For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ed_Summers's avatar
Ed_Summers
Icon for Nimbostratus rankNimbostratus
Mar 07, 2017

Clearing 'FailsafeFault' due to crypto failsafe action

Is it possible to clear a FailsafeFault condition caused by the crypto failsafe by action other than rebooting the unit? I wasn't sure if restarting all services would clear this condition, and even ...
application delivery
BIG-IP
LTM
RobertBorowski_'s avatar
RobertBorowski_
Icon for Nimbostratus rankNimbostratus
May 10, 2017

I had the same problem and after some digging I found the following KB article.

 

https://support.f5.com/csp/article/K16951

 

I tried this fix and it works like a charm (no reboot required).

 

tmsh modify sys db crypto.ha value disable

 

  • Ed_Summers's avatar
    Ed_Summers
    Icon for Nimbostratus rankNimbostratus
    May 12, 2017

    Interesting. I wonder if modifying these DB keys also updates the HA action as listed in 'show sys ha-status'.

     

    It appears this key only changes the action taken when a crypto system failure is detected. So if no action is taken, no restart or reboot would be required. Without knowing more about the crypto system (and there is little documentation available, apparently even for support engineers) I'd be hesitant to set 'no action' if the system detects a crypto hardware failure on a production system.

     

    Thanks for the article reference!

     

  • chad_14652's avatar
    chad_14652
    Icon for Nimbostratus rankNimbostratus
    Feb 02, 2018

    Agree with Ed, this seems to be an unadvised action. Kind of like unplugging the check engine light rather than fixing the problem.