cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
194
Views
1
Helpful
2
Replies

FIPS: Flash Key Check on Cisco 2960-S switch

leesince004
Level 1
Level 1

Hello there,

we have recently acquired few used Cisco 2960-S series switches, and we are curious about something.

While the switches are booting, we are getting a message after flashfs initialization.
FIPS: Flash Key Check : Begin
FIPS: Flash Key Check : End, Not Found, FIPS Mode Not Enabled.

Does this affect the switch in any way? It boots normally right after, all the test checks are passed so we are wondering what is that message.


Thank you in advance!

1 Accepted Solution

Accepted Solutions

marce1000
VIP
VIP

 

  - Nothing to worry about , fips refers to enhanced security standards , the switch will be fine without it ,

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

View solution in original post

2 Replies 2

marce1000
VIP
VIP

 

  - Nothing to worry about , fips refers to enhanced security standards , the switch will be fine without it ,

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Hi @marce1000 , thanks for the quick reply!

One quick question regarding the 2960-S switches.

When we go into ROMMON to factory reset one of our switches, after the firmware boot, we get multiple MBIST fails but the switch boots normally. If we reboot it without going into ROMMON, there are no fails and the switch seems to be working normally.
Below is the provided console logs.

The system has been interrupted prior to initializing the
flash filesystem.  The following commands will initialize
the flash filesystem, and finish loading the operating
system software:

    flash_init
    boot


switch: flash_init
Initializing Flash...
mifs[2]: 10 files, 1 directories
mifs[2]: Total bytes     :    1806336
mifs[2]: Bytes used      :     612352
mifs[2]: Bytes available :    1193984
mifs[2]: mifs fsck took 1 seconds.
mifs[3]: 0 files, 1 directories
mifs[3]: Total bytes     :    3870720
mifs[3]: Bytes used      :       1024
mifs[3]: Bytes available :    3869696
mifs[3]: mifs fsck took 2 seconds.
mifs[4]: 5 files, 1 directories
mifs[4]: Total bytes     :     258048
mifs[4]: Bytes used      :       9216
mifs[4]: Bytes available :     248832
mifs[4]: mifs fsck took 0 seconds.
mifs[5]: 5 files, 1 directories
mifs[5]: Total bytes     :     258048
mifs[5]: Bytes used      :       9216
mifs[5]: Bytes available :     248832
mifs[5]: mifs fsck took 0 seconds.
 -- MORE --
mifs[6]: 565 files, 20 directories
mifs[6]: Total bytes     :   57931776
mifs[6]: Bytes used      :   15288320
mifs[6]: Bytes available :   42643456
mifs[6]: mifs fsck took 30 seconds.
...done Initializing Flash.

switch: dir flash:
Directory of flash:/

    2  drwx  512       <date>               online_diag
    3  -rwx  1918      <date>               private-config.text
    4  -rwx  3096      <date>               multiple-fs
    5  -rwx  2632      <date>               config.text
    6  drwx  512       <date>               c2960s-universalk9-mz.122-55.SE7

42643456 bytes available (15288320 bytes used)

switch: del flash:config.text
Are you sure you want to delete "flash:config.text" (y/n)?y
File "flash:config.text" deleted

switch: boot
Loading "flash:/c2960s-universalk9-mz.122-55.SE7/c2960s-universalk9-mz.122-55.SE7.bin"

 

Initializing flashfs...
Using driver version 1 for media type 1
mifs[3]: 10 files, 1 directories
mifs[3]: Total bytes     : 1806336
mifs[3]: Bytes used      : 612352
mifs[3]: Bytes available : 1193984
mifs[3]: mifs fsck took 0 seconds.
mifs[3]: Initialization complete.

mifs[4]: 0 files, 1 directories
mifs[4]: Total bytes     : 3870720
mifs[4]: Bytes used      : 1024
mifs[4]: Bytes available : 3869696
mifs[4]: mifs fsck took 0 seconds.
mifs[4]: Initialization complete.

mifs[5]: 5 files, 1 directories
mifs[5]: Total bytes     : 258048
mifs[5]: Bytes used      : 9216
mifs[5]: Bytes available : 248832
mifs[5]: mifs fsck took 0 seconds.
mifs[5]: Initialization complete.

mifs[6]: 5 files, 1 directories
mifs[6]: Total bytes     : 258048
mifs[6]: Bytes used      : 9216
mifs[6]: Bytes available : 248832
mifs[6]: mifs fsck took 0 seconds.
mifs[6]: Initialization complete.

mifs[7]: 564 files, 20 directories
mifs[7]: Total bytes     : 57931776
mifs[7]: Bytes used      : 15284736
mifs[7]: Bytes available : 42647040
mifs[7]: mifs fsck took 0 seconds.
mifs[7]: Initialization complete.

