DSC and trust creation

is sol13946 useful?

When the local BIG-IP device attempts to join a device trust with a remote BIG-IP device, the following applies:
   ◦If the local BIG-IP device is added as a peer authority device, the remote BIG-IP device presents a certificate signing request (CSR) to the local device, which then signs the CSR and returns the certificate along with its CA certificate and key.
   ◦If the local BIG-IP device is added as a subordinate (non-authority) device, the remote BIG-IP device presents a CSR to the local device, which then signs the CSR and returns the certificate. The CA certificate and key are not presented to the remote BIG-IP device. The subordinate device is unable to request other devices to join the device trust.

sol13946: Troubleshooting ConfigSync and device service clustering issues (11.x)