Bug ID 760408: System Integrity Status: Invalid after BIOS update

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP Install/Upgrade(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5

Fixed In:
15.0.0, 14.1.0.6, 14.0.0.5, 13.1.3

Opened: Mar 04, 2019
Severity: 2-Critical
Related AskF5 Article:
K23438711

Symptoms

When BIG-IP system boots, it performs a System Integrity Check. The System Integrity Status may return one of three states: Valid, Unavailable, or Invalid. This issue causes the System Integrity Status to return a value of 'Invalid'.

Impact

The System Integrity Status returns a status of Invalid, which may falsely indicate that the system BIOS or OS has been compromised.

Conditions

-- One of the following BIG-IP platforms, which has a Trusted Platform Module (TPM), that were manufactured using a earlier BIOS version: - i850, i2600, i2800, i4600, i4800 - i5600, i5800, i7600, i7800, i10600, i10800 - i12600, i12800, i15600, i15800 - B4400 series blades -- Updating to a newer BIOS version.

Workaround

Install the new BIOS, which fixes the issue that causes the 'Invalid' status to be reported, and, on systems where the BIOS and OS have not been compromised, returns a status of 'Valid'.

Fix Information

The System Integrity Status check now return 'Valid' for systems that have not been compromised.

Behavior Change