities in F5 devices.

Please note, I have used below one liner on F5 version 13.

You might have received this error while modifying any of the LTM value using tmsh.

Reason for error : Your iApps has strict updates enabled, till the time it's enabled it will not allow to do modify any changes.

For instance, if you want to change the Ciphers used in LTM ssl client profile, within iApps Strict Updates must be in disabled state.

Where Strict Update section is found :

    Go to iApps --> Select your iApp --> Properties --> Advances --> Strict Updates

How can we enable/disable Strict Updates for an individual iApp.

1. From UI as describes above     Go to iApps --> Select your iApp --> Properties --> Advances --> Strict Updates --> Enable/Disable
2. From TMSH Shell:

Syntax

 #  tmsh modify sys app service myexampleiApp.app/myexampleiApp-onlyhttps strict-updates  disabled

Read more ...

F5 tmsh Cheat Sheet

 

F5 tmos/tmsh cheat sheet

These one lines will be really helpful in order to create your automated solution of managing operation activities in F5 devices.

Please note, I have used below one liner on F5 version 13.

How to list all iApps details created under F5 device (LTM/GTM)

A detailed STDOUT will give details for the iApps config.

Syntax

 #  tmsh list  sys app service recursive

How to filter out single iApp details

A detailed STDOUT will give details for the iApps config.

Here replace myexampleiApp.app/myexampleiApp-onlyhttps with your own iApp partition and name.

Syntax

 #  tmsh list sys app service recursive myexampleiApp.app/myexampleiApp-onlyhttps

How to list only a single configuration data for all iApps

Lets assume, we want to check the strict updates status for all iapps.

Syntax

 #  tmsh list  sys app service recursive  strict-updates

How to modify configuration data for an pre configured iApps

Lets assume, we want to change the status from enabled to disabled for strict updates status for one of our iApp named myexampleiApp.app/myexampleiApp-onlyhttps

Syntax

 #  tmsh modify sys app service myexampleiApp.app/myexampleiApp-onlyhttps strict-updates  disabled

How to modify SSL ciphers for a LTM client ssl profile.

Lets assume, we want to check the strict updates status for all iapps.

Syntax

 #  tmsh modify  ltm profile  client-ssl myexampleiApp.app/myexampleiApp-onlyhttps ciphers_ssl 'TLSv1_1:!SSLv2'

Will update this thread more,  keep checking for new updates.

Read more ...