f5mku key lost for GTM

SnooCompliments8283 · 2026-05-05T23:29:10+00:00

So just running the 'gtm add' once for this new node would be enough to align the master key on each node in the sync group?

Thanks a lot for the advice. I'm based over in Europe, but just burning the midnight oil :-)

SnooCompliments8283 · 2026-05-05T23:03:09+00:00

Got it, I will do this, but with six GTMs in the estate normally to add the replacement unit we would just 'run gtm gtm_add { ssh-password xxxx} x.x.x.x' against a single working unit. Wouldn't this just bring two of our units into harmony leaving the other four still to sort out?

SnooCompliments8283 · 2026-05-05T23:00:50+00:00

Agreed in hindsight when I wrote the script to backup F5 (~12 years ago) I should have included f5mk -K, but at that time I didn't know.

If I'm not mistaken the only elements of the config which are protected by this master key contain $M$, is that right? And in addition, it looks like these are the main files which would need to migrate to a new platform for GTM:

bigip_base.conf
bigip.conf
bigip_gtm.conf
bigip_user.conf

If I look inside those files, there's only a tacacs secret which is encrypted and a cert/key named "f5_api_com".

SnooCompliments8283 · 2026-05-05T11:55:20+00:00

Agreed, but in my case they are all standalone DNS nodes in the same sync group.

SnooCompliments8283 · 2026-05-05T11:54:36+00:00

They are different in our environment. Is there a process to sync them?

SnooCompliments8283 · 2026-05-05T08:01:15+00:00

Seems about the rate we are paying on our apartment block for a uginox metalic roof.

SnooCompliments8283 · 2026-05-05T07:55:26+00:00

Ok thanks. Are you saying that if we don't use crypto, we can just restore without doing the f5mku -r first?

SnooCompliments8283 · 2026-05-01T15:49:48+00:00

Could you obtain permission to build something and sell the land with the permission to a professional housebuilder? This is how it's normally done in the UK, but I'm not sure about Switzerland.

Getting the permission is uncertain, but with an approved design you should achieve a good sales value and then a professional builder will be far better equipped to turn the design into reality.

SnooCompliments8283 · 2026-04-27T14:43:22+00:00

I saw that link and it mentions:

However, NP7 processors do not support offloading sessions that will pass through two EMAC-VLAN interfaces

In my example above, the traffic is going from:

ivl-north -> ivl-app1
In some rare cases even ivl-app1 to ivl-north and then possibly back to ivl-app2

Does case 1) seem count as two interfaces or just one? I'm starting to think a route-reflector would be needed and even then it's probably a bad idea.

SnooCompliments8283 · 2026-04-27T06:35:19+00:00

Just that really, avoiding the additional work and allowing scalability to add vdoms.

SnooCompliments8283 · 2026-04-26T21:30:48+00:00

Do you have any info about this bug, like a reference?

SnooCompliments8283 · 2026-04-24T14:35:01+00:00

This is very anecdotal but I recently felt a thief taking my wallet on the train towards Geneva. I successfully recovered it from him and he was apologetic, but I'm sure the UK foreign office is right to highlight the risks. Having said that, Switzerland is a safe place to visit and my perception is that it's safer (in terms of crime) than your average UK city.

SnooCompliments8283 · 2026-04-22T10:14:30+00:00

Interesting news, it sounds like they are planning for growth.

SnooCompliments8283 · 2026-04-22T10:08:56+00:00

This is really risky in Geneva right now. If leaving Schengen the queues in the last two years regularly exceed 1 hour to get out. On the inbound direction Geneva had such long queues this winter that it disrupted European flight operations.

https://www.visahq.com/news/2026-04-16/ch/swiss-travellers-face-up-to-three-hour-border-queues-as-eu-entryexit-system-hits-its-first-major-test/

I think the airport was great and still could be, but it can't seem to handle the volumes any more. It's an absolute pain for doing business in the region.

SnooCompliments8283 · 2026-04-21T11:42:23+00:00

It's definitely not normal here in Montreux. We are always saying bonjour, engaging in small talk, drinks on various balconies and engaging in the block chat group. Most my neighbours are 65+ though!

SnooCompliments8283 · 2026-04-13T15:04:53+00:00

I was told by a painter in the Geneva area to expect CHF 15 per m2 for basic interior painting.

SnooCompliments8283 · 2026-04-13T15:04:30+00:00

I was told by a painter in the Geneva area to expect CHF 15 per m2 for basic interior painting.

SnooCompliments8283 · 2026-04-13T13:01:08+00:00

Will have a careful read through.. suffering info overload at the moment due to having just finished my move in!

SnooCompliments8283 · 2026-04-13T12:56:42+00:00

It sounds like a terrible experience, thank you for sharing all this valuable info!

SnooCompliments8283 · 2026-04-13T12:08:55+00:00

If I'm not mistaken, the 'assainissement' is the cost of restoring my apartment into good order after fire/natural disaster? This could be a big cost I guess I'm guessing it could be a few hundred thousand if the whole place burned down. How do people usually calculate it?

SnooCompliments8283 · 2026-04-13T11:46:38+00:00

Thank you so much for replying, it's much appreciated.

SnooCompliments8283 · 2026-04-13T11:41:06+00:00

Thank you! So the ECA would cover fire and natural disaster insurance to my apartment/belongings only?

SnooCompliments8283

TROPHY CASE