Bug ID 1043141: Misleading 'Symmetric Unit Key decrypt failure - decrypt failure' when loading UCS from another BIG-IP

Last Modified: May 17, 2024

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4,, 15.1.5,, 15.1.6,, 15.1.7, 15.1.8,,, 15.1.9,, 15.1.10,,,, 16.0.0,, 16.0.1,,, 16.1.0, 16.1.1, 16.1.2,,, 16.1.3,,,,,, 16.1.4,,,, 17.0.0,,

Opened: Aug 26, 2021

Severity: 3-Major


Loading a UCS file from another BIG-IP results in an error message similar to: "/usr/bin/tmsh -n -g -a load sys config partitions all platform-migrate" - failed. -- 010713d0:3: Symmetric Unit Key decrypt failure - decrypt failure The error message is misleading as the issue is unrelated to master key decryption.


Platform migration fails with a misleading error message.


-- Loading a UCS archive from a different BIG-IP. -- The UCS archive does not contain a ".unitkey" file. -- The target system does have the correct master key value configured. -- There is some other MCPD validation issue in the configuration.


Once the issue has happened, you can either: - Examine the LTM log file for other error messages from MCPD and then correct the configuration issue(s). OR: - Re-start MCPD.

Fix Information


Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips