Bug ID 651953: Thales nethsm install script can configure BIG-IP for softcard/OCS keys

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP DNS, LTM(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0

Opened: Mar 16, 2017

Severity: 4-Minor

Symptoms

The Thales nethsm installation script configures the BIG-IP only for using module protected keys. To use OCS keys or softcards instead (only one protection type can be used at one time), you must manually configure the BIG-IP system after the installation script finishes.

Impact

Must take additional steps after installing the Thales HSM client software.

Conditions

Want to use softcard or OCS protected keys in a BIG-IP configuration.

Workaround

Manually configure the BIG-IP system to use OCS/softcard protected keys after installing the client software with the script.

Fix Information

The Thales nethsm installation script can now configure the BIG-IP system to use OCS or softcard protected keys as part of installation, instead of requiring additional steps after the script completes.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips