Login to BIG-IP CLI and use p11tool to verify if the Keys are available on the HSM.
#./p11tool2 LoginUser=12345678 ListObjects
CKA_KEY_TYPE = CKK_RSA
CKA_UNIQUE_ID = 709BEDBE-5200-47CC-92E7-4A639C9AB0BC
CKA_SENSITIVE = CK_TRUE
CKA_EXTRACTABLE = CK_FALSE
CKA_LABEL = BIGIPTest1___03c9f2fd
CKA_ID =
0x38303137 31316435 65323265 36383931 |801711d5e22e6891|
38343330 66376334 30336339 66326664 |8430f7c403c9f2fd|
CKA_KEY_TYPE = CKK_RSA
CKA_UNIQUE_ID = 74E283EC-82A4-4587-8F84-C3A7C8847578
CKA_SENSITIVE = CK_TRUE
CKA_EXTRACTABLE = CK_FALSE
CKA_LABEL = f5-testkey___a05505a8
CKA_ID =
0x39373435 61316438 31653262 38346133 |9745a1d81e2b84a3|
36656565 37323061 61303535 30356138 |6eee720aa05505a8|
When keys are created on the HSM through F5 BIG-IP, the last eight digits of the CKA_ID of the keys are appended to the CKA_LABEL as described above.