Hardware Management Console Readme For use with HMC Version 9 Release 2 M951 Updated: 21 July 2021 (C) Copyright International Business Machines Corp., 2021 All rights reserved. Contents <#ibm-content> The information in this Readme contains the fix list and other package information about the Hardware Management Console. * PTF MH01892 <#MH01892> * PTF MH01893 <#MH01893> * Package information <#package> * General and Security fixes <#fixes> * Installation <#install> Terminology *x86* - This term is used to reference the legacy HMC that runs on x86/Intel/AMD hardware for both the 7042 Machine Type appliances and the Virtual HMC that can run on the Intel hypervisors (KVM, VMWare, Xen). *ppc64 or ppc64le* - describes the Linux code that is compiled to run on Power-based servers or LPARS (Logical Partitions) PTF MH01892 - HMC V9 R2 951.2 for 7042-CR9 Hardware or vHMC for x86_64 hypervisors (5765-HMW) This package represents an interim fix for the HMC V9 R2 M951 release for 7042-CR9 hardware or vHMC for x86_64 hypervisors. You can also reference this package by PTF MH01892 and APAR MB04284. This PTF can be installed on HMC Version 9 Release 2 M951. *Note*: This PTF supersedes MH01889. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01892_x86.iso 4003418112 8b57fc65f0d6a906d0557fcb0badb3df69d67add MB04284 MH01892 Splash Panel information (or lshmc -V output) "version= Version: 9 Release: 2 Service Pack: 951 HMC Build level 2106010018 MH01873 - HMC V9R2 M951 MH01892 - iFix for HMC V9R2 M951 ","base_version=V9R1 " PTF MH01893 - HMC V9 R2 951.2 for 7063 Machine Types or vHMC for PowerVM (5765-HMB) This package represents an interim fix for the HMC V9 R2 M951 release on the 7063 machine type or vHMC for PowerVM. You can also reference this package by PTF MH01893 and APAR MB04285. This PTF can be installed on HMC Version 9 Release 2 M951. *Note*: This PTF supersedes MH01890. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# MH01893_ppc.iso 3985971200 eb0330d559c63ec7001f6c1ff138924eb3c2d750 MB04285 MH01893 Splash Panel information (or lshmc -V output) "version= Version: 9 Release: 2 Service Pack: 951 HMC Build level 2106010018 MH01874 - HMC V9R2 M951 MH01893 - iFix for HMC V9R2 M951 ","base_version=V9R1 " *General fixes* * Fixed an issue where virtual hmcs sent and logged redundant notifications/reasons for service events that cannot be called home to IBM service with message "/Machine type indicates the failing system is a virtual HMC, so the problem will not be Called Home./" * Fixed an issue where the HMC is unable to start up completely, instead hanging at the grey "grid screen' with no login, due to a bad read of a log file that occurred from an earlier abnormal termination. * Fixed an issue where the Manage Outbound Connectivity, Test Connection fails when a proxy is configured and a previous successful callhome has occurred. Note: this issue impacts only the testing of the callhome path, not the actual callhome. * Fixed an issue where Electronic Service Agent (ESA) files are not deleted after being transmitted to IBM causing root file system ("/") to exceed 85% used and E212E136 to be reported. * Fixed an issue that can cause the HMC to lose connections to all servers for a brief time with service events E2FF1409 and E23D040A being reported. * Fixed an issue where deleting multiple vfc adapters from a shutdown partition fails to delete all the respective vfc adapters from the client. * Fixed an issue where, after formatting a USB flash drive with the specified label, the HMC may show an incorrect empty value for the label. * The timestamp format used in the lssvevents -t hardware output has been changed to the pre-950 format with a time zone added to the time string. * Fixed an issue where server hardware discovery information initiated by one HMC is not immediately available on a second HMC. * Fixed an issue where attempting to create a new network bridge fails due to hmc incorrectly not showing any available backing devices. This issue impacts older POWER7 servers only. * Fixed a problem that caused the message "/Active Memory Mirroring for Hypervisor activation code is required to use memory mirroring./" to be always shown on the GUI General Settings panel for POWER9 servers that support memory mirroring with