Symptom

Running N7K FIPS mode enable on HSK2 version 7.3.1.D1.1 and then cold boot to 8.0.1.S2, the FIPS configuration get lost after the cold boot. Do the same test from 6.2.12 to 7.3.1.D1.1 and FIPS is OK without config lost. Workaround: FIPS boot up OK on 8.0.1.S2 after re-apply the config. N7K-9-48-2043-11# show fips status FIPS Status: enabled Switch Mode: FIPS ---------------------- LC STATUS ---------------------- 3 SUCCESS 4 SUCCESS 6 SUCCESS 7 SUCCESS 8 SUCCESS 9 SUCCESS N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: slot0:///n7000-s2-kickstart.7.3.1.D1.1.bin : S19 System image file: slot0:///n7000-s2-dk9.7.3.1.D1.1.bin : S19 N7K-9-48-2043-11(config)# show boot Current Boot Variables: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set Boot Variables on next reload: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set N7K-9-48-2043-11(config)# reload This command will reboot the system. (y/n)? [n] y N7K-9-48-2043-11# show fips status FIPS Status: disabled Switch Mode: NON FIPS N7K-9-48-2043-11# N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: bootflash:///n7000-s2-kickstart.8.0.1.bin.S2 : S2 System image file: bootflash:///n7000-s2-dk9.8.0.1.bin.S2 : S2 N7K-9-48-2043-11#

Conditions

Running N7K FIPS mode enable on HSK2 version 7.3.1.D1.1 and then cold boot to 8.0.1.S2, the FIPS configuration get lost after the cold boot. Do the same test from 6.2.12 to 7.3.1.D1.1 and FIPS is OK without config lost.

Workaround

FIPS boot up OK on 8.0.1.S2 after re-apply the config. N7K-9-48-2043-11# show fips status FIPS Status: enabled Switch Mode: FIPS ---------------------- LC STATUS ---------------------- 3 SUCCESS 4 SUCCESS 6 SUCCESS 7 SUCCESS 8 SUCCESS 9 SUCCESS N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: slot0:///n7000-s2-kickstart.7.3.1.D1.1.bin : S19 System image file: slot0:///n7000-s2-dk9.7.3.1.D1.1.bin : S19 N7K-9-48-2043-11(config)# show boot Current Boot Variables: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set Boot Variables on next reload: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set N7K-9-48-2043-11(config)# reload This command will reboot the system. (y/n)? [n] y N7K-9-48-2043-11# show fips status FIPS Status: disabled Switch Mode: NON FIPS N7K-9-48-2043-11# N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: bootflash:///n7000-s2-kickstart.8.0.1.bin.S2 : S2 System image file: bootflash:///n7000-s2-dk9.8.0.1.bin.S2 : S2 N7K-9-48-2043-11#

Conditions

Running N7K FIPS mode enable on HSK2 version 7.3.1.D1.1 and then cold boot to 8.0.1.S2, the FIPS configuration get lost after the cold boot. Do the same test from 6.2.12 to 7.3.1.D1.1 and FIPS is OK without config lost.

Workaround

FIPS boot up OK on 8.0.1.S2 after re-apply the config. N7K-9-48-2043-11# show fips status FIPS Status: enabled Switch Mode: FIPS ---------------------- LC STATUS ---------------------- 3 SUCCESS 4 SUCCESS 6 SUCCESS 7 SUCCESS 8 SUCCESS 9 SUCCESS N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: slot0:///n7000-s2-kickstart.7.3.1.D1.1.bin : S19 System image file: slot0:///n7000-s2-dk9.7.3.1.D1.1.bin : S19 N7K-9-48-2043-11(config)# show boot Current Boot Variables: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set Boot Variables on next reload: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set N7K-9-48-2043-11(config)# reload This command will reboot the system. (y/n)? [n] y N7K-9-48-2043-11# show fips status FIPS Status: disabled Switch Mode: NON FIPS N7K-9-48-2043-11# N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: bootflash:///n7000-s2-kickstart.8.0.1.bin.S2 : S2 System image file: bootflash:///n7000-s2-dk9.8.0.1.bin.S2 : S2 N7K-9-48-2043-11#

Conditions

Running N7K FIPS mode enable on HSK2 version 7.3.1.D1.1 and then cold boot to 8.0.1.S2, the FIPS configuration get lost after the cold boot. Do the same test from 6.2.12 to 7.3.1.D1.1 and FIPS is OK without config lost.

