For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nvitiritti_1955's avatar
nvitiritti_1955
Icon for Nimbostratus rankNimbostratus
Dec 02, 2015

Error reading key PEM file: bad password read

After upgrading to 11.6 HF5 on our LTM I'm no longer able to ciphers on my client side SSL profiles. When I try to do this I receive error:   01070313:3: Error reading key PEM file /config/filesto...
LTM
security
StephanManthey's avatar
StephanManthey
Icon for Nacreous rankNacreous
Dec 03, 2015

If your private key is protected by passphrase you can try to restore the master key as recommended by Pete.

But you can enter a cleartext passphrase into your /config/bigip.conf in the context of the affected client-ssl profile as well to replace the current encyrpted passphrase proteced by the master key (the one with $M$ prefix).

Now reload the configuration by entering: 
tmsh load sys config

If it loads properly you can save it afterwards: 

tmsh save sys config