Bug ID 880013: Config load fails after changing the BIG-IP Master key which has an encrypted key in it's configuration

Last Modified: Jul 02, 2020

Bug Tracker

Affected Product:  See more info
BIG-IP TMOS(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3

Opened: Feb 11, 2020
Severity: 3-Major

Symptoms

Config load fails with an error: 01071769:3: Decryption of the field (privatekey) for object (12004) failed. Unexpected Error: Loading configuration process failed.

Impact

"tmsh load sys config" fails.

Conditions

-- BIG-IP configuration has a secured attribute, for example an encrypted dynad key -- The master key password is changed -- The configuration is loaded before saving the changes

Workaround

After modifying the master key password, save the configuration and then perform the tmsh load sys configuration.

Fix Information

None

Behavior Change