Bug ID 720136: Upgrade may fail on mcpd when external netHSM is used

Last Modified: Feb 15, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3

Fixed In:
14.1.0, 13.1.1.4

Opened: May 15, 2018
Severity: 2-Critical

Symptoms

When upgrading from 13.1 to 14.1, there might be deadlock between mcpd and mcpd. "bigstart status pkcs11d" might return "pkcs11d down, waiting for mcpd to release running semaphore".

Impact

External netHSM is not functional or the whole appliance/blade is not functional.

Conditions

Upgrading from 13.1 to 14.1 for BIG-IP with external netHSM enabled.

Workaround

Try reinstalling external netHSM.

Fix Information

The fix broke the circular dependency between mcpd's validation and pkcs11d.

Behavior Change