Hardware Management Console Readme

For use with HMC Version 9 Release 2 M952

Updated: 11 March 2022
(C) Copyright International Business Machines Corp., 2022 All rights
reserved.


      Contents

<#ibm-content> The information in this Readme contains the fix list and
other package information about the Hardware Management Console.

  * PTF MH01916 <#MH01916>
  * PTF MH01917 <#MH01917>
  * Package information <#package>
  * Security fix <#fixes>
  * Known Issues and Limitations <#known>
  * Installation <#install>


    Terminology

*x86* -  This term is used to reference the legacy HMC that runs on
x86/Intel/AMD  hardware for both the 7042 Machine Type appliances and
the Virtual HMC that can run on the Intel hypervisors (KVM, VMWare, Xen).

*ppc64 or ppc64le* - describes the Linux code that is compiled to run on
Power-based servers or LPARS (Logical Partitions)


    PTF MH01916 - HMC V9 R2 952.2 for 7042-CR9 Hardware or vHMC for
    x86_64 hypervisors (5765-HMW)

This package represents an interim fix for the HMC V9 R2 M952 release
for 7042-CR9 hardware or vHMC for x86_64 hypervisors. You can also
reference this package by PTF MH01916 and APAR MB04324. This PTF can be
installed on HMC Version 9 Release 2 M952.

*Note: *This PTF supersedes MH01912.

/Package information/ Package name 	Size 	Checksum (sha1sum) 	APAR# 	PTF#
MH01916_x86.iso 	4184635392 	185fa0ae957c0677754835311569b3362d3693d5
	MB04324 	MH01916
Splash Panel information (or lshmc -V output)

"version= Version: 9
 Release: 2
Service Pack: 952
HMC Build level 2201042318
MH01904 - HMC V9R2 M952
MH01916 - iFix for HMC V9R2 M952
","base_version=V9R2
"



    PTF MH01917 - HMC V9 R2 952.2 for 7063 Machine Types or vHMC for
    PowerVM (5765-HMB)

This package represents an interim fix for the HMC V9 R2 M952 release on
the 7063 machine type or vHMC for PowerVM. You can also reference this
package by PTF MH01917 and APAR MB04325. This PTF can be installed on
HMC Version 9 Release 2 M952.

*Note:* This PTF supersedes MH01913.

/Package information/ Package name 	Size 	Checksum (sha1sum) 	APAR# 	PTF#
MH01917_ppc.iso 	4154644480 	f02bde67bff9d207b20ffa219fc772a3b34144e3
	MB04325
	MH01917
Splash Panel information (or lshmc -V output)

"version= Version: 9
 Release: 2
Service Pack: 952
HMC Build level 2201042318
MH01905 - HMC V9R2 M952
MH01917 - iFix for HMC V9R2 M952
","base_version=V9R2
"



    *Security fix*


  *  Addressed log4j2 vulnerabilities: CVE-2021-45105, CVE-2021-45046
    and CVE-2021-44832


    Known issues and limitations

  * Kerberos server requires to be reconfigured using below CLI after
    update from 950 SP1 and PTFs. After update/upgrade from 950 to any
    newer HMC, if below scenarios via hscroot login are observed,
    reconfigure kerberos on HMC.

      o ls /etc/krb5.conf
        ls: cannot access '/etc/krb5.conf': No such file or directory
      o grep "kerberos.example.com" /etc/krb5.conf
        #   kdc = kerberos.example.com
        #   admin_server = kerberos.example.com

    Recommended CLI commands to reconfigure kerberos :
    *chhmc -c kerberos -s remove –realm <kerberos_hostname> -a
    <kerberos_ip>**
    **chhmc -c kerberos -s add --realm <kerberos_hostname> -a <kerberos_ip>

    *


**Previously released fixes also included in this PTF: *
*
*
***MH01912/**MH01913**
   12/14/22 	


  * Addressed the log4j2 vulnerability: CVE-2021-44228




    Installation

Installation instructions for HMC Version 9 upgrades and corrective
service can be found at these locations:

Upgrading or restoring HMC Version 9
<http://www-01.ibm.com/support/docview.wss?uid=nas8N1022502>

Updating, upgrading, and migrating your HMC machine code
<https://www.ibm.com/support/knowledgecenter/POWER9/p9hai/p9hai_upgrades_enh.htm>

Instructions and images for upgrading via a remote network install can
be found here:

HMC V9 network installation images and installation instructions
<http://www.ibm.com/support/docview.wss?uid=nas8N1022503>