For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Cypher's avatar
Cypher
Icon for Cirrus rankCirrus
Apr 25, 2025

master key file on vcmp guest HA Cluster different?

Hi,

I'm reading into master-unit key workings and how to restore a password-protected UCS on a HA-pair.
The KB articles have been very helpful so far. I have 2 questions which i hope i can get an answer to.

1. When i use f5mku -K the password is the same. but when i look at the master key content located at /config/bigip/kstore/master file, the contents are different. it is hashed by a different salt, or encrypted by the unit key?

2. is the f5mku -K password the same as what you would enter here tmsh modify /sys crypto master-key prompt-for-password 

 

thanks a lot.

1 Reply

  • i can answer my (2) second question: no it is not the same.