Hardware Management Console Readme *Version 10 Release 1 Maintenance 1021 (V10 R1 M1021) README* Updated: 08 May 2024 (C) Copyright International Business Machines Corp., 2024 All rights reserved. Contents <#ibm-content> The information in this Readme contains the fix list and other package information about the Hardware Management Console. * Terminology <#term> * PTF MF70301 HMC V10 R1M1021.0 for vHMC for x86_64 hypervisors (5765-VHX) <#MF70301> * PTF MF70302 HMC V10 R1M1021.0 for 7063 Hardware or vHMC for PowerVM (5765-HMB) <#MF70302> * Installation note <#manda> * Backup and Restore with HMC 1021 <#insnotes> * Enhancement and New Feature <#enhance> * Known Issues and Limitations <#known> * List of fixes <#fixes> * Best Practices <#best> * Installation <#install> Terminology *x86* - This term is used to reference the Intel hypervisors (KVM, VMWare, Xen) on which Virtual HMC can be installed. *Note:* HMC V10R1 release for x86 is not supported on bare metal (7042 hardware appliances). * ppc64 or ppc64le* - describes the Linux code that is compiled to run on Power-based servers or LPARS (Logical Partitions) PTF MF70301 HMC V10 R1 M1021 - for vHMC for x86_64 hypervisors (5765-VHX) This package represents a service pack image that can be used to update the HMC from HMC V10 R1 M1010 release. You can also reference this package by APAR MB04362 and PTF MF70301. This image can be installed on top of HMC V10 R1 M1010 with or without other PTF or Service Packs before it. * Service packs are cumulative and as such will include all the fixes for the PTFs released up to and including the last service pack(s) for this HMC version. Please read the individual Readme files for each PTF to see the list of fixes. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# HMC_Update_V10R1M1021_x86.iso 5152634880 01695001b0787fe5b2fbf448955be1fff3678ea2 MB04362 MF70301 Splash Panel information (or lshmc -V output) "version= Version: 10 Release: 1 Service Pack: 1021 HMC Build level 2210191138 MF70301 - HMC V10R1 M1021 ","base_version=V10R1 " PTF MF70302 HMC V10 R1 M1021 - for 7063 Hardware or vHMC for PowerVM (5765-HMB) This package represents a service pack image that can be used to update the HMC from HMC V10 R1 M1010 release. You can also reference this package by APAR MB04343 and PTF MF70302. This image can be installed on top of HMC V10 R1 M1010 with or without other PTF or Service Packs before it. * Service packs are cumulative and will include all the interim fixes for the PTFs released up to and including the last service pack(s) for this HMC version. Please read the individual Readme files for each PTF to see the list of fixes. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# HMC_Update_V10R1M1021_ppc.iso 5163558912 77717ba20ffb580d00e0caab62e5d5401b76ddab MB04363 MF70302 Splash Panel information (or lshmc -V output) "version= Version: 10 Release: 1 Service Pack: 1021 HMC Build level 2210191138 MF70302 - HMC V10R1 M1021 ","base_version=V10R1 " Installation Note This PTF is mandatory if the HMC manages any Enterprise BMC based managed systems in a Power Enterprise Pool 2.0. Without this PTF, the HMC will lose all Power Enterprise Pool 2.0 information for any Enterprise BMC based managed systems after the HMC is restarted. Backup and Restore with HMC 1021 If a HMC critical console backup is taken after installing M1021, the restore process requires installing the PTF MF69186/MF69187 on top of Recovery image V10R1M1010 with or without additional PTFs before restoring M1021 or higher to be successful. If the PTF is not installed the following error will occur: /"/sbin/reboot:symbol lookup error: /sbin/reboot: undefined symbol: bus_wait_for_units_new, version SD_SHARED" / Enhancement and New Feature * Enhanced the *lscod -m -c metered -t cap* command to display the time remaining before a Power Enterprise Pool 2.0 membership CoD code expires. Known Issues and Limitations * In 1020 and higher a new Event Notification field was introduced with 3 scheduled operations settings: o None o All scheduled operations o Failed scheduled operations The prior setting, if it was selected, of "All scheduled operations" is not persisted across updates to V10R1M1020 or greater nor upgrades to V10R2M1030. Instead the setting defaults to the None option. *Workaround:* Re-save the desired setting after update or upgrade to receive notifications of scheduled operations. * If the chhmcencr command has been used to remove any TLS 1.3 ciphers from the HMC Web user interface, those changes are lost when the HMC is updated or upgraded and will need to be made again after the HMC update or upgrade. * The reset of an expired password of a Kerberos user is not supported in multi-realm configuration setups since release V9 R2 950. When such users try to login using GUI, they will get message as Invalid credential. Upon login from CLI, users may see below or similar messages. /Password:// //Password expired. Change your password now.