Bug ID 1066285: Master Key decrypt failure - decrypt failure.

Last Modified: Feb 07, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
15.1.5

Fixed In:
17.0.0, 16.1.2.2, 15.1.5.1, 14.1.4.6, 13.1.5

Opened: Dec 07, 2021

Severity: 3-Major

Symptoms

After MCPD restarts or the system reboots: -- the system is inoperative and MCPD may be restarting -- the logs report this error: err mcpd[12444]: 01071769:3: Decryption of the field (value) for object (config.auditing.forward.sharedsecret) failed while loading configuration that is encrypted with a different master key. -- the system may be reporting this error: load_config_files[5635]: "/usr/bin/tmsh -n -g -a load sys config partitions all " - failed. -- Error: failed to reset strict operations; disconnecting from mcpd. Will reconnect on next command. This may occur during a system upgrade.

Impact

MCPD will continuously restart, and the system will remain inoperative.

Conditions

When config.auditing.forward.sharedsecret is encrypted and masterkey value is changed.

Workaround

If a system is affected by this issue, set the DB key back to its default value. Once the configuration is loaded, set the DB key back to the correct value: - tmsh modify /sys db config.auditing.forward.sharedsecret value '<null>' After changing the SecureValue master key but before encountering the issue, run the following command to update the value of the DB key on-disk: setdb config.auditing.forward.sharedsecret "$(getdb config.auditing.forward.sharedsecret)"

Fix Information

N/A

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips