Hardware Management Console Readme

For use with HMC Version 9 Release 2 M952

Date: 05 May 2022
(C) Copyright International Business Machines Corp., 2022 All rights
reserved.


      Contents

<#ibm-content> The information in this Readme contains the fix list and
other package information about the Hardware Management Console.

  * PTF MH01924 <#MH01924>
  * PTF MH01925 <#MH01924>
  * Package information <#package>
  * List of Fixes <#fixes>
  * Installation <#install>


    Terminology

*x86* -  This term is used to reference the legacy HMC that runs on
x86/Intel/AMD  hardware for both the 7042 Machine Type appliances and
the Virtual HMC that can run on the Intel hypervisors (KVM, VMWare, Xen).

*ppc64 or ppc64le* - describes the Linux code that is compiled to run on
Power-based servers or LPARS (Logical Partitions)


    PTF MH01924 - HMC V9 R2 952.4 for 7042-CR9 Hardware or vHMC for
    x86_64 hypervisors (5765-HMW)

This package represents an interim fix for the HMC V9 R2 M952 release
for 7042-CR9 hardware or vHMC for x86_64 hypervisors. You can also
reference this package by PTF MH01924 and APAR MB04330. This PTF can be
installed on HMC Version 9 Release 2 M952.

*Note: *This PTF supersedes MH01912, MH01916, and MH01921.

/Package information/ Package name 	Size 	Checksum (sha1sum) 	APAR# 	PTF#
MH01924_x86.iso 	3713970176 	b572a263b30345be18de85a35c159c2f764e2038
	MB04330 	MH01924
Splash Panel information (or lshmc -V output)

"version= Version: 9
 Release: 2
Service Pack: 952
HMC Build level 2204242355
MH01904 - HMC V9R2 M952
MH01924 - iFix for HMC V9R2 M952
","base_version=V9R2
"



    PTF MH01925 - HMC V9 R2 952.4 for 7063 Machine Types or vHMC for
    PowerVM (5765-HMB)

This package represents an interim fix for the HMC V9 R2 M952 release on
the 7063 machine type or vHMC for PowerVM. You can also reference this
package by PTF MH01925 and APAR MB04331. This PTF can be installed on
HMC Version 9 Release 2 M952.

*Note:* This PTF supersedes MH01913, MH01917, and MH01922.

/Package information/ Package name 	Size 	Checksum (sha1sum) 	APAR# 	PTF#
MH01925_ppc.iso 	3696349184 	75811cdf992171522540fcd5bb17c7bdcf2da1f7
	MB04331
	MH01925
Splash Panel information (or lshmc -V output)

"version= Version: 9
 Release: 2
Service Pack: 952
HMC Build level 2204242355
MH01905 - HMC V9R2 M952
MH01925 - iFix for HMC V9R2 M952
","base_version=V9R2
"



    *General fixes*


  * Fixed an issue that causes the HMC to show high CPU utilization even
    when there are no activities on HMC. Another symptom of this issue
    are possible call home SRCs E23D0503 and E212E302.
  * Fixed an issue causing SRC E212E161 due to too many
    hmcType.properties files getting opened on the HMC.
  * Fixed the issue that causes SRC E35A0021 to be generated reporting
    "/The Solid DB size has exceeded the threshold limit of 80%/".
  * Fix to allow HMC kerberos username different from remote user id to
    be able to login to HMC.
  * Fixed a problem where chprimhmc may fail with one of the following
    errors:
    "/Unable to set this management console as primary. Please check if
    a repair or a code update operation is running on the managed server
    from another console." /and/
    //"Failed to get service operation information from peer./"
  * Fixed an issue where E212E13A may be reported during a network
    upgrade installation.
  * Fixed some issues causing harmless error messages to be written to
    the HMC messages log during each restart of the HMC.  These messages
    occur on model 7063 HMCs that are at V9R2M951 or higher.
  * Allow custom password policies to be retained across HMC updates. 
  * Fixed an issue with the IBM service postgresql database rebuild tool
    when HMC language is non-English.
  * Fixed an issue where SNMP Trap Notifications are not sent when the
    SRC is missing from IBM docs.
  * Fixed the Kerberos client configuration issue that impacted the
    previous V9R2M952 iFixes: “/Kerberos server requires to be
    reconfigured using below CLI after update from 950 SP1 and PTFs.//
        //Recommended CLI commands ://
        //chhmc -c kerberos -s remove –realm <kerberos_hostname> -a
    <kerberos_ip>//
        //chhmc -c kerberos -s add --realm <kerberos_hostname> -a
    <kerberos_ip/”
    There is no need to reconfigure kerberos after apply of this PTF.


