Supplemental Document :
Interoperability Matrix for BIG-IP TMOS with nShield Clients and HSM
Applies To:
Show Versions
BIG-IP AAM
- 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 11.6.3, 11.6.2, 11.6.1
BIG-IP APM
- 21.0.0, 17.5.1, 17.5.0, 17.1.3, 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.6, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 11.6.5, 11.6.4, 11.6.3, 11.6.2, 11.6.1
BIG-IP GTM
- 11.6.5, 11.6.4
BIG-IP LTM
- 21.0.0, 17.5.1, 17.5.0, 17.1.3, 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.6, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 11.6.5, 11.6.4, 11.6.3, 11.6.2, 11.6.1
BIG-IP AFM
- 21.0.0, 17.5.1, 17.5.0, 17.1.3, 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.6, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 11.6.5, 11.6.4, 11.6.3, 11.6.2, 11.6.1
BIG-IP PEM
- 17.5.1
BIG-IP DNS
- 21.0.0, 17.5.0, 17.1.3, 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.6, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.4, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0
BIG-IP ASM
- 21.0.0, 17.5.1, 17.5.0, 17.1.3, 17.1.2, 17.1.1, 17.1.0, 17.0.0, 16.1.6, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 16.0.1, 16.0.0, 15.1.10, 15.1.9, 15.1.8, 15.1.7, 15.1.6, 15.1.5, 15.1.4, 15.1.3, 15.1.2, 15.1.1, 15.1.0, 15.0.1, 15.0.0, 14.1.5, 14.1.4, 14.1.3, 14.1.2, 14.1.0, 14.0.1, 14.0.0, 13.1.5, 13.1.3, 13.1.1, 13.1.0, 13.0.1, 13.0.0, 12.1.6, 12.1.5, 12.1.4, 12.1.3, 12.1.2, 12.1.1, 12.1.0, 11.6.5, 11.6.4, 11.6.3, 11.6.2, 11.6.1
Original Publication Date: 07/04/2020
Updated Date: 11/04/2025
This interoperability matrix shows the compatibility between nShield HSM versions and BIG-IP TMOS versions.
Note:
- The nCipher HSM name has changed to Entrust nShield HSM.
- In FIPS 140-2 Level 3 mode, keys cannot be created using the tmsh utility with security type as nethsm. For traffic exchange, use ECDSA key type.
Supported nShield client and HSM versions with BIG-IP TMOS versions
This matrix shows the nShield client, hardware, and firmware versions and their respective compatible BIG-IP versions. Versions of nShield client, hardware, and firmware that are not shown in this matrix are either unsupported or untested. nShield client versions 12.x are not compatible with BIG-IP versions 11.x. Please use nShield client version 11.x with BIG-IP version 11.x only, and nShield client versions 12.x with BIG-IP versions 12.x and 13.x in accordance with the supported matrix.
Note:
- The supportability of a maintenance release can be derived from the previously listed version. For example, if 12.1.2 is supported for a particular HSM/BIG-IP version combination, supportability extends to all subsequent maintenance releases for that specific version, such as 12.1.3, 12.1.4 and so on. The supportability of a point release can be derived from its parent version. For example, if 11.6.1 passes regression for a particular HSM/BIG-IP version combination, supportability extends to the proceeding releases, such as 11.6.1.1, 11.6.1.2, 11.6.1.3 and so on (or 11.6.1.x.).
- Before using any version, it is strongly recommended to check the EOL support for the corresponding version with the respective vendors.
| nShield Client Version | nShield Hardserver Version | nShield Firmware Version | Compatible BIG-IP Versions |
|---|---|---|---|
| 11.5 | 2.47.13 | 2.50.16/2.50.17 | 11.5.0, 11.6.0 |
| 11.72.01 | 2.92.1 | 2.61.2 | 11.6.1-HF2 + |
| 12.10.01 | 3.21.3 | 2.61.2 | 12.1.1-HF1 +, 13.0.0, 13.1.0, 14.0.0, 14.1.0 |
| 12.40.2 | 12.40.2 | 3.4.1, 3.4.2 (XC), 2.61.2 (+) | 14.1.0 |
| 12.50.2 | 12.50.2 | 3.4.2 (XC), 2.61.2 (+) | 15.0.0, 15.1.0, 16.0.0 |
| 12.60.11 | 12.60.11 | 12.50.11(XC), 12.50.8(6000+) | 15.1.3 15.1.4, 15.1.5, 16.0.0, 16.1.0, 16.1.1, 17.0.0 |
| 12.81.2 | 12.81.2 | 12.50.11 | 17.1.2, 16.1.3.5 |
| 12.81.2 | 12.81.2 | 12.72.1 | 15.1.9.1, 16.1.4.2 |
| 12.81.2 | 12.81.2 | 12.80.5 | 15.1.3, 15.1.4, 15.1.8.2, 16.1.3.5, 17.0.0, 17.1.0 |
| 13.6.5 | 13.6.5 | 13.2.4(5c) | 17.5 |
| 13.6.5 | 13.6.5 | 12.72.1(XC) | 17.5, 17.5.1 |
