Cold Disaster recovery to F5 different geographical location

Hey Skeenster

Using the UCS archives for this purpose creates a few obstacles as you have pointed out. You also have the Master key used to encrypt passphrases and other confidential data inside the UCS archive. In a ConfigSync cluster, the original master key is transfered over to the other HA device/s.

My first thought, since you really just want the bigip.conf file, is it possible for you to add the DR sites's BIG-IP devices to a Sync-Only group and have the production site sync over the the configuration but not be configured in HA? That way you get an identical configuration, with certificates, user accounts etc. and you have the same master key.

This way you won't have to do any manual step for the Disaster Recovery Site failover.

Here is an example when this is performed for APM Policy Synchronization:

https://devcentral.f5.com/s/articles/syncing-f5-apm-policies-across-cloud-regions-or-datacenters-32904