Last Modified: Jun 11, 2026
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1, 17.1.3.2
Opened: May 05, 2026 Severity: 3-Major
An n3fipsutil -exportKeyCheck command fails on BIG-IP 17.1.1.2 when the N3FIPS partition contains more than about 1100 private keys. The command logs into the HSM successfully, but fails during key discovery with 0xb7 (HSM Error: Response buffer size is small, allocate more) and prints Unable to find keys, retry instead of reporting whether export is enabled or disabled.
Cannot reliably use n3fipsutil -exportKeyCheck on large N3FIPS partitions. This blocks validation of key export policy during operational checks and migration / backup-restore workflows when the partition contains a large number of private keys.
-- HSM is initialized and reachable -- Target partition contains more than approximately 1100 private keys
None
None