an activation code and an activation code has already been entered. * Fixed an issue that would constantly cause E3D46FFF due to open support tickets on the HMC. * Fixed an issue where authorized service representatives are not able to update model type and serial number using the normal documented procedure in IBM Documentation after a planar replacement on a 7063-CR1 HMC. * Fixed an issue where most UI tasks fail with "/Error launching task - REST0004 UNKNOWN ERROR/" when a shared mode SRIOV Adapter is in a "not functional” state and the physical slot location in which the card was last operational cannot be detected on the server. * Fixed an issue where *saveupgdata *command may fail with rc 1 due to rpm database issue. * Fixed an issue that can cause SRC E212E161 to be reported for HmcRmc.properties. * Fixed an issue that resulted in /var/hsc/log/snmp_subagent.log being full when legacy SNMP traps for virtual network statistics are enabled. * Fixed an issue with the *migrlpar --vniccfg* option to synchronize the new VNIC configuration to client partition's last valid configuration and last activated profile (if applicable). * Fixed incorrect display of column information such as reference code or OS Type on th epartition tabular view when user attempts to sort/filter any column. * Fixed an issue with the *lssyscfg -r sys -F* command where no value was output for the state_detail attribute causing issues with spreadsheet views of the data. * Fixed an issue where various Shared Storage Pool (SSP/Cluster) related operations may fail with " /java.lang.NullPointerException/". A reboot of the HMC may temporarily resolve the issues. * Fixed an issue that can cause the HMC to lose connections to all servers for a brief time with service events E2FF1409 and E23D040A being reported. This will cause all running server tasks such as server firmware upgrade to fail. Security Fixes * Addressed restricted shell vulnerability: CVE-2021-29707 * Fixed an issue where the external links on the HMC logon page do not suppress "referer" information. This may be reported by scan tools as CWE-200 or SI-11. * Addressed openSSL vulnerability: CVE-2021-3449 * After apply of this PTF, the webui cipher list is reset to the default values. Users that have modified the cipher list should record the ciphers prior to apply of the PTF, then restore the ciphers after the mandatory reboot. The commands *lshmcencr *and *chhmcecnr *can be used to record or modify ciphers. *Command line changes * * The commands *alias *and *unalias *have been removed from restricted shell. * The restricted shell *sed *command has been modified to restrict certain escape characters *Previously released fixes also included in this PTF: * * MH01889/MH01890* 04/23/21 * Fixed an issue that caused GUI to become unusable with a blank window, after a remote login from a browser set to a language not supported by the HMC. Symptoms include logon attempts not completing with URL bouncing back and forth from /dashboard to /dashboard/#home/getting-started. * Fixed Guided Setup Wizard Config to automatically reboot and restart the HMC services for certificate replacement. * Fixed a rare timing issue that caused the CPU utilization for a partition that had just been migrated to a managed system in an Enterprise Pool (EP) 2.0 to be incorrectly high for the first minute. This issue is rare and can only occur when the HMC managing the destination managed system is at V9.2.950 + PTF MH01883/MH01884 and the partition migration finishes in under 2 minutes. This issue can cause significant EP 2.0 metered usage to be charged. * Fixed the resource utilization table on the PCM Dashboard to prevent the Utilized Memory column from showing up twice for systems not supporting virtual persistent memory. * Fixed an issue where some events are called home twice creating duplicate serviceable events. Primary impact is on B****504 events. Installation Installation instructions for HMC Version 9 upgrades and corrective service can be found at these locations: Upgrading or restoring HMC Version 9 Updating, upgrading, and migrating your HMC machine code Instructions and images for upgrading via a remote network install can be found here: HMC V9 network installation images and installation instructions