Symptom
Looking through the logs from secondary this error appears (ngfw-onbox.log):
2022-10-03 15:35:14 CDExec-Th-1: ERROR AppConfigPrepare:100 - PREPARE App Config Failure in EXPORT: Please refer policy_deployment.log file for more details;
At the same timestamps, This message on secondary in action_queue.log can be seen:
action_queue.log:Oct 3 15:35:14 firepower policy_apply.pl[31311]: '-stacktrace' => 'could not find /ngfw/var/cisco/deploy/pkg/diskfiles/f6b20e6d-87fa-11eb-8a47-53394806f54d.json, possible rsync problem getting diskfiles at /ngfw/usr/local/sf/lib/perl/5.24.4/SF/NGFW/FTDHAFeatureSupportUtils.pm line 684.
There are around 5 minutes where no logs can be found in both action_queue.log and policy_deployment.log.
Timestamps correspond to the time when we tried to create HA.
The device that goes to failed state is missing the '.json' file in /ngfw/var/cisco/deploy/pkg/diskfiles/
Conditions
FPR2100 and FPR1000 series managed locally by FDM.
Running version 6.4.x, 6.5.x, 6.6.x, 6.7.x
Workaround
Contact TAC for Workaround
Further Problem Description
Please perform upgrade to the latest available patches on 7.x releases.