Bug ID 2244413: Client Certificates are cached even when Retain Certificate is disabled on a Clientssl profile

Last Modified: Apr 08, 2026

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1, 17.5.0, 17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4, 17.5.1.5, 21.0.0, 21.0.0.1

Opened: Mar 13, 2026

Severity: 3-Major

Symptoms

Client certificates are cached which can drive up memory usage.

Impact

Memory usage may increase due to caching certificates

Conditions

TLS 1.2 sessions that are resumed with session tickets where the client also presents a certificate to the BIG-IP.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips