Forum Discussion

ross_02_143242's avatar
ross_02_143242
Icon for Nimbostratus rankNimbostratus
Jul 03, 2015

F5 Viprion Vcmp LTM instance device trust certificate expired

Hi, Wonder if anyone can shed any light on an issue I have, I noticed after adding some new config to a F5 viprion Vcmp LTM instance that it went out of sync, It is 1 of a pair of F5 VCMP instances configured for HA/Autosync etc, It was in sync before I added the new config, After having a look around I have noticed that the device trust Cert (dtca.crt) has expired, For some reason it appears that it only had a lifespan of 1 year, Is there anyway of renewing the cert ? Obviously this isn't a standard CA signed cert and I can't just click renew as you can with an external cert, Anyone got any ideas ? Or I am going to have to reset the device trust and then go through the process of renewing it.

 

Regards

 

Ross

 

application delivery
deployment
LTM
security

1 Reply

  • Greg_Robinson_1's avatar
    Greg_Robinson_1
    Icon for Cirrus rankCirrus
    Jul 23, 2015

    You're going to need to reset the device trust. Generate a new certificate on the device with the default 20 year expiry then add the peers back into the Root trust-domain before adding them back into the CM device group.