It seems we need to include ca-device parameter for adding peer instead of subordinate: Body :: {"command":"run","utilCmdArgs":"modify /cm trust-domain /Common/Root add-device { device deviceIp(slaveDeviceIp) device-name SlaveHostName(e.g.bigip2.myf5.com) username admin password admin1 ca-device}"}