Bug ID 720136: Upgrade may fail on mcpd when external netHSM is used

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.1, 13.1.1.2, 13.1.1.3

Fixed In:
14.1.0, 13.1.1.4

Opened: May 15, 2018

Severity: 2-Critical

Symptoms

When upgrading from 13.1 to 14.1, there might be deadlock between mcpd and mcpd. "bigstart status pkcs11d" might return "pkcs11d down, waiting for mcpd to release running semaphore".

Impact

External netHSM is not functional or the whole appliance/blade is not functional.

Conditions

Upgrading from 13.1 to 14.1 for BIG-IP with external netHSM enabled.

Workaround

Try reinstalling external netHSM.

Fix Information

The fix broke the circular dependency between mcpd's validation and pkcs11d.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips