World of EUC

Heard of issues with ssl profiles or cipher. Perhaps you have to adjust your ssl cipher Settings 

Just to be clear, I'm not the one with the original issue. Just saw the issue as I was about to start the upgrade and aborted.

But I agree that it sounds like an ssl or cipher issue. Just need to be prepared for issues before I begin the upgrade I guess.  Probably see about getting an HA test setup before moving forward.

Appreciate the response.

Ok. Understood. 
I recommend everyone to have staging environment to test updates before pushing into production environment. Especially on feature phase

Also take note that recent versions will enable secure RPC automatically on reboot. If you have firewalls or other controls between NSIPs then that could definitely cause an issue.

```    After you upgrade the Citrix ADC appliance to release 13.0 build 64.x, the Secure option for all the RPC nodes is turned ON by default. This option secures the communication between the ADC nodes in the high availability, cluster, and GSLB deployments, which use the port number 3008. If the firewall between the ADC nodes blocks the port number 3008, unblock it and proceed. Otherwise, configuration synchronization and configuration propagation might fail. You can change this option anytime using the CLI or the GUI.
    [ NSCONFIG-2702 ]```

if you're not using secure RPC already I'd suggest configuring that first, making sure HA is healthy, then doing the upgrade.

I am using secure RPC already and also on release 13.0.71.40, so past the release that I would likely have had the issue initially. But that's great information and much appreciated.

I had to enable tls 1.2 on those internal services.

I've only got the one lab VPX that I upgraded to 13.0 76.29 so didn't have HA issues. What I did have was my LDAP auth servers bind account now having it's password rejected. Rolled back the firmware and issue went away.