Last Modified: Apr 06, 2026
Affected Product(s):
BIG-IP AFM, APM, ASM, AVR, BIG-IQ, GTM, LTM, SSLO, TMOS
Known Affected Versions:
21.0.0.1, 21.0.0, 17.5.1.4, 17.1.3.1
Opened: Oct 29, 2025 Severity: 1-Blocking
The 'tmsh run sys integrity status-check -a -v' or 'tpm-status' commands incorrectly report system integrity status as 'Invalid' even when the system software has not been modified. Detailed output of the "tpm-status -v 3 -q" command includes the following messages: A SIRR database is invalid. /shared/lib/sirr/v1.0/SIRR validity: 1 /usr/lib/sirr/SIRR validity: 0
The integrity of the system boot components validated by the Trusted Platform Module (TPM) may not be correctly reported. The system integrity status shows Invalid, when the actual status may be Valid.
This occurs if all of the following conditions are true: -- You are using one of the following BIG-IP software versions: -- v17.5.1.4 or v17.1.3.1, or later v17.x releases. -- Engineering Hotfixes built on or after October 15, 2025, based on BIG-IP software v17.5.1.3, v17.1.3, v16.1.6.1, v15.1.10.8 or later version, which contains an updated 'sirr-tmos' package in the Engineering Hotfix ISO. -- You have installed one of the above software releases on one of the following TPM-supported BIG-IP platforms: -- iSeries appliances -- VIPRION B44xx blades (B4450, B4460)
None.
None