Workaround

FIPS boot up OK on 8.0.1.S2 after re-apply the config. N7K-9-48-2043-11# show fips status FIPS Status: enabled Switch Mode: FIPS ---------------------- LC STATUS ---------------------- 3 SUCCESS 4 SUCCESS 6 SUCCESS 7 SUCCESS 8 SUCCESS 9 SUCCESS N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: slot0:///n7000-s2-kickstart.7.3.1.D1.1.bin : S19 System image file: slot0:///n7000-s2-dk9.7.3.1.D1.1.bin : S19 N7K-9-48-2043-11(config)# show boot Current Boot Variables: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set Boot Variables on next reload: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set N7K-9-48-2043-11(config)# reload This command will reboot the system. (y/n)? [n] y N7K-9-48-2043-11# show fips status FIPS Status: disabled Switch Mode: NON FIPS N7K-9-48-2043-11# N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: bootflash:///n7000-s2-kickstart.8.0.1.bin.S2 : S2 System image file: bootflash:///n7000-s2-dk9.8.0.1.bin.S2 : S2 N7K-9-48-2043-11#

Conditions

Running N7K FIPS mode enable on HSK2 version 7.3.1.D1.1 and then cold boot to 8.0.1.S2, the FIPS configuration get lost after the cold boot. Do the same test from 6.2.12 to 7.3.1.D1.1 and FIPS is OK without config lost. Workaround: FIPS boot up OK on 8.0.1.S2 after re-apply the config. N7K-9-48-2043-11# show fips status FIPS Status: enabled Switch Mode: FIPS ---------------------- LC STATUS ---------------------- 3 SUCCESS 4 SUCCESS 6 SUCCESS 7 SUCCESS 8 SUCCESS 9 SUCCESS N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: slot0:///n7000-s2-kickstart.7.3.1.D1.1.bin : S19 System image file: slot0:///n7000-s2-dk9.7.3.1.D1.1.bin : S19 N7K-9-48-2043-11(config)# show boot Current Boot Variables: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set Boot Variables on next reload: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set N7K-9-48-2043-11(config)# reload This command will reboot the system. (y/n)? [n] y N7K-9-48-2043-11# show fips status FIPS Status: disabled Switch Mode: NON FIPS N7K-9-48-2043-11# N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: bootflash:///n7000-s2-kickstart.8.0.1.bin.S2 : S2 System image file: bootflash:///n7000-s2-dk9.8.0.1.bin.S2 : S2 N7K-9-48-2043-11#

Workaround

Running N7K FIPS mode enable on HSK2 version 7.3.1.D1.1 and then cold boot to 8.0.1.S2, the FIPS configuration get lost after the cold boot. Do the same test from 6.2.12 to 7.3.1.D1.1 and FIPS is OK without config lost. Workaround: FIPS boot up OK on 8.0.1.S2 after re-apply the config. N7K-9-48-2043-11# show fips status FIPS Status: enabled Switch Mode: FIPS ---------------------- LC STATUS ---------------------- 3 SUCCESS 4 SUCCESS 6 SUCCESS 7 SUCCESS 8 SUCCESS 9 SUCCESS N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: slot0:///n7000-s2-kickstart.7.3.1.D1.1.bin : S19 System image file: slot0:///n7000-s2-dk9.7.3.1.D1.1.bin : S19 N7K-9-48-2043-11(config)# show boot Current Boot Variables: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set Boot Variables on next reload: sup-1 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled sup-2 kickstart variable = bootflash:/n7000-s2-kickstart.8.0.1.bin.S2 system variable = bootflash:/n7000-s2-dk9.8.0.1.bin.S2 Boot POAP Disabled No module boot variable set N7K-9-48-2043-11(config)# reload This command will reboot the system. (y/n)? [n] y N7K-9-48-2043-11# show fips status FIPS Status: disabled Switch Mode: NON FIPS N7K-9-48-2043-11# N7K-9-48-2043-11# show version internal build-identifier Kickstart image file: bootflash:///n7000-s2-kickstart.8.0.1.bin.S2 : S2 System image file: bootflash:///n7000-s2-dk9.8.0.1.bin.S2 : S2 N7K-9-48-2043-11#

Further Problem Description