Supplemental Document : Interoperability Matrix for BIG-IP TMOS with nShield Clients and HSM

Applies To:

Show Versions Show Versions

BIG-IP AAM

  • 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 11.6.3, 11.6.2, 11.6.1

BIG-IP APM

  • 17.1.1, 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 11.6.5, 11.6.4, 11.6.3, 11.6.2, 11.6.1

BIG-IP GTM

  • 11.6.5, 11.6.4

BIG-IP LTM

  • 17.1.1, 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 11.6.5, 11.6.4, 11.6.3, 11.6.2, 11.6.1

BIG-IP AFM

  • 17.1.1, 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 11.6.5, 11.6.4, 11.6.3, 11.6.2, 11.6.1

BIG-IP DNS

  • 17.1.1, 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0

BIG-IP ASM

  • 17.1.1, 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 11.6.5, 11.6.4, 11.6.3, 11.6.2, 11.6.1
Original Publication Date: 07/04/2020 Updated Date: 09/23/2024

This interoperability matrix shows the compatibility between nShield HSM versions and BIG-IP TMOS versions.

Note:

  • The nCipher HSM name has changed to Entrust nShield HSM.
  • In FIPS 140-2 Level 3 mode, keys cannot be created using the tmsh utility with security type as nethsm. For traffic exchange, use ECDSA key type.

Supported nShield client and HSM versions with BIG-IP TMOS versions

This matrix shows the nShield client, hardware, and firmware versions and their respective compatible BIG-IP versions. Versions of nShield client, hardware, and firmware that are not shown in this matrix are either unsupported or untested. nShield client versions 12.x are not compatible with BIG-IP versions 11.x. Please use nShield client version 11.x with BIG-IP version 11.x only, and nShield client versions 12.x with BIG-IP versions 12.x and 13.x in accordance with the supported matrix.

Note: The supportability of a maintenance release can be derived from the previously listed version. For example, if 12.1.2 is supported for a particular HSM/BIG-IP version combination, supportability extends to all subsequent maintenance releases for that specific version, such as 12.1.3, 12.1.4 and so on. The supportability of a point release can be derived from its parent version. For example, if 11.6.1 passes regression for a particular HSM/BIG-IP version combination, supportability extends to the proceeding releases, such as 11.6.1.1, 11.6.1.2, 11.6.1.3 and so on (or 11.6.1.x.).

 

nShield Client Version nShield Hardserver Version nShield Firmware Version Compatible BIG-IP Versions
11.5 2.47.13 2.50.16/2.50.17 11.5.0, 11.6.0
11.72.01 2.92.1 2.61.2 11.6.1-HF2 +
12.10.01 3.21.3 2.61.2 12.1.1-HF1 +, 13.0.0, 13.1.0, 14.0.0, 14.1.0
12.40.2 12.40.2 3.4.1, 3.4.2 (XC), 2.61.2 (+) 14.1.0
12.50.2 12.50.2 3.4.2 (XC), 2.61.2 (+) 15.0.0, 15.1.0, 16.0.0
12.60.11 12.60.11 12.50.11(XC), 12.50.8(6000+) 15.1.3 15.1.4, 15.1.5, 16.0.0, 16.1.0, 16.1.1, 17.0.0
12.81.2 12.81.2 12.72.1 15.1.9.1, 16.1.4.2
12.81.2 12.81.2 12.80.5 15.1.3, 15.1.4, 15.1.8.2, 16.1.3.5, 17.0.0, 17.1.0