Hardware Management Console Readme For use with HMC Version 9 Release 1 M940 Updated: 12 May 2020 (C) Copyright International Business Machines Corp., 2020 All rights reserved. Contents <#ibm-content> The information in this Readme contains the fix list and other package information about the Hardware Management Console. * PTF MH01851 <#MH01851> * PTF MH01852 <#MH01852> * Package information <#package> * General and Security fixes <#fixes> * Installation <#install> Terminology *x86* - This term is used to reference the legacy HMC that runs on x86/Intel/AMD hardware for both the 7042 Machine Type appliances and the Virtual HMC that can run on the Intel hypervisors (KVM, VMWare, Xen). *ppc64 or ppc64le* - describes the Linux code that is compiled to run on Power-based servers or LPARS (Logical Partitions) PTF MH01851 HMC V9 R1.940.2 - for 7042 Machine Types or vHMC for x86 hypervisors (5765-HMW) This package includes an interim fix for the HMC V9 R1.940.0 service pack. You can also reference this package by PTF MH01851 and APAR MB04237. This interim fix can be installed on an existing HMC Version 9 Release 1.940.0 Service Pack (PTF MH01836) installation with or without additional fix packs. *NOTE*: This PTF supersedes MH01842. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01851_x86.iso 4065024000 191ad5d18211fb7a6988f0baba4eea10e6679fe0 MB04237 MH01851 Splash Panel information (or lshmc -V output) "version= Version: 9 Release: 1 Service Pack: 940 HMC Build level 2004070148 MH01836 - HMC V9R1 M940 MH01851 - iFix for HMC V9R1 M940 ","base_version=V9R1 " PTF MH01852 HMC V9 R1.940.2 - for 7063 Machine Types or vHMC for PowerVM (5765-HMB) This package includes an interim fix for the HMC V9 R1.940.0 service pack. You can also reference this package by PTF MH01852 and APAR MB04240. This image can be installed on an existing HMC Version 9 Release 940.0 Service Pack (PTF MH01837) installation with or without additional fix packs. *NOTE*: This PTF supersedes MH01843. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01852_ppc.iso 4062169088 52e6692eb08d6984a9e4043bbdf140900af94a1b MB04240 MH01852 Splash Panel information (or lshmc -V output) "version= Version: 9 Release: 1 Service Pack: 940 HMC Build level 2004070148 MH01837 - HMC V9R1 M940 MH01852 - iFix for HMC V9R1 M940 ","base_version=V9R1 " *General fixes* * Fixed multiple issues with the UI update/upgrade firmware wizard including error E302F9C0 * Fixed an issue with cloud connector startup, when a CA signed certificated is applied on the HMC * Fixed an issue where tasklog incorrectly shows completed deploy template operations as "running". * Fixed an issue that causes SRC E212E114 due to ESA process using large amount of memory in HMCs managing hundreds of partitions. * Fixed an issue where lssyscfg command may return stale/incorrect information for sp_failover_enabled and sp_failover_state. * Fixed an issue where the scheduled HMC critical console data backup operation uses an empty/blank file name every other time it executes. * Fixed an issue where the local HMC session is screen locked by an hmc user profile that only accesses the hmc remotely. * Fixed an issue where HMCs upgraded from V8R8.6 and earlier encounter various unexpected behaviors after applying M940 including callhome failures. The issue is due to incorrect file ownership/permissions. * Fixed an issue that causes a deadlock in ESA with SRC E35A0074 and E35A0075 after a hmc reboot * Fixed an issue that caused false reports of high heap usage including SRC E35A0083 * Fixed an issue where issues causing high cpu usage were not being reported. Symptoms include slow response when navigating or using the HMC GUI. * Fixed an issue to prevent the reporting of SRC E3550046 when RMC is started on a VIOS. *Security fixes* * Addressed Xerces-C vulnerability: CVE-2018-1311 * Addressed nss, nss-softokn, nss-util vulnerabilities: CVE-2019-11729 and CVE-2019-11745. *Previously released fixes also included in this PTF: * * MH01842/MH01843* 02/14/20 * Ability to force a remote restart operation after system transitions through Incomplete state o After a system transitions through Incomplete state and reaches one of the supported states for remote restart, the --usecurrdata option can be used with the *rrstartlpar *command to perform the remote restart operation. The *lsrrstartlpar *command can be used to view the status & lpar configuration information stored in the HMC. * Ability to force a remote restart operation after HMC is rebooted o If HMC is rebooted and a system connects back to the HMC and is in one of the supported remote restart states (except No connection), the --usecurrdata option can be used with the *rrstartlpar *command to perform the remote restart operation. The *lsrrstartlpar* command can be used to view the status & lpar configuration information stored in the HMC. * Fixed a backward compatibility issue where a template captured at a release prior to V9R1M940 then deployed on V9R1M940 fails with an unmarshalling error. * Fixed the output returned from the *lsrrstartlpar *command with resource type of lpar and lparcfg to be consistent for the remote_restart_operation_state. * Fixed an issue where the DHCP server may not start during a HMC boot. Symptoms include managed systems dropping to No Connection every 15 minutes or not discovering new systems. * Suppressed email notifications for a deprecated 'Change Credentials Password' scheduled operation. * Fixed an issue with sftp operations including backup critical console data and license internal code updates and upgrades where the operation fails with invalid username/password when the sftp user password length is a multiple of 4. * Fixed an issue where HMC enhanced UI allows a user to attempt to add vFC adapters to a client partition over a non-NPIV capable fibre channel io card port. The operation would return "successful", but fail to map the adapter in the VIOS. * Fixed an issue for 7063-CR1 HMC consoles when attached to a Juniper switch fail to boot with "1901 HMC Startup aborted and Killing the JVM!!" * Addressed openslp vulnerability: CVE-2019-5544 Installation Installation instructions for HMC Version 9 upgrades and corrective service can be found at these locations: Upgrading or restoring HMC Version 9 Updating, upgrading, and migrating your HMC machine code Instructions and images for upgrading via a remote network install can be found here: HMC V9 network installation images and installation instructions