Hardware Management Console Readme For use with HMC Version 9 Release 1 M941 Date: 11 November 2020 (C) Copyright International Business Machines Corp., 2020 All rights reserved. Contents <#ibm-content> The information in this Readme contains the fix list and other package information about the Hardware Management Console. * PTF MH01867 <#MH01867> * PTF MH01868 <#MH01868> * Package information <#package> * General and Security fixes <#fixes> * Installation <#install> Terminology *x86* - This term is used to reference the legacy HMC that runs on x86/Intel/AMD hardware for both the 7042 Machine Type appliances and the Virtual HMC that can run on the Intel hypervisors (KVM, VMWare, Xen). *ppc64 or ppc64le* - describes the Linux code that is compiled to run on Power-based servers or LPARS (Logical Partitions) PTF MH01867 HMC V9 R1.941.3 - for 7042 Machine Types or vHMC for x86 hypervisors (5765-HMW) This package includes an interim fix for the HMC V9 R1 M941 service pack. You can also reference this package by PTF MH01867 and APAR MB04258. This interim fix can be installed on an existing HMC Version 9 Release 1 M941 Service Pack (PTF MH01859) installation with or without additional fix packs. *NOTE*: This PTF supersedes MH01862 and MH01864. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01867_x86.iso 4213972992 886ee016b1ae5b27d5a9d88b8c794eb600927905 MB04258 MH01867 Splash Panel information (or lshmc -V output) "version= Version: 9 Release: 1 Service Pack: 941 HMC Build level 2010221041 MH01859 - HMC V9R1 M941 MH01867 - iFix for HMC V9R1 M941 ","base_version=V9R1 " PTF MH01868 HMC V9 R1.941.3 - for 7063 Machine Types or vHMC for PowerVM (5765-HMB) This package includes an interim fix for the HMC V9 R1.941.0 service pack. You can also reference this package by PTF MH01868 and APAR MB04259. This image can be installed on an existing HMC Version 9 Release 1 M941 Service Pack (PTF MH01860) installation with or without additional fix packs. *NOTE*: This PTF supersedes MH01863 and MH01865. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01868_ppc.iso 4208230400 febb6ddfeec4d61d1f81b02f0d774864a5fe6cf7 MB04259 MH01868 Splash Panel information (or lshmc -V output) "version= Version: 9 Release: 1 Service Pack: 941 HMC Build level 2010221041 MH01860 - HMC V9R1 M941 MH01868 - iFix for HMC V9R1 M941 ","base_version=V9R1 " *General fix* * Fixed an issue where installing a new HMC certificate required an additional reboot of the HMC for the IBM i 5250 proxy (port 2301) to pick up the new certificate. *Security fix* * Addressed the ICU vulnerability: CVE-2020-10531 ***Previously released fixes also included in this PTF: * *MH01864/MH01865* 09/18/20 * Fixed an issue where some of the HMC services may not start and users can experience '/Service unavailable/' message on the HMC GUI for templates and OS images pages. The problem can occur when the HMC is powered-on after an abnormal power-off or after a backup/restore is performed. * Fixed an issue with the GUI where a server with an all numeric serial number was incorrectly displayed as a locale formatted number instead of text. * Retain rsyslog settings during save upgrade. * Fixed an issue that caused the local HMC console to be unuseable, showing only a black screen and not allowing a reset to the display configuration. * Fixed a a UI error attempting to display interfaces details when a bond adapter is configured. /Task error ACT01503/ with /ACT01504 /is returned to the user. SRCs E3550956 and E3550037 are logged to service events when clicking edit on the bond adapter. * Fix the UI when removing a "virtual network" that is an additional vlan on an existing trunk to ensure the vlan is also elected from the SEA. * Fixed an issue with bkconsdata hanging while connecting to SFTP servers with various SFTP password prompts. * Fixed an issue where deleting a client partition with "Cleanup associated Virtual IO Server mappings" selected resulted in HMC removing a vfc server adapter used by another partition. The problem only occurs if the client partition has an incorrect client adapter configuration that does not match the vios server adapter configuration. * Fixed vHMC MTMS parsing logic for primary HMC arbitration to handle virtual HMCs uniquely to prevent the chprimhmc command error "/Failed to get service operation information from peer/" and subsequent E3325009 reporting. * Fixed an issue that prevented a user from accepting the License agreement when a VIOS is in a busy state only during Deploy System template execution. * Fix for detecting degraded RAID on a CR1 that prevented the Serviceable event FQPSPSD0021M from reporting. * Updated the server image displayed for the the POWER9 G models. * Adressed NTP vulnerabilities: CVE-2020-11868 and CVE-2020-13817 * Addressed bind vulnerabilities: CVE-2020-8616 and CVE-2020-8617 * MH01862/MH01863* 07/24/20 * Cloud connector start command has been updated to support Kerberos and LDAP authentication for proxy servers. New option "*--auth ldap | digest-md5 | kerberos | basic*" has been added to *chsvc* command. * Fixed an issue with excessive logging of HSCLC300 messages causing local file system to fill. SRCs E212E136 and E212E13D are reported. * Fixed an issue where DHCPD service may terminate after an NTP time adjustment. Symptoms include servers managed over a private dhcpd network toggling state between no connection/connecting/connected every 10 minutes, * Fixed an issue where SRC E212E114 and E35A0010 may be reported after ESA transmissions, The issue is more common on HMCs with minimum amount of memory (8GB) managing over 100 partitions. * Fixed an issue where the Manage Outbound Connectivity, Configure, Test Connection task incorrectly reports a failure when a ssl proxy with a password is configured, even though the connection is valid and working for ESA * Fixed an issue that caused mismatching kernel version to be displayed following an Update from 930 to 940. * Fixed an issue where HMC shows an incorrect reference code value of “undefined” after an immediate restart on VIOS partitions. This issue does not impact AIX/Linux/IBM I. * Fixed the failure of LDAP data replication to HMC releases prior to V9R1M920. * Fixed the unsuccessful periodic transmissions of service data (heartbeat, vpd, etc) when the HMC hostname is changed. * Enhanced pedbg -c -q 8 option to collect only cloud connector logs for debugging and reporting the cloud connector specific issues. * Fixed the scenario where the user was unable to see "All systems" Resources resulting in error message "/The HMC information could not be displayed because of an error while retrieving the information./" The GET of all managed systems REST API call failed loading the GUI due to a CEC whose memory defragmentation status is either "NO change" or "Partial Success" or "Insufficient free LMBs" or "Partial Mirroring Not Supported" * Fixed a problem with I/O updates that would not install from DVD or the mountpoint repositories. * Fix to FRU repair logic when repair is launched and canceled from non-primary HMC to prevent future missed call home events for managed systems. * Fixed an issue that caused the task log to show a dynamic operation as completed but no actual DLPAR was performed. * Fixed an issue where launching the Shared Storage Pool task fails with "/Error launching task. An internal error occurred. Please contact your service administrator./" * Addressed httpd vulnerabilities: CVE-2018-17199 and CVE-2018-1301. Installation Installation instructions for HMC Version 9 upgrades and corrective service can be found at these locations: Upgrading or restoring HMC Version 9 Updating, upgrading, and migrating your HMC machine code Instructions and images for upgrading via a remote network install can be found here: HMC V9 network installation images and installation instructions