For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

epaalx's avatar
epaalx
Icon for Cirrus rankCirrus
Jun 12, 2012

Need to re-enter passphrase for encrypted private keys during upgrade?

Hi F5'ers,

 

I have a number of SSL profiles with encrypted passphrases.

 

Does "sol9420: Installing a UCS file containing an encrypted passphrase" (http://support.f5.com/kb/en-us/solutions/public/9000/400/sol9420.html?sr=21844137) apply to upgrades (I'm intending to go 10.2.1 on MD1.3 to 10.2.4 on MD1.1) too, or does the upgrade process some how reuse Master Key from previous MD?

 

Thanks, Alex.

 

basic
getting started
new to f5

2 Replies

  • El_Jefe's avatar
    El_Jefe
    Icon for Nimbostratus rankNimbostratus
    Jun 27, 2012
    Alex -

     

     

    I have seen this issue going from 9.x - 10.x - 11.x on different boxes, but haven't seen it going between minor versions (like 10.2.1 to 10.2.4) on the same box. I'm pretty sure they stay the same. I don't have any encrypted keys on my lab box, so I can't easily test. I would export them all just in case. Since you have multiple volumes, it makes testing somewhat easy. You can also create a new volume, load 10.2.4, and the hotfix, and it should copy the config over from 1.1, if it gives you issues use the cpcfg command to copy the config from MD1.1

     

     

    Hope this helps.
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jun 28, 2012
    i do not think you will get master key issue when upgrading on the same box.