...done Initializing flashfs.

POST: MA BIST : BeginYeti2S88gMdioWr: Unknown status for write operation
***ERR: S88G FC 1   MBIST Unload Activity

***ERR: S88G FC 1   MBIST failed
Yeti2S88gMdioWr: Unknown status for write operation
***ERR: S88G DP Sg1 MBIST Unload Activity

***ERR: S88G DP Sg1 MBIST failed
Yeti2S88gMdioWr: Unknown status for write operation
***ERR: S88G DP Xg1 MBIST Unload Activity

***ERR: S88G DP Xg1 MBIST failed
Yeti2S88gMdioWr: Unknown status for write operation
***ERR: S88G NI 1   MBIST Unload Activity

***ERR: S88G NI 1   MBIST failed
Yeti2S88gMdioWr: Unknown status for write operation
***ERR: S88G FC 0   MBIST Unload Activity

***ERR: S88G FC 0   MBIST failed
Yeti2S88gMdioWr: Unknown status for write operation
***ERR: S88G DP Sg0 MBIST Unload Activity

***ERR: S88G DP Sg0 MBIST failed
Yeti2S88gMdioWr: Unknown status for write operation
***ERR: S88G DP Xg0 MBIST Unload Activity

***ERR: S88G DP Xg0 MBIST failed
Yeti2S88gMdioWr: Unknown status for write operation
***ERR: S88G NI 0   MBIST Unload Activity

***ERR: S88G NI 0   MBIST failed
Yeti2S88gMdioWr: Unknown status for write operation
***ERR: S88G UPB    MBIST Unload Activity

***ERR: S88G UPB    MBIST failed
Yeti2S88gMdioWr: Unknown status for write operation
POST: MA BIST : End, Status Passed

POST: TCAM BIST : Begin
POST: TCAM BIST : End, Status Passed

extracting front_end/front_end_ucode_info (86 bytes)
Waiting for Stack Master Election...
POST: Thermal, Fan Tests : Begin
POST: Thermal, Fan Tests : End, Status Passed

POST: PortASIC Stack Port Loopback Tests : Begin
POST: PortASIC Stack Port Loopback Tests : End, Status Passed

POST: PortASIC Port Loopback Tests : Begin
POST: PortASIC Port Loopback Tests : End, Status Passed

POST: EMAC Loopback Tests : Begin
POST: EMAC Loopback Tests : End, Status Passed

Election Complete
Switch 1 booting as Master
Waiting for Port download...Complete


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco WS-C2960S-48TS-L (PowerPC) processor (revision B0) with 131072K bytes of memory.
Processor board ID FOC1447Y36V
Last reset from power-on
1 Virtual Ethernet interface
1 FastEthernet interface
52 Gigabit Ethernet interfaces
The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address       : EC:C8:82:D9:2E:80
Motherboard assembly number     : 73-11909-06
Power supply part number        : 341-0327-02
Motherboard serial number       : FOC14432SRA
Power supply serial number      : DCA1441P1CW
Model revision number           : B0
Motherboard revision number     : A0
Model number                    : WS-C2960S-48TS-L
Daughterboard assembly number   : 73-11933-04
Daughterboard serial number     : FOC144743WF
System serial number            : FOC1447Y36V
Top Assembly Part Number        : 800-30950-02
Top Assembly Revision Number    : A0
Version ID                      : V02
CLEI Code Number                : COMGF00ARB
Daughterboard revision number   : A0
Hardware Board Revision Number  : 0x01


Switch Ports Model              SW Version            SW Image
------ ----- -----              ----------            ----------
*    1 52    WS-C2960S-48TS-L   12.2(55)SE7           C2960S-UNIVERSALK9-M

Thanks in advance!

Review Cisco Networking for a $25 gift card