For use with HMC Version 7 Release 7.7.0

 

Contents

The information in this Readme contains the fix list and other package information about the Hardware Management Console.

• PTF MH01415
• Package information
• List of fixes
• Installation
• Additional information

This package will update your HMC to HMC Version 7 Release 7.7.0 Service Pack 4.  You can reference this package by APAR# MB03788.  This image must be installed on top of HMC Version 7 Release 7.7.0 SP3  (with or without any iFixes).

NOTE: For any configurations with users set with remote_ssh_access=0 ; after this Service Pack is installed, hscroot should disable ssh and then re-enable ssh using the UI HMC Management -> Remote Command Execution  task to prevent the users from being able to ssh login.

This package includes the following fixes:

General fixes

• Fixed a problem where logins to the pegasus server fail when the user profile is set for ldap authentication.  This impacts applications such as IBM Systems Director.
• Fixed a discrepancy in the number of additional vlan IDs allowed that can cause IVM to HMC conversion to fail.  HMC now allows one additional vlan.
• Fixed a problem where viewing available server firmware content on the IBM website repository displays incorrect information for the service pack name on the 'available firmware levels' panel.
• Fixed an issue when creating or editing a profile that resulted in an error if 20 additonal vlans were being defined resulting in error "Cannot use the virtual I/O setting for allocation. Check whether the setting is valid."
• Fixed an issue where a user profile that does not have ssh access granted was able to log on via ssh.
• Update message on import of Power firmware from IBM website to reflect repository relocation.
• Updated the Save Area Metering tool to detect if  the system can be moved to 780 HMC and beyond or not. Also, it will display the current usage of the Persistence of NVRAM for the current profiles configuration data.
• Fixed a problem where the pegasus (CIMOM) server may crash when attempting to deliver notification to IBM i subscribers. 
• Fixed a problem where the updhmc command prints an unneeded iptables listing to the terminal session.
• Fixed a problem where some model 7042-CR7s with 7216-TF4 monitors may experience graphics issues such as screen rolling. 
• Fixed an issue where opening the properties for a virtual ethernet adapter can take up to 15 minutes if an IBM i partition is in an error state.
• Fixed a problem where a query for Processor Pool information to the pegasus server returned incorrect values for the reserved value.
• Fixed a problem where create system plan on a server with a multifunction card (i.e. ethernet and FCoE) may incorrectly fail with the following errors: "mksysplan found inconsistencies between the management console repository and IOR. The IOR cache needs to be refreshed. Stale IOR data found"
• Fixed a problem where the HMC may report serviceable event E212E161 or eventually hang when SNMP traps are enabled.
• Fixed a problem where HMC may report service event E212E161 when multiple SLP queries are made.
• Fixed issue of Certificate used in ccfw applet expiring on 6/14/2014.
• Fixed a problem where user profiles lose their assigned resource and/or task role after a HMC reboot.
• Removed unused user profiles such as "games" and "wnn" to prevent false reports by security scan tools.
• Fixed a problem where the updlic command may return a non-zero return code for a successful update.
• Fixed a problem where the partition save current configuration fails to save to the active profile.  CLI returns no error and creates a profile with the following appended _*profile; GUI returns errors HSCL19A2 and HSCL07D3.
• Fixed an issue in dynamic environments where frequent save current configurations or frequent provisioning changes take place that caused Incomplete state.
  
• Fixed a problem where lshmc -r takes a long time to run.

Security Fixes

• Fixes for CVE-2014-0092 & CVE-2014-3466
• Fix for CVE-2011-3188 Linux Kernel TCP Sequence Number Generation Security Weakness

Repair and Verify

• Fixed a problem where an abnormal termination of a repair procedure can result in the continuation of the procedure (with an unexpected power off of an enclosure) rather then a cancel.

Installation instructions for HMC Version 7 upgrades, updates and corrective service can be found at these locations:

Installation methods for HMC Version 7 updates and fixes

Upgrading or restoring HMC Version 7

Instructions and images for upgrading via a remote network install can be found here (for all HMC releases):

HMC network installation images

Notes:

1. The Install Corrective Service task now allows you to install corrective service updates from the ISO image files of these updates. You can download these ISO image files for the HMC, and then use the ISO image file to install the corrective service update. You no longer need to burn CD-R or DVD-R media to use the ISO image file to install corrective service.
2. This image requires DVD –R media.
3. To install updates over the network, select the *.iso file on the "Select Service Package" panel of the Install Corrective Service task. The HMC application extracts the files needed to install the corrective service. If you are using USB flash media, copy the *.iso file to the flash media, and then select the file when prompted.
4. The updhmc command line command has also been modified to use the *.iso file. To use the command, follow the syntax in this example:
   updhmc -t s -h <myservername> -f </home/updates/corrrective_service.iso> -u <HMC_username> -i

In all cases, the HMC application extracts the files needed to install the corrective service.