We are setting up the data collection device in our environment and unable to add the DCD to BIGIQ
Error: Discovery of BIG-IQ Data Collection Device 192.168.45.230 failed with state POST_FAILED and due to error Master Keys differ between this BIG-IQ and the one you are attempting to discover. Please configure both machines to have the same Master Key.
Verified/updated the Master key BIGIQ and DCD couple of times, but no luck.
Command used for changing the Master Key:
modify /sys crypto master-key prompt-for-password
the command you have used for resetting the master key is the encrypted key to encrypt and decrypt passphrases in bigip.conf see Working with MasterKeys so i'm not sure that will sort your issue.
For Big-iq the master key is generated when you enter in the passphrase and the only way to change this is to reset the device i.e. which would mean a rebuild. Are the passphrases the same/correct on all the devices? See the following for help: Licensing and Initial Setup
Hope this helps,
Thanks for the help. I was able to add the DCD to BIGIQ after resetting the master key.
On the DCD that you want to add, they should issue the following command 'clear-rest-storage -d -l' After that command succeeds, you should go through the BIG-IQ GUI again. Step 5 of the setup is setting the master-key. Once you have completed this step and set the master-key to the same value as the big-iq, then you should be able to join the DCD to the BIG-IQ.
Thanks for the help.. It worked and successfully added the DCD to BIGIQ after setting up the master key.
Added all our BIGIP LTM"s to BIGIQ, but stil have issues monitoring the statistics. I'm trying to collect the statictics through snmp and added the community strings to the F5's and not sure what config is missing.
Error on the host Tab:
Stats have not yet been collected for this device.
Error on Statistics Collection Tab:
Statistics Collection Agent Version: Not available --- Last collected: Not available
In BIG-IQ, the term "master key" is very confusing since this is not the same master key used thru the tmsh cli. I wish PD would have picked a better term.