Bug ID 940733: Downgrading a FIPS-enabled BIG-IP system or running big3d_install results in a system halt

Last Modified: Jan 20, 2023

Bug Tracker

Affected Product:  See more info
BIG-IP All, Install/Upgrade(all modules)

Known Affected Versions:
13.1.0,,,,,,,,, 13.1.1,,,,, 13.1.3,,,,,,, 13.1.4,, 13.1.5,, 14.0.0,,,,,, 14.0.1,, 14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,,,,, 14.1.5,,,, 15.0.0, 15.0.1,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4,, 15.1.5,, 15.1.6,, 15.1.7, 15.1.8,, 16.0.0,, 16.0.1,,, 16.1.0, 16.1.1, 16.1.2,,, 16.1.3,,,, 17.0.0,,

Opened: Aug 28, 2020
Severity: 2-Critical
Related Article:


The system fails during the boot-up process, reports a libcrypto validation error, and the system halts. The console will show this error: Power-up self-test failures: OpenSSL: Integrity test failed for libcrypto.so This occurs after one of the following: -- Upgrading a FIPS-enabled BIG-IP system, booting to a volume running an earlier software version -- Running big3d_install from a BIG-IP GTM configuration to a BIG-IP LTM On a FIPS-licensed BIG-IP LTM configuration, when checking the big3d version you may see something similar to this: /shared/bin/big3d -V fips.c:204:f5_get_library_path: failed to dlopen libcrypto.so.1.0.2za ./big3d version big3d Version for linux


System boots to a halted state or big3d may continuously restart.


-- FIPS-licensed BIG-IP system. -- Upgrade. -- Boot into a volume running an earlier version of the software. Another way to encounter the issue is: -- FIPS-licensed BIG-IP LTM. -- BIG-IP DNS (GTM) device running a higher software version than the LTM. -- Run big3d_install from a BIG-IP GTM-configuration pointing to FIPS-licensed BIG-IP LTM configuration.


Before booting to the volume with the earlier version, delete /shared/bin/big3d. Note: This issue might have ramifications for DNS/GTM support. DNS/GTM is not FIPS-certified. If the target software volume has already experienced this issue (the system boots to a halted state), addition to deleting /shared/bin/big3d, follow the instructions in K25205233: BIG-IP System halted while booting. Halt at boot after FIPS Integrity Check Result FAIL :: https://support.f5.com/csp/article/K25205233 . For additional information, see K29290121: Rollback after upgrade or big3d_install may cause FIPS to halt system on boot :: https://support.f5.com/csp/article/K29290121.

Fix Information


Behavior Change