Hardware Management Console Readme For use with Version 8 Release 8.6.0 Service Pack 2 Updated: 8 September 2017 (C) Copyright International Business Machines Corp., 2017 All rights reserved. Contents <#ibm-content> The information in this Readme contains the fix list and other package information about the Hardware Management Console. * PTF MH01716 <#MH01716> * Package information <#package> * Known Issues <#known> * List of fixes <#fixes> * Installation <#install> PTF MH01716 This package includes fixes for HMC Version 8 Release 8.6.0 Service Pack 2. You can reference this package by APAR MB04101 and PTF MH01716. This image must be installed on top of HMC Version 8 Release 8.6.0 Service Pack 2 (PTF MH01690) with or without additional fixes. *Note*: IBM recommends installing this PTF for important fixes related to SP2 (PTF MH01690). /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01716.iso 1499568128 5756f5830537abea956a2465de0946a964d0f147 MB04101 MH01716 Splash Panel information (or lshmc -V output) "version= Version: 8 Release: 8.6.0 Service Pack: 2 HMC Build level 20170821.1 MH01716: Fix for HMC V8R8.6.0 SP2 (08-21-2017) ","base_version=V8R8.6.0 " Known Issues:* * *_Special Install Instructions_* When installing PTF MH01716 using ftp or removeable media through the Classic GUI "Install Corrective Service" task, the GUI hangs and does not proceed to completion The last progress message shown is: Verifying Certificate Information Authenticating Install Packages Installing Packages --- Installing ptf-req .... --- Installing baseOS updates .... If the task is currently hung, remote users can recover by clicking the upper right X in the pop-up window for the install task. This will disconnect the user from the session. Login in as the same user and reconnect to the disconnected session. The pop-up will return. Verify it shows the completion of the task. Proceed with rebooting the HMC. For other situations wait at least 10 minutes to allow the task to complete then reboot the HMC. After the reboot verify the fix shows installed in the lshmc -V output. Workaround: Use the Enhanced UI or CLI updhmc through remote ssh. List of fixes *Security Fixes* * Fixed HTTPD vulnerabilities: CVE-2016-0736, CVE-2016-2161 and CVE-2016-8743 * Fixed libtirpc vulnerability: CVE-2017-8779 * Fixed kernel vulnerabilities: CVE-2015-8374, CVE-2015-8844, CVE-2015-8845, CVE-2015-8956, CVE-2016-2053, CVE-2016-2117, CVE-2016-2847, CVE-2016-3156, CVE-2016-5828, and CVE-2016-10229 * Fixed BIND vulnerabilities: CVE-2017-3136, CVE-2017-3137, CVE-2017-3138, CVE-2017-3139, CVE-2017-3142 and CVE-2017-3143 * Fixed IBM WebSphere Application Server vulnerability: CVE-2017-1194 *General fixes* * Enabled support for redundant MSPs for partition migration and validation operations and for virtual NIC failover. These functions were disabled after installing SP2 (PTF MH01690). Symptoms include: o vNIC adapters existing prior to update are not displayed in the GUI if they are defined with more than one backing device. o The ability to add additional backing devices to new vNIC adapters created after update is missing in the GUI. o Activation of partition(s) fail with the following error: "/HSCLAB30 The managed system does not support virtual NIC failover./" if the profile contains vNICs that have multiple backing devices defined. o Redundant MSP usage for partition migration and validation operations is not possible. * Enabled support for JNLP based VTERMs. This function was disabled after installing SP2 (PTF MH01690). Without this fix newer browsers may not launch the legacy vterm applet. * Fixed an issue that caused the enhanced GUI to fail with a 500 "/Unknown internal error/" when displaying partitions with virtual NIC adapters and can cause some options for modifying or deleting virtual NIC adapters to be grayed out or missing. This issue only occurs when one of the virtual NIC backing devices has an invalid Virtual I/O Server ID of 65,535. * Prevent the generation and call home of SRC E3550800 due to a timing issue. * Corrected the feature code and CCIN shown on the HMC for the adapter with feature code 57D8 (IBM PCIe3 x8 Cache SAS RAID Internal Adapter 6Gb). * Fixed an issue that caused the updhmc –t nfs command to fail intermittently with the error "/An error was detected while mounting the remote server. Verify the parameters have been entered correctly and try the operation again/." * Fixed a problem that always caused the mkauthkeys command to silently fail when the -u option was specified. This issue prevents users from adding SSH keys for other users but does not prevent a user from adding an SSH key for the user they are currently logged in as. * Fixed reference code links in the enhanced GUI to open a window containing reference code details when clicked. * Fixed a problem preventing the Recover Partition Data task from restoring the maximum and reserved processing unit settings for shared processor pools. * Fixed an issue where enabling inbound VPN connections on the HMC always fails. * Fixed an issue causing the generation and call home of SRC E3321007 after updating the HMC. This issue also can cause data collection for other call home events to fail, preventing the events from being called home or from sending the necessary data. * Updated the certificate expiration date for the vterm applet. Installation Installation instructions for HMC Version 8 upgrades and corrective service can be found at these locations: Upgrading or restoring HMC Version 8 Installation methods for HMC Version 8 fixes Instructions and images for upgrading via a remote network install can be found here: HMC V8 network installation images and installation instructions