Solaris 10 patches 147159-01/147159-02 Cause UltraSPARC III Systems to Fail to Load the AES Module

Asset ID:	1-77-1371655.1
Update Date:	2011-11-22
Keywords:

Solution Type Sun Alert Sure

Solution 1371655.1 : Solaris 10 patches 147159-01/147159-02 Cause UltraSPARC III Systems to Fail to Load the AES Module

Applies to:

Sun Fire V890 Server - Version: Not Applicable and later   [Release: N/A and later ]
Solaris SPARC Operating System - Version: 10 10/09 U8 and later    [Release: 10.0 and later]
Sun Fire V215 Server - Version: Not Applicable and later    [Release: N/A and later]
Sun Fire V210 Server - Version: Not Applicable and later    [Release: N/A and later]
Sun Blade 1500 Workstation - Version: Not Applicable and later    [Release: N/A and later]
Information in this document applies to any platform.
__________________

Date of Resolved Release: 28-Oct-2011
_________________________________

Description

Solaris 10 on UltraSPARC III systems with patch 147159-01 fail to load the Advanced Encryption Standard (AES) kernel module with 'undefined symbol' errors. Depending upon the system configuration, this failure can occur at boot time or when an attempt is made to use the AES kernel module for encryption.

This makes the kernel AES module unavailable for encryption. Common uses of this module includes encrypt(1), ipsec(7p), ipsecesp(7p), sshd(1M), and ssh(1).

Likelihood of Occurrence

This issue can occur in the following releases:

SPARC Platform

UltraSPARC III

Solaris 10 with patches 147159-01 or 147159-02 and without patch 147159-03.

Notes:

1. x86 platforms are not affected by this issue. sun4v and sun4us systems are not affected by this issue.

2. Solaris 8, Solaris 9, and Solaris 11 Express are not impacted by this issue.

3. Systems with any of the variants of the UltraSPARC III family of processors (III, IIIi, IIIi+) are all affected by this issue.

4. To determine if a system has an affected UltraSPARC III processor, execute the following command:

$ prtdiag | grep UltraSPARC-III
0 1281 MHz 1MB SUNW,UltraSPARC-IIIi 2.4 on-line

Possible Symptoms

Messages similar to the following are seen when the kernel AES module fails to load:

unix: /platform/SUNW-XXXXXXXXX/kernel/crypto/sparcv9/aes256: undefined symbol
unix: 'aes_decrypt_contiguous_blocks'
unix: WARNING: mod_load: cannot load module 'aes256'

Workaround or Resolution

To avoid this issue, do not install patch 147159-01/147159-02 onto UltraSPARC III systems. If these patches are installed on the systems, they can be removed using patchrm(1M). A better recommendation is to update to patch 147159-03 or newer.

This issue is addressed in the following release:

SPARC Platform

Solaris 10 with patch 147159-03 or later

Patches

<SUNPATCH:147159-03>

Modification History

28-Oct-2011: Date of Resolved Release
22-Nov-2011: Added Reference

This regression was caused by the putback for CR 7030953

Note that the following list of hardware systems may have the
affected UltraSPARC III processor. This is not a definitive
test. The list is what you see in the output from "uname -a"

SUNW,Sun-Fire-V890
SUNW,Sun-Blade-2500
SUNW,Sun-Fire-V210
SUNW,Sun-Fire-15000
SUNW,Sun-Fire-V440
SUNW,Sun-Blade-1500
SUNW,Netra-CP3010
SUNW,Sun-Fire-480R
SUNW,Netra-440
SUNW,Netra-210
SUNW,Sun-Fire-V245
SUNW,Sun-Fire-280R
SUNW,Netra-T12
SUNW,Sun-Fire-880
SUNW,Sun-Fire-V240
SUNW,Sun-Fire-V490
SUNW,Sun-Fire
SUNW,Netra-240
SUNW,Netra-T4
SUNW,SPARC-Enterprise
SUNW,Sun-Fire-V250
SUNW,Sun-Fire-V215
SUNW,A70
SUNW,Sun-Fire-V445
SUNW,Sun-Blade-1000

Internal Contributor/Submitter: [email protected]
Internal Eng Responsible Engineer: [email protected]
Internal Services Knowledge Analyst: [email protected]
Internal Eng Business Unit Group: Systems RPE
Internal Escalation ID: 3-4454923721 3-4544172691 3-4566971721 3-4788995551
Internal Pending Patches:
Internal Resolution Patches: 147159-03

References

<SUNPATCH:147159-03>
7088127

Attachments

This solution has no attachment