    *Security fixes*


  * Addressed openssl vulnerabilities: CVE-2021-3712, CVE-2021-23841,
    CVE-2021-23840 and CVE-2022-0778
  * Addressed the bind vulnerability:  CVE-2021-25214
  * Addressed IBM JDK vulnerabilities: CVE-2022-21341, CVE-2022-21294,
    CVE-2022-21293 and CVE-2022-21248
  * Addressed httpd vulnerabilities: CVE-2022-22720, CVE-2021-34798 and
    CVE-2021-39275

**Previously released fixes also included in this PTF: * *
*MH01921/MH01922**
**03/11/22*
	


  * Fix for migration vNIC Manual mappings selecting the incorrect VIOS
    Partitions when user specified only VIOS Partition names information.
  * Automatically clean up core files present under /usr/lib64/power9/
    directory that can cause SRC E35F0020 to report.
  * Fixed the event reporting functionality to provide appropriate
    details of the failure of call home in generating PMH/Salesforce
    tickets.
  * Fixed a UI windows sizing issue with the Install Corrective Service
    window that would shrink down with a long scroll bar after clicking
    next to progress to the "Select Service Package" panel when run on
    the local console session.
  * Fixed an intermittent issue causing the selected LPAR Partition menu
    to not list any actions on the HMC GUI and requiring an HMC reboot
    to recover.
  * Convert E2FF4600 to informational SRC.
  * Fix an intermittent issue where the local console session boots to
    the "Initialization in Progress" page and does not present the login
    screen until a user closes the window.
  * Fixed an issue that caused the reporting of SRC E35A0063 repeatedly
    during the VIOS installation.
  * Fixed an issue that caused SRC E35A0074 and E35A0075 to report.
  * Fixed an issue where callhome may fail on the first HMC boot up
    after an upgrade.  A restart of the HMC resolves the issue.
  * Fixed an issue that causes callhome of SRC E23D040C due to core dump
    of the actzzmon process.
  * Removed extraneous message "job returned error: No updates
    available" after performing a successful firmwre upgrade operation
    to a new release from the GUI.
  * Fixed an incorrect report of heap threshold exceeded resulting in
    reporting of SRC E35A0043.
  * Fixed an issue where the lslic output text would be missing from
    Call Home data.
  * Changed screen saver to a blank screen for 7063-CR2 HMCs to prevent
    locking the KVM function in BMC.
  * Fixed a rare issue that caused call home SRC E3321032 to be reported
    when many service events come into the HMC at the same time.
  * Fixed an issue that allowed root access by an HMC user profile.

*MH01916/MH01917*
01/11/22
	


  * Addressed log4j2 vulnerabilities: CVE-2021-45105, CVE-2021-45046 and
    CVE-2021-44832

**
****MH01912/**MH01913**   
12/14/22
	


  * Addressed the log4j2 vulnerability: CVE-2021-44228




    Installation

Installation instructions for HMC Version 9 upgrades and corrective
service can be found at these locations:

Upgrading or restoring HMC Version 9
<http://www-01.ibm.com/support/docview.wss?uid=nas8N1022502>

Updating, upgrading, and migrating your HMC machine code
<https://www.ibm.com/support/knowledgecenter/POWER9/p9hai/p9hai_upgrades_enh.htm>

Instructions and images for upgrading via a remote network install can
be found here:

HMC V9 network installation images and installation instructions
<http://www.ibm.com/support/docview.wss?uid=nas8N1022503>