Bug ID 1388753: FIPS device unable to provision full accelerator cores for FIPS partitions

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3

Opened: Oct 25, 2023

Severity: 2-Critical

Symptoms

The issue is that FIPS systems have been reporting an incorrect number of available accelerator cores. For example, i15820-DF supports a total of 63 accelerator cores, but it is showing maximum 32 while resizing the partition. [root@gwelb01-tic:Active:Standalone] config # fipsutil ptnresize Enter Security Officer password: Enter partition name: PARTITION_1 Enter max keys (1-102235, current 10075): 1 Enter max accel devs (1-32, current 32): 1 ---> Max value should be 63

Impact

Not able to provision the full accelerator dev cores though the platform support.

Conditions

- BIG-IP platform with an onboard FIPS HSM.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips