Change crypto master key with ansible not possible?

Question

Hello fellow F5ers,does anyone know a way to change the crypto master key on an LTM with ansible?The TMSH command is:modify sys crypto master-key prompt-for-passwordthe command is interactive and requires the user to repeat the passwort input two times.Is it even possible to do this by using an ansible module?Thanks for any advise--Ichnafi

ichnafi · Accepted Answer

I finally got it to run, but the ansible module documentation is really lacking good examples.

Solution see here: https://community.f5.com/t5/technical-forum/ansible-running-bash-commands-with-bigip-command-module-how-it-s/td-p/311582

ichnafi · Answer

Hi&nbsp;Nikoolayy1&nbsp;,thank you for your hint. I will have a look. I usually try not to use the bigip_command_module or bigip_cli_module, because of&nbsp;idempotency.

nikoolayy1 · Answer

Have you tried making a bash script and using echo or the Linux yes to supply the data to the interactive prompt ?
&nbsp;
https://www.howtogeek.com/415535/how-to-use-the-yes-command-on-linux/
&nbsp;
&nbsp;
You can trigger the script with the ansible command module for F5 and bash -c "&lt;trigger script in Lunux&gt;" from within the TMSH.
&nbsp;
https://docs.ansible.com/ansible/latest/collections/f5networks/f5_modules/bigip_command_module.html

nikoolayy1 · Answer

Also I found an article how to make F5 to not ask you for confirmation 🙂
https://support.f5.com/csp/article/K58523903

leslie_hubertus · Answer

Hey&nbsp;Ichnafi&nbsp;- I'm sharing your feedback around needing better examples with colleagues in F5, who may reach out to you via direct message here on DevCentral for more detail. Thanks for bringing it up.&nbsp;

Forum Discussion

Change crypto master key with ansible not possible?

5 Replies

https://support.f5.com/csp/article/K58523903

Recent Discussions

Failed to convert character dclid=%EDclid!

ASM - Parent policy vs OWASPcompliance

Rewrite uri translation not working

CONNECTION IS LOST DUE TO SELF IP IS DELIVERED

APM OCSP Responder Issues

Related Content

Modify vCMP-Guest with ansible not possible?

Ansible - Bricking freshly installed vcmp guests with ansible

Security Automation with F5 BIG-IP and Event Driven Ansible

Ansible module to update BIG-IP root/admin passwords

Leveraging Ansible Rulebooks for Streamlined Event Triggers: Advantages and Benefits