For use with HMC Version 10 Release 3 M1051

Contents

The information in this Readme contains the fix list and other package information about the Hardware Management Console.

• PTF MF71685
• PTF MF71686
• Package information
• Fixes included
• Known issues and limitations
  
• Best Practices
• Installation

General fixes

• Fixed a rare issue that can cause an Enterprise BMC-based managed system to transition into Incomplete state instead of Recovery state.
  
• Fixed an issue preventing the user from updating the password for a new Enterprise BMC-based system and transitioning it out of Pending Authentication state on the HMC.  This issue occurs if the user waits longer than 30 minutes after connecting the system to the HMC before updating the password.
  
• Fixed an issue that caused the entire GUI screen to go blank after a Delete Partition operation completed.
  
• Fixed an issue that caused the Partition Virtual networks -> Adapter(s) -> Create Trunk Adapter panel to fail to load for an IBM i partition when no virtual networks exist.
  
• Fixed an issue that caused the setting of the inband BMC credentials for a Power HMC 7063-CR2 to fail when the password is expired.
  
• Fixed an issue that sometimes causes wrong or missing (NA) source VIOS names to be shown in Virtual SCSI mappings and Virtual FC mappings on the Edit Migration Settings GUI panel.
  
• Fixed an issue causing SRC E35F0010 to be called home.

Security fixes

• Fixed Java vulnerabilities: CVE-2024-20918, CVE-2024-20921, CVE-2024-20945, and CVE-2024-20952
  
• Fixed Apache Tomcat vulnerabilities: CVE-2024-23672 and CVE-2024-24549
  
• Fixed libxml2 vulnerabilities: CVE-2023-28484 and CVE-2023-29469
  
• Fixed libssh vulnerabilities: CVE-2023-1667 and CVE-2023-2283
  
• Fixed SSH vulnerability: CVE-2023-48795
  
• Fixed nghttp2 vulnerability: CVE-2023-44487

Known Issues and Limitations

• Dates, times, and numbers on the GUI Performance dashboard are shown in the format based on the HMC language instead of the browser language.
  
• If log in to the HMC GUI is failing with this error for LDAP or auto-managed users:
  
  Error: "Logon Error: Invalid credential or Timeout. Please try again after some time, if it repeats, please follow troubleshooting steps from IBM support."
  
  Use the following troubleshooting steps:
  Check whether the user is LDAP or auto-managed authentication type. If so, run the following command to change the LDAP configuration:
  
  • chhmcldap -o s --timelimit 30 --bindtimelimit 20
  If log in to the GUI still fails, run the following command:
  
  • chhmcldap -o s --timelimit 30 --bindtimelimit 10
  
  

Best Practices

• User sessions - The following best practices helps avoid performance degradations gradually over a period of time due to increased login sessions as well as security vulnerabilities such as unauthorized access to the active HMC sessions.
• It is a best practice to logoff from HMC UI and then close the browser tab instead of directly closing the tab
• Set Idle session timeout for all the users and not leave the timeout as '0' which leaves it as no timeout.

Upgrading or restoring HMC Version 10 Release 3

Updating, upgrading, and migrating your HMC machine code

Update(s)for HMC V10R3M1051