Bug ID 689374: Discovery of DSC clustered BIG-IPs fails due to secure value decryption error

Last Modified: Jul 01, 2019

Bug Tracker

Affected Product:  See more info
BIG-IQ Config Mgmt Infrastructure(all modules)

Known Affected Versions:
5.4.0, 5.4.0 HF1, 5.4.0 HF2

Opened: Oct 18, 2017
Severity: 3-Major

Symptoms

After initially pairing a DSC cluster, iControl-REST on BIG-IP can fail to decrypt the secure values due to a stale BIG-IP master key in its cache, and returns the secure values encrypted by the BIG-IP master key. BIG-IQ is unable to decrypt these secure values and fails to discover the BIG-IP.

Impact

Discovery fails due to secure value decryption error.

Conditions

Initially pairing a DSC cluster.

Workaround

Restart iControl-REST server on the BIG-IP. On BIG-IP version 12.0.0 and later, in TMSH, run 'restart sys service restjavad'. In the console, run 'bigstart restart restjavad'. On BIG-IP version 11.x.x, in TMSH, run 'restart sys service icrd'. In the console, run 'bigstart restart icrd'.

Fix Information

None

Behavior Change