For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_FP's avatar
Chris_FP
Icon for Cirrus rankCirrus
May 23, 2014

FIPS card - How to tell if it has been initialised

We have some 8900 LTM's that have a FIPS card installed. Long story short is that we need to re-use these boxes in a non-FIPS mode. The boxes have never been put live but they are installed and on t...
application delivery
deployment
LTM
TMSH
nitass's avatar
nitass
Icon for Employee rankEmployee
May 28, 2014

I would expect that the HSM wouldn't be used unless the key is stored there.

Cory is correct (this is correct).

by the way, fipsutil init will report an error if card is already initialized.

e.g.

 

 tmsh

root@(B6900-R69-S5)(cfg-sync Standalone)(Active)(/Common)(tmos) run util fips-util init
fipsutil error (line 1302): HSM already initialized

 fipsutil

[root@B6900-R69-S5:Active:Standalone] config  fipsutil init
fipsutil error (line 1302): HSM already initialized