PTF MH01916 and MH01917 Readme

Hardware Management Console Readme

For use with HMC Version 9 Release 2 M952

Updated: 11 March 2022
(C) Copyright International Business Machines Corp., 2022 All rights reserved.

The information in this Readme contains the fix list and other package information about the Hardware Management Console.

PTF MH01916
PTF MH01917
Package information
Security fix
Known Issues and Limitations
Installation

Terminology

x86 - This term is used to reference the legacy HMC that runs on x86/Intel/AMD hardware for both the 7042 Machine Type appliances and the Virtual HMC that can run on the Intel hypervisors (KVM, VMWare, Xen).

ppc64 or ppc64le - describes the Linux code that is compiled to run on Power-based servers or LPARS (Logical Partitions)

PTF MH01916 - HMC V9 R2 952.2 for 7042-CR9 Hardware or vHMC for x86_64 hypervisors (5765-HMW)

This package represents an interim fix for the HMC V9 R2 M952 release for 7042-CR9 hardware or vHMC for x86_64 hypervisors. You can also reference this package by PTF MH01916 and APAR MB04324. This PTF can be installed on HMC Version 9 Release 2 M952.

Note: This PTF supersedes MH01912.

*Package information*
Package name	Size	Checksum (sha1sum)	APAR#	PTF#
MH01916_x86.iso	4184635392	185fa0ae957c0677754835311569b3362d3693d5	MB04324	MH01916
Splash Panel information (or lshmc -V output)
"version= Version: 9 Release: 2 Service Pack: 952 HMC Build level 2201042318 MH01904 - HMC V9R2 M952 MH01916 - iFix for HMC V9R2 M952 ","base_version=V9R2 "

PTF MH01917 - HMC V9 R2 952.2 for 7063 Machine Types or vHMC for PowerVM (5765-HMB)

This package represents an interim fix for the HMC V9 R2 M952 release on the 7063 machine type or vHMC for PowerVM. You can also reference this package by PTF MH01917 and APAR MB04325. This PTF can be installed on HMC Version 9 Release 2 M952.

Note: This PTF supersedes MH01913.

*Package information*
Package name	Size	Checksum (sha1sum)	APAR#	PTF#
MH01917_ppc.iso	4154644480	f02bde67bff9d207b20ffa219fc772a3b34144e3	MB04325	MH01917
Splash Panel information (or lshmc -V output)
"version= Version: 9 Release: 2 Service Pack: 952 HMC Build level 2201042318 MH01905 - HMC V9R2 M952 MH01917 - iFix for HMC V9R2 M952 ","base_version=V9R2 "

Security fix

Addressed log4j2 vulnerabilities: CVE-2021-45105, CVE-2021-45046 and CVE-2021-44832

Known issues and limitations

Kerberos server requires to be reconfigured using below CLI after update from 950 SP1 and PTFs. After update/upgrade from 950 to any newer HMC, if below scenarios via hscroot login are observed, reconfigure kerberos on HMC.
- ls /etc/krb5.conf
  ls: cannot access '/etc/krb5.conf': No such file or directory
- grep "kerberos.example.com" /etc/krb5.conf
  # kdc = kerberos.example.com
  # admin_server = kerberos.example.com
Recommended CLI commands to reconfigure kerberos :
chhmc -c kerberos -s remove –realm <kerberos_hostname> -a <kerberos_ip>
chhmc -c kerberos -s add --realm <kerberos_hostname> -a <kerberos_ip>

Previously released fixes also included in this PTF:

MH01912/MH01913
12/14/22

Addressed the log4j2 vulnerability: CVE-2021-44228

Installation

Installation instructions for HMC Version 9 upgrades and corrective service can be found at these locations:

Upgrading or restoring HMC Version 9

Updating, upgrading, and migrating your HMC machine code

Instructions and images for upgrading via a remote network install can be found here:

HMC V9 network installation images and installation instructions