AES-NI
-
Hello,
My CPU is E5-1650 v3 and according to all reports about it I found it supports AES acceleration. But pfSense detects the CPU without AES-NI (AES-NI CPU Crypto: No IPsec-MB Crypto: Yes (inactive) QAT Crypto: No)
How can I be sure the next CPU will have the AES-NI enabled in pfSense? Of course the official specifications have it supported (like the actual CPU). -
The following site probably will help with information:
https://www.cpu-world.com/index.html
Ted
-
@chrysmon
maybe you have something disabled in BIOS? -
@chrysmon IPSec-MB is “preferred” anyway if detected: https://docs.netgate.com/pfsense/en/latest/config/advanced-misc.html#cryptographic-thermal-hardware
Do you have AES-NI enabled in pfSense?
https://docs.netgate.com/pfsense/en/latest/hardware/cryptographic-accelerators.html#activating-the-hardware
-
@SteveITS Nothing in BIOS related and disabled. I can enable AES-NI but it is not working. The CPU information says AES-NI is not available so cannot be active. For some reason it's not detected or is not compatible. With the same installation/setting on older CPUs it's working. I'm a little concerned because I will buy a new system and want to have hardware crypto active.
-
@chrysmon
update bios? -
@dave-opc I had the workstation as my work computer for a while and it had no updates, it's an old Fujitsu Celsius M740. I will check again, have to switch to the 2nd machine and put back the windows disk.