Processors
Intel® Processors, Tools, and Utilities
16112 Discussions

intel aes-ni not available in RHEL 9 on Intel® Xeon® Processor D-2733NT or D-1718T

Toby-GE-Aerospace
623 Views

It doesn't appear the the Intel AES NI hardware acceleration is working on Intel® Xeon® Processor D-2733NT or D-1718T running RHEL 9.1.

I installed the QAT driver QAT20.L.1.0.10-00005 using the "./configure --enable-qat-lkcf" to register with RHEL crypto modules.

 

A few observations:

1) the qat service status says  qat_service[20983]: There is 0 QAT acceleration device(s) in the system

2) openssl engine  - does not show aes-ni present....   Only shows the following
    (rdrand) Intel RDRAND engine

3) there is no kernel AES NI module per command

sort -u /proc/crypto | grep module
module : crc32c_intel
module : crc32_pclmul
module : crct10dif_pclmul
module : ghash_clmulni_intel
module : kernel

4) modprobe intel-aesni
modprobe: FATAL: Module intel-aesni not found in directory /lib/modules/5.14.0-162.6.1.el9_1.x86_64

5) mpicalc --print-config    - this shows the intel-aesni available

hwflist:intel-cpu:intel-bmi2:intel-ssse3:intel-sse4.1:intel-pclmul:intel-aesni:intel-rdrand:intel-avx:intel-avx2:intel-fast-vpgather:intel-rdtsc:intel-shaext:intel-vaes-vpclmul:
fips-mode:n:::
rng-type:standard:1:3030000:1:
compliance:::

 

Are there instructions on how to invoke the intel-AESNI hardware acceleration for openssl in RHEL 9.1

 

Labels (1)
0 Kudos
1 Reply
Allan_A_Intel
Moderator
601 Views

Hello, Toby-GE-Aerospace,


Thank you for reaching Intel Communities. I will gladly help you.


I suggest asking posting your question in the Embedded Community: https://community.intel.com/t5/Embedded-Products/ct-p/embedded-products


In there, choose the Embedded Server forum. An Intel dedicated team will support you.


Best regards,

Allan


0 Kudos
Reply