cancel
Showing results for 
Search instead for 
Did you mean: 

backup encryption key

Mario_Franco
Nimbostratus
Nimbostratus

Dear community,

I have some questions around the backup encryption key:

- What is the AES operation mode (e.g. CBC, GCM, CTR, etc.)?
- what is the key hierarchy. I assume that eventually, the Unit Key will protect all other keys, but do we then only have the master key protecting the SSL private keys or are there more levels?
- How is the master key being shared between F5 units?
- How is the unit key being stored and encrypted?

2 REPLIES 2

Hello @Mario_Franco,

UCS encryption is based on GnuPG (https://support.f5.com/csp/article/K5437) which uses by default AES-128+CFB (https://www.rfc-editor.org/rfc/rfc4880#section-13.9)

 

Regards,
Dario.