Hardware Management Console Readme

PTF MH01752

List of fixes

• Addressed an issue where Webserver version is disclosed in response message.
• Added X-XSS-Protection to response header of all the URI on exposed ports to prevent cross-site scripting attacks.
• Addressed Common Vulnerabilities and Exposures issue numbers CVE-2017-5715, CVE-2017-5753 and CVE-2017-5754.
  Note: For vHMC, mitigation may require additional hypervisor and firmware updates; customers should consult their hypervisor and x86 system vendors for information.
• Fixed a security issue in hmc logging.

• Fixed an issue where the "All VirtualIOServer" view fails to display when logged in as  HMC user with a custom resource role and using a language other than English.  The HMC reports:
  Error status : 403
  Error message : REST000F Forbidden: The User does not have the authority to access the object VirtualIOServer.
  
• Fixed an issue where changing only the IEEE property of a virtual ethernet adapter incorrectly updates the allowed MAC property to allow all.
  
• Fixed an issue where a "java out of date" warning message was displayed when a user launches the virtual terminal on the local hmc.
  
• Fixed a problem where leaving a stale server connection in "no connection" state for an extended period of time with no default route defined on the HMC causes the hdwr_svr process to fail and restart. Symptoms may include "HSCF0071E Communication error to Primary Flexible Service Processor on <server>" and inability to log into the local UI after the process faults and restarts.
  
• Fixed an issue where /var/hsc/log exceeds 80% disk space and calls home service event E212E13D. This occurs when inbound snmp is enabled (default is disabled) and snmp_subagent.log fills /var/hsc/log.
  
• Fixed an issue where user is unable to edit or delete a vNIC device that has no active backing devices.
  
• Fixed an issue where UI may show an incorrect state for a vNIC backing device.
  
• Fixed a rare issue where active vNIC backing devices for a partition were deleted during an unrelated task such as activate profile for another partition.  This can result in active partitions losing their network connection.
  
• Fixed a rare timing issue during a server IPL of a server with Power Enterprise Pool resources assigned where the HMC may restore double the original amount of pool resources.
  
• Fixed a problem that can result in E332FFFF serviceable events, HMC performance issues and eventual HMC when the Performance Collection Metrics (PCM) panel is closed using the browser close button instead of panel close button.
  
• Fixed issue where create new partition, modify profile will fail because of incorrect ownership of directories.  Symptoms include error messages REST0126 and HSCL0036.
  
• Fixed a problem that can result in E35A0016 / E35A0017 serviceable events. 
  
• Fixed a problem where the chcodpool –o sync operation completes with no errors but does not reset the Power Enterprise Pool state.
  
• Fixed a problem that can cause lock contention errors and slow performance when Simplified Remote Restart (SRR) is enabled on multiple partitions and the VIOS partitions are shutdown or their RMC connections are inactive. Symptoms may include the server going to recovery state before automatically going back to operating state and performance call home SRCs E35A0014 and E35A000D being reported.
  
  
  

Installation