Bug ID 760408: System Integrity Status: Invalid after BIOS update

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP Install/Upgrade(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5

Fixed In:
15.0.0, 14.1.0.6, 14.0.0.5, 13.1.3

Opened: Mar 04, 2019

Severity: 2-Critical

Related Article: K23438711

Symptoms

When BIG-IP system boots, it performs a System Integrity Check. The System Integrity Status may return one of three states: Valid, Unavailable, or Invalid. This issue causes the System Integrity Status to return a value of 'Invalid'.

Impact

The System Integrity Status returns a status of Invalid, which may falsely indicate that the system BIOS or OS has been compromised.

Conditions

-- One of the following BIG-IP platforms, which has a Trusted Platform Module (TPM), that were manufactured using a earlier BIOS version: - i850, i2600, i2800, i4600, i4800 - i5600, i5800, i7600, i7800, i10600, i10800 - i12600, i12800, i15600, i15800 - B4400 series blades -- Updating to a newer BIOS version.

Workaround

Install the new BIOS, which fixes the issue that causes the 'Invalid' status to be reported, and, on systems where the BIOS and OS have not been compromised, returns a status of 'Valid'.

Fix Information

The System Integrity Status check now return 'Valid' for systems that have not been compromised.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips