Last Modified: Nov 07, 2022
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6
Opened: Sep 08, 2016 Severity: 3-Major
The first boot of a vcmp guest took 50 minutes to generate ephemeral keys rather than the normal 10 seconds. The key generation occurs at boot up before ssh access exists. Once the key generation completes the guest continues with normal boot. The /var/log/boot.log records the duration of the key generation time as below. Sep 19 12:36:33 localhost info plymouthd: Entropy generation started successfulll y. Sep 19 12:36:33 localhost info plymouthd: Generating /var/dnscached/config/rndc.. key ( 12:35:35 ) ... Sep 19 12:36:33 localhost info plymouthd: Done ( 12:35:35 ) Sep 19 12:36:33 localhost info plymouthd: Generating ephemeral 1024 keys. ( 12:33 5:35 ) ... Sep 19 12:36:33 localhost info plymouthd: Done ( 12:35:46 ) Sep 19 12:36:33 localhost info plymouthd: Generating ephemeral keys. ( 12:35:46 ) ... Sep 19 12:36:33 localhost info plymouthd: Done ( 12:35:49 )
Delay on the first boot of guest after vdisk creation.
Rare. Seen a few times out of hundreds of thousands of bootups.
None.
None
