Bug ID 682944: key-id missing for installed netHSM key for standby BIG-IP system in high availability (HA) setup

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7

Fixed In:
14.0.0, 13.1.0.8

Opened: Sep 12, 2017

Severity: 3-Major

Symptoms

In a BIG-IP high availability (HA) configuration, the nethsm key installed has empty key-id string for the standby BIG-IP system. That is, the BIG-IP system that actually gets the key installed has the key-id string properly displayed. But its peer BIG-IP system does not display a key-id string associated with the installed key.

Impact

The peer BIG-IP system has no key-id string properly displayed.

Conditions

-- nethsm key installed. -- Standby BIG-IP system in an high availability (HA) configuration.

Workaround

Even though key-id does not display, the key is present on the peer BIG-IP system and can be used there.

Fix Information

The netHSM key for standby BIG-IP system in high availability (HA) configurations now shows up after a successful configsync.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips