Bug ID 2141205: Tpm-status returns: "System Integrity: Invalid" for some Engineering Hotfixes

Last Modified: Nov 05, 2025

Affected Product(s):
BIG-IP AFM, APM, ASM, AVR, BIG-IQ, GTM, LTM, SSLO, TMOS(all modules)

Known Affected Versions:
15.1.10.8, 16.1.6.1, 17.1.3, 17.5.1.3, 21.0.0

Opened: Oct 29, 2025

Severity: 1-Blocking

Symptoms

The 'tmsh run sys integrity status-check -a -v' or 'tpm-status' commands incorrectly report system integrity status as 'Invalid' even when the system software has not been modified. Detailed output of the "tpm-status -v 3 -q" command includes the following messages: A SIRR database is invalid. /shared/lib/sirr/v1.0/SIRR validity: 1 /usr/lib/sirr/SIRR validity: 0

Impact

Incorrect presentation of system software status; the status shows INVALID when it is actually valid.

Conditions

This occurs if all of the following conditions are true: -- Engineering Hotfix built on or after October 15, 2025, based on BIG-IP software v17.5.1.3, v17.1.3, v16.1.6.1, v15.1.10.8 or later version. -- Engineering Hotfix installed on TPM-supported BIG-IP platform. -- The Engineering Hotfix contains an updated 'sirr-tmos' package.

Workaround

None.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips