201 · Question #209
A 8IG-IP device is replaced with an RMA device. The BIG-IP Administrator renews the license and tries to restore the configuration from a previously generated UCS archive on the RMA device. The…
The correct answer is D. The Master Key is NOT restored. When restoring a UCS archive to an RMA device, if the configuration does not fully load, it is likely due to the master key not being restored.
Question
A 8IG-IP device is replaced with an RMA device. The BIG-IP Administrator renews the license and tries to restore the configuration from a previously generated UCS archive on the RMA device. The device configuration is NOT fully loading. What is causing the configuration load to fail?
Options
- AThe Device Group is NOT configured for Full Sync.
- BThe US does NOT contain the full config
- CThe clock is NOT set correctly
- DThe Master Key is NOT restored
How the community answered
(30 responses)- A3% (1)
- B7% (2)
- C13% (4)
- D77% (23)
Why each option
When restoring a UCS archive to an RMA device, if the configuration does not fully load, it is likely due to the master key not being restored.
Device Group configuration for Full Sync is relevant for synchronizing configurations between multiple BIG-IP devices, not for the initial restoration of a single device's UCS archive.
A standard UCS archive is designed to contain the full configuration, unless specific filters were applied during its creation, which is not indicated here.
An incorrect clock setting might cause issues with SSL certificate validation or log timestamps, but it typically would not prevent the core configuration from loading from a UCS archive.
The Master Key encrypts sensitive configuration data within a UCS archive, such as SSL certificates and passwords. When restoring a UCS archive to a new BIG-IP device, the master key from the original device must be present or restored on the new device to successfully decrypt and load all encrypted components. Without the correct master key, the BIG-IP system cannot decrypt and properly install these secure portions, leading to a partial or failed configuration load.
Concept tested: BIG-IP UCS archive restoration and master key management
Source: https://my.f5.com/manage/s/article/K13132
Topics
Community Discussion
No community discussion yet for this question.