Forum Discussion

igssv's avatar
igssv
Icon for Cirrus rankCirrus
Oct 04, 2023

UCS Import Errors on BIG-IP VE (12.1.5.2) from i2800 – Need Assistance

Dears, I’m trying to import a UCS file obtained from the existing device (i2800 v12.1.5.2) into the VE version V12.1.5.2, but it’s not going smoothly. The command I execute during import is: load ...
security
Paulius's avatar
Paulius
Icon for MVP rankMVP
Oct 04, 2023

igssv It looks like you did not migrate the master key from the old F5 to the new F5. This can be done easily if you have access to both devices. The following document has the steps which can be found if you search for "f5mku -K" when the page loads.

https://my.f5.com/manage/s/article/K9420

  • igssv's avatar
    igssv
    Icon for Cirrus rankCirrus
    Oct 04, 2023

    Thank you for your quick response! Since the old F5 is still in operation and we want to avoid elevating security risks for our clients, we would prefer not to migrate the master key. Is there a way to review the configurations without migrating the master key?

    • Paulius's avatar
      Paulius
      Icon for MVP rankMVP
      Oct 04, 2023

      igssv Migrating the master key will not cause any disruption on your existing F5. All you are doing for this is you are retreiving the master key value from the old F5s and then taking that key and configuring it on the new F5s. After that you should be able to import the configuration on the new F5s.

      • igssv's avatar
        igssv
        Icon for Cirrus rankCirrus
        Oct 05, 2023

        Thank you once again for your prompt response. So, retrieving the master key itself won't have any impact on the operations. I'll discuss with our client about obtaining it. Thank you.