F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Luca_55898's avatar
Luca_55898
Icon for Nimbostratus rankNimbostratus
Sep 26, 2012

gtm_add failing

I have a new GTM that i want to add use with my existing GTM.   I have configured the new GTM with a management IP, and provisioned the GTM section. From the doco I have read I now need to run th...
config
design
psavalam_195881's avatar
psavalam_195881
Icon for Nimbostratus rankNimbostratus
May 05, 2015

This may work, you might have to renew the device certificate and give the name other than the default localonly.localhost cert. Altough the internal root cert is same , this resolved issues with the

 

Sep 26 17:41:18 gtm01 iqmgmt_ssl_connect: SSL error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed Sep 26 17:41:18 gtm01 err gtmd[6206]: 011ae0fa:3: iqmgmt_ssl_connect: SSL error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (3361

 

This must be followed by the "bigip_add " to ensure iquery comm. and also the check if 4353 is responding.

 

Another check is to find the group-names are same on these GTMs

 

David__Pasch_24's avatar
David__Pasch_24
Icon for Nimbostratus rankNimbostratus
Apr 26, 2017

Try installing your SSL cert as a bundle with the full chain to the CA Root Cert.