Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Cypher's avatar
Cypher
Icon for Cirrus rankCirrus
1 year ago

master key file on vcmp guest HA Cluster different?

Hi,

I'm reading into master-unit key workings and how to restore a password-protected UCS on a HA-pair.
The KB articles have been very helpful so far. I have 2 questions which i hope i can get an answer to.

1. When i use f5mku -K the password is the same. but when i look at the master key content located at /config/bigip/kstore/master file, the contents are different. it is hashed by a different salt, or encrypted by the unit key?

2. is the f5mku -K password the same as what you would enter here tmsh modify /sys crypto master-key prompt-for-password 

 

thanks a lot.

1 Reply

  • i can answer my (2) second question: no it is not the same.