Reference: Application migration status

Application service and virtual server statuses indicate whether an application service is ready for deployment, or require modifications to unsupported objects. Unsupported objects are either remove, replaced, or must be saved as a draft for manual editing.

For more information about saving migrated application services as a draft for later edit, see Troubleshooting: Cannot select an instance during the Pre Deploy stage.

Statuses

image Ready for migration

This status indicates that all objects are supported. No automatic changes will be made to the virtual servers during the migration process.

This status does not indicate that the application service is ready to deploy. You might need to save the application service to make manual changes.

image Unsupported objects

This status indicates required removal or replacement of virtual server objects that are not supported by BIG-IP Next.

If an application with this status is selected for migration, unsupported objects are removed.

image Unsupported security objects

This status indicates required changes to a virtual server’s secure objects of embedded certificates and keys, and other secure default objects.

Application services with this status can only be saved as a draft. You can only deploy to a BIG-IP Next instance after you edit the application service:

  • Unsupported Certificates and Keys - SSL certificate and key pairs that are unsupported will show this status. This version of BIG-IP Next supports cipher suites that use these algorithms:

    • RSA (2048/3072/4096)

    • ECDSA (prime256v1/secp384r1)

    Any other application services with unsupported certificates and keys (e.g. DSA) are saved as draft and the certificate(s) are removed and replaced with placeholder text. Add a supported certificate to deploy the application service.

    Note: Mutual Transport Layer Security (mTLS) is not supported during the migration. A certificate and key pair from a Server SSL profile with this service can be imported, but won’t be attached to the application service.

  • Multiple SSL profiles on a single virtual server - If multiple SSL profiles of the same type ( for example, multiple client SSL OR server SSL profiles) are attached to one virtual server, the application service and its affected virtual server will be marked with this status and duplicate profiles are removed and replaced with placeholder text.

    Select one SSL profile (of the same type) per virtual server to deploy the application service.

  • Mutiple security policies converted succesfully - If multiple WAF or Access policies are converted, security policies of the same type are removed and replaced with placeholder text.

    Select one security policy (of the same type) per virtual server to deploy the application service.

  • Application service with one security policy of the same type not converted successfully - If one WAF or Access policy was not converted, security policies of the same type (regardless of conversion status) are removed and replaced with placeholder text.

    Select one valid security policy (of the same type) per virtual server to deploy the application service.

image Unsupported migration

This status indicates that one or more virtual servers are not supported by BIG-IP Next, or the UCS conversion process failed. You cannot select an application service with this status for application migration to BIG-IP Next.

If an application service has this status due to a virtual server, you can move the virtual server to an application service you do not want to migrate in that migration session.