// //Current password:// //Current Password:// //Password change failed. Server message: Old password not accepted.// //Current Password:// //Password change failed. Server message: Old password not accepted.// //Current Password:// //New password:// //Retype new password:// //Password change failed. Server message: Old password not accepted./ *Circumvention**:* Change or reset the password first, then log into HMC. List of fixes *General fixes* * Fixed the task log entry for the wrong user id when the vFC storage add/remove is done. * Increased the width of the SR-IOV physical port selection box and made the Physical Port Location Code column in the table resizable on the Add Virtual NIC GUI page. * Fixed the cause of call home SRC E212E114 while using the HMC local GUI browser. * Fixed an issue which prevented viewing IO device update details through the wizard when targeting multiple systems resulting in call home SRC E302F9C0. * Fixed an issue with *lshmcldap *while retrieving remote managed users for LDAP that returned error "/java.lang.ClassCastException:java.util.Vector incompatible with java.lang.String/". * Fixed intermittent disconnection issues when callhome is used with outbound connectivity with proxy to connect to IBM. * Fixed LDAP user authentication via backup uri when primary uri is not reachable. * Fixed nslcd service error log due to removal of LDAP via HMC command. * Fixed the following two intermittent issues with Logical partitions on the HMC GUI: 1. The Actions button of selected Partitions returns "/There is no action available for resource(s) you've selected/" error message. 2. No details listed after clicking on the Partition and the pop-up menu returns error. * Fixed the selection of the "any" default gateway device option from associating to the wrong interface. * Fixed issue during serviceable event data sync between HMCs where an initial failure syncing data would prevent further data in that attempt to sync. * Fix ping command issue after restoring HMC critical console data. * Fixed an issue that causes the "Add Virtual Network" operation to fail while modifying the load balance field. * Fixed an issue causing Call Home to fail from some countries when specified as part of the Customer Information panel. * Increased timeout of firmware update from 2 to 4 hours to handle timeout issues that caused code update to fail. * Fixed Serviceable Events Manager or Events Manager for Call Home to display serviceable events if the browser is set to a locale for a language that HMC does not support. * Fixed HTTP error "/500: Unknown internal error/" while loading GUI dashboard. * Fixed an issue that caused network boot for IBM i partitions from the GUI to fail. * Resolve issue of reported E35F0013. *Security fixes* * Addressed Java vulnerabilities: CVE-2022-21496, CVE-2022-21434, CVE-2022-21541, CVE-2022-21540 and CVE-2021-41041 * Addressed bind vulnerability: CVE-2021-25219 * Addressed Kernel vulnerability: CVE-2022-1012 * Addressed httpd vulnerabilities: CVE-2021-3319, CVE-2021-44224 and CVE-2020-13950 * Fixed Local File Inclusion issue found during fetching of help content URL. Best Practices * User sessions - The following best practices helps avoid performance degradations gradually over a period of time due to increased login sessions as well as security vulnerabilities such as unauthorized access to the active HMC sessions. o It is a best practice to logoff from HMC UI and then close the browser tab instead of directly closing the tab o Set Idle session timeout for all the users and not leave the timeout as '0' which leaves it as no timeout. Installation Installation instructions for HMC Version 10 upgrades and corrective service can be found at these locations: Upgrading or restoring HMC Version 10 Updating, upgrading, and migrating your HMC machine code Update(s) for HMC V10R1M1010 Back to top