Service Pack 3 for HMC Version 7 Release 7.2.0

This package contains fixes for HMC Version 7 Release 7.2.0. It updates your HMC to HMC Version 7 Release 7.2.0 Service Pack 3. You must install this image on top of the HMC V7 R720 Recovery (MH01233) or Update (MH01234) installation, with or without Service Packs. You can also reference this package by APAR MB03548.

This package includes the following fixes and enhancements:

General

• Added Filtering to catch illegal characters in viosvrcmd VIOS commands.
• Fixed an issue with lshwres not returning the correct FC topology.
• Fixed a problem where some backing device values would not be displayed in lshwres.
• Updated timeout for FSP reboot during firmware update to accommodate for increased time to reach ready state on some POWER7 systems.
• Added a feature where only partitions in the access list for a vSwitch can be activated with a virtual Ethernet adapter that is configured to use that vSwitch.
• Prevent the lshwres ?r virtualio ?rsubtype scsi ?level lpar command from failing if a partition is deleted after the command is issued, but before it completes.
• Added the lsiotopo command to display the physical I/O slot topology of a managed system. This command is useful for displaying the physical I/O slot topology of multi-node managed systems.
• Enhanced pedbg to collect all ServiceRM cores.
• Fixed data replication to include LDAP scope.
• Enhanced performance for the lshwres command during collection of virtual SCSI backing device/topology.
• Enhanced the lshmcldap ?r config command to display scope value.
• Fixed a problem where a HCA GUID could be incorrectly unassigned during lpar activation.
• Remove unnecessary AMD redundancy check panels when CEC is powered off on 9117-MMB/MMC and 9179-MHB/MHC systems.
• Fixed a timing problem that coud cause RMC capabilities to fail to set correctly.
• Fixed an issue where files from a prior VPD survey for a given managed system were being inadvertently included as part of the current VPD survey for that system.
• Fixed an issue of loss of profile configuration info while reading and writing to FSP.
• Fixed an issue of recovery state while doing the system credential operations.
• Fixed an issue where a user was able to delete all the profiles for a Partition including Default.
• Fixed a problem where periodic refresh timers for the credential passwords used to upload PM, heartbeat and inventories to the IBM Service Data Receiver may be erroneously deleted as new refresh timers are added. When the unrefreshed passwords eventually become stale there may be transient upload errors and unnecessary re-enrollments of the HMC, CEC and/or LPARs to establish new credentials.
• CLI lshcmldap -r user shares the same access task "View LDAP Configuration" as lshmcldap -r config.
• Fixed an issue where managed system goes into recovery state after encountering a checksum read error while reading FSP data.
• Fixed issues with the CSR generated on the HMC so it no longer is deemed invalid.
• Fixed a problem with ServiceRM abnormal termination to prevent call home of E23D040A.
• Added the more command as supported in the restricted shell.
• Fixed an issue with the mount command displaying virtual filesystems mounted twice.
• Added the ability to allow a user to query the whole utilization data set instead of a few records at a time.
• Fixes a problem in which mpio and vlanbridge values specified by user during resumption of suspended partition is ignored.
• Fixed issue with ignoring the supplied remote directory provided during NFS mount directed scheduled backup of HMC data.
• Fixed issue with losing profile data after performing a Recover or Restore operation.

Back to top

Repair and Verify

• Various interface and button enablement logic errors occur whenever Open MES/Close MES/Display MES actions are triggered. Within Display MES, the Date Opened field is not long enough to display the entire string, and the Next button within Close MES remains enabled when the table is empty. Changes were made to address these issues.
• Fixed a problem of R&V concurrent maintenance on some FRUs on expansion power frame on POWER5 595/575 systems.
• Enhanced the add enclosure panels when adding a 5803 or 5791 I/O drawer to an expansion frame to differentiate between the F1 and F2 location codes.
• Enhanced PU Book repair for model FHB to include a check of the ESD gasket.
• Fixed an incorrect error message HSCL3087 shown when trying to repair a BPF on POWER6 595 concurrently.
• Added instructions for Front Cover Removal Tool to the repair procedures for 9117-MMB and 9179-MHB machine type-models.
• Fixed an issue where B70069xx SRCs encountered during a repair/service action were not being properly suppressed.
• Fixed an issue with the PBMesUseWciiInstallProcedureComplete panel treating YES/NO radio button selection the same, when it should be delaying the procedure if the user has selected NO.
• Fixed an issue where repairs/service actions on a 5791 or 5798 IO enclosure would not succeed due to a failure to power on the cage by removing redundant calls to powerOffCage and powerOnCage.
• Various readability improvements to Repair and Verify Exchange FRU procedure for SCM, Processor Card and Midplane on 9117-MMB/MMC and 9179-MHB/MHC systems.
• Robustness improvement to prevent an issue where repairs/service actions on a 5791 or 5798 IO enclosure route to the incorrect FRU type for a given location code due to bad BPC cage data.
• Multiple panel content/image issues exist within the MRRackMidplaneInstall and remove procedures.
• Add SMP Shield remove/install steps to Repair and Verify procedures on 9117-MMB/MMC and 9179-MHB/MHC systems.
• Fixed a problem that occured when executing exchange FRU procedure for PCI shuttle assembly on 5796 or 7314 I/O expansion units on system with eight or more expansion units.

Security

• "HMC 'man' command allows injected HTML": Closed a vulnerability in which an authorized user could create a link injection attack via the use of the man command.
• Fixed a security vulnerability with the HMC help content.
• Added validation to the viosvrcmd command to ensure that the specified partition is a Virtual I/O Server partition.
• Fixed a security vulnerability with cross frame scripting.
• Disabled autocomplete feature.
• Fixed a security vulnerability with frame injection.
• Fixed issue where opening an applet on 9960 port, SSL Anonymous Cipher Suites were getting added.

Notes:

• The HMC Install Corrective Service task now allows you to install corrective service updates by using the ISO of these updates. You can download these ISO image files for the HMC, and then use the ISO image file to install the corrective service update. You no longer need to burn CD-R or DVD-R media to use the ISO image file to install corrective service.
• If you choose to burn this ISO image to a disk, you must use DVD-R media.
• Installation methods
  • To install the updates over the network, select the .iso file in the Select Service Package panel of the Install Corrective Service utility.
  • To use USB flash media to install updates, copy the .iso file to the flash media, and then select the file when prompted.
  • The updhmc command line command has also been modified to use the .iso file for installing corrective service updates. To use the command, follow the syntax in this example:
    updhmc -t s -h <myservername> -f </home/updates/corrrective_service.iso> -u <HMC_username> -i
  In all cases, the HMC application extracts the files needed to install the corrective service.

Installation instructions for HMC V7 R.7.x updates and fixes can be found here:

Installation methods for HMC Version 7 updates and fixes

Recovery media upgrade and installation instructions for HMC V7 R.7.x can be found here:

Upgrading or restoring HMC Version 7