Bug ID 832801: BIG-IP with FIPS and BIG-IQ analytics iApp may become inaccessible

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IQ AppIQ(all modules)

Fixed In:
7.1.0

Opened: Oct 02, 2019

Severity: 2-Critical

Symptoms

BIG-IP with FIPS and BIG-IQ analytics iApp installed causes FIPS to fail the integrity check and cause the system to halt at reboot and become inaccessible. ltm log will show: crit root: BIG-IP Integrity Check: [ FAIL ] -- Contact F5 Networks technical support. The BIG-IP script /usr/libexec/sys-eicheck.py (Integrity Test) will fail due to at least one "critical file(s) missing", namely /etc/avr/tmstat_tables.xml

Impact

The system is halted or otherwise unusable.

Conditions

- FIPS system - Discover BIG-IP using BIG-IQ device and enable statistics. - The BIG-IQ analytics iApp will install on BIG-IP.

Workaround

Change permissions on file: # chmod -x /etc/avr/tmstat_tables.xml Confirm executable flag set on file: # ls -la /etc/avr/tmstat_tables.xml # /usr/libexec/sys-eicheck.py

Fix Information

The iApp sets correct permissions on tmstat_tables.xml.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips