Last Modified: Nov 07, 2022
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3
Fixed In:
14.1.0, 13.1.1.4
Opened: May 15, 2018 Severity: 2-Critical
When upgrading from 13.1 to 14.1, there might be deadlock between mcpd and mcpd. "bigstart status pkcs11d" might return "pkcs11d down, waiting for mcpd to release running semaphore".
External netHSM is not functional or the whole appliance/blade is not functional.
Upgrading from 13.1 to 14.1 for BIG-IP with external netHSM enabled.
Try reinstalling external netHSM.
The fix broke the circular dependency between mcpd's validation and pkcs11d.