For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_Everest_1's avatar
Chris_Everest_1
Icon for Nimbostratus rankNimbostratus
Dec 11, 2014

Synchronize device_trust_group

I've recently performed an upgrade of an active/standby LTM device group. I moved from 11.2 to 11.4 in order to test the upgrade path for the new version. Upon upgrade of 11.4 of the standby and r...
Chris_Everest_1's avatar
Chris_Everest_1
Icon for Nimbostratus rankNimbostratus
Dec 11, 2014

Yesterday, I did notice a difference in time when attempting to rejoin the devices. NTP settings were all correct and funtioning, so I forced a time sync with 

ntpdate -s
on both devices. Afterwards and again just now I also reset the device trust as follows:

  • Reset Device Trust, using 'Generate new self-signed authority' on both devices
  • Add peer to each device.

And now I get a new error on config sync, which looks to be more problematic:

Decryption of the field (bind_pw) for object (system-auth) failed

Upon checking the master key with 

f5mku -K
the keys are different. Furthermore, if I try to sync them manually, by resetting I get this error:

f5mku -r 
Rekeying Master Key...
Error trying to rekey: 01071029:5: master_decrypt failed during rekey