Hardware Management Console Readme *Version 10 Release 2 Maintenance 1042 (V10 R2 M1042) README* Updated: 18 March 2024 (C) Copyright International Business Machines Corp., 2024 All rights reserved. Contents <#ibm-content> The information in this Readme contains the fix list and other package information about the Hardware Management Console. * Terminology <#term> * PTF MF71610 HMC V10 R2M1042.0 - for vHMC for x86_64 hypervisors (5765-VHX) <#MF71610> * PTF MF71611 HMC V10 R2M1042.0 - for 7063 Hardware or vHMC for PowerVM (5765-HMB) <#MF71611> * Enhancements <#enhance> * List of fixes <#fixes> * Known issues and limitations <#known> * Best Practices <#best> * Installation <#install> Terminology *x86* - This term is used to reference the Intel hypervisors (KVM, VMWare, Xen) on which Virtual HMC can be installed. *Note:* HMC V10R2 release for x86 is not supported on bare metal (7042 hardware appliances). * ppc64 or ppc64le* - describes the Linux code that is compiled to run on Power-based servers or LPARS (Logical Partitions) PTF MF71610 HMC V10 R2 M1042.0 - for vHMC for x86_64 hypervisors (5765-VHX) This package represents a service pack image that can be used to update the HMC to the HMC V10 R2 M1042 release. You can also reference this package by APAR MB04441 and PTF MF71610. This image can be installed on top of HMC V10 R2 M1030 with or without other PTFs or Service Packs. * Service packs are cumulative and as such will include all the fixes for the PTFs released up to and including the last service pack(s) for this HMC version. Please read the individual Readme files for each PTF to see the list of fixes. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# HMC_Update_V10R2M1042_x86.iso 5040560128 003ede9bc044175949b0c6730b9355814f17693e MB04441 MF71610 Splash Panel information (or lshmc -V output) "version= Version: 10 Release: 2 Service Pack: 1042 HMC Build level 2402230152 MF71610 - HMC V10R2 M1042 ","base_version=V10R2 " PTF MF71611 HMC V10 R2 M1042.0 - for 7063 Hardware or vHMC for PowerVM (5765-HMB) This package represents a service pack image that can be used to update the HMC to the HMC V10 R2 M1042 release. You can also reference this package by APAR MB04442 and PTF MF71611. This image can be installed on top of HMC V10 R2 M1030 with or without other PTFs or Service Packs. * Service packs are cumulative and will include all the interim fixes for the PTFs released up to and including the last service pack(s) for this HMC version. Please read the individual Readme files for each PTF to see the list of fixes. /Package information/ Package name Size Checksum (sha1sum) APAR# PTF# HMC_Update_V10R2M1042_ppc.iso 5044914176 df662efdcaac8eecbff14fa55fb7eaa9841a17c3 MB04442 MF71611 Splash Panel information (or lshmc -V output) "version= Version: 10 Release: 2 Service Pack: 1042 HMC Build level 2402230152 MF71611 - HMC V10R2 M1042 ","base_version=V10R2 " * * *General fixes* * Fixed an issue that causes the Update Access Key (UAK) to be resent to an Enterprise BMC-based managed system every time the HMC performs a UAK check even though the UAK has not expired. * Disabled unused HMC port 5023. * Fixed an issue that caused the name of a shared processor pool on an Enterprise BMC-based managed system to be reset to the default name after the maximum or reserved processing units for the pool was changed. * Fixed a rare timing issue on HMC boot that caused SRC E3550046 to be called home. * Fixed an issue preventing HMC-to-HMC communication on port 9920 when the HMCs are on different subnets. * Fixed a rare issue that can cause a managed system to go into Recovery state and also prevent the managed system from being recovered with *rstprofdata *or *mkprofdata*. * Fixed an issue that caused the PCM REST API get of processed or aggregated metrics to fail with the 500 error "/An I/O error occurred sending to backend/" and caused the PCM GUI to fail to load any data. * Fixed an issue that caused the VIOS Create Virtual Fibre Channel adapter GUI task to fail with the error "/REST000B The URL presented to the