sys crypto master-key
sys crypto master-key(1) BIG-IP TMSH Manual sys crypto master-key(1)
NAME
master-key - Displays the configuration of the master key for the
BIG-IP(r) system.
MODULE
sys crypto
SYNTAX
Display the configuration of the master-key component within the sys
crypto module using the syntax in the following section.
DISPLAY
show master-key
options:
field-fmt
MODIFY
modify master-key
options:
prompt-for-password
RUN
run master-key diagnostic
DESCRIPTION
You can use the master-key command to manipulate the system master key.
Users with the Administrator role or the Certificate Manager role can
set the key to a value of their choosing by using the
'prompt-for-password' option during a modify operation. All other
roles, including Resource Administrators, are prohibited from setting
the master key.
Use the 'diagnostic' option of the run command to test the key
integrity.
EXAMPLES
show master-key
Displays, in a table, information about the system's master key.
show master-key field-fmt
Displays, in field format, information about the system's master key.
run master-key diagnostic
Loads the device key. Uses the device key to decrypt the master key
file to test the integrity of the keys. On success, there is no output.
There will be a response only if there is an error.
modify master-key prompt-for-password
Create a master-key based on a word or phrase of your choosing. You can
use this to manually synchronize several devices without having to copy
keys between them.
OPTIONS
For information about the options that you can use with the command
show, see help show.
SEE ALSO
show, tmsh
COPYRIGHT
No part of this program may be reproduced or transmitted in any form or
by any means, electronic or mechanical, including photocopying,
recording, or information storage and retrieval systems, for any
purpose other than the purchaser's personal use, without the express
written permission of F5 Networks, Inc.
F5 Networks and BIG-IP (c) Copyright 2009-2013, 2016. All rights
reserved.
BIG-IP 2016-03-14 sys crypto master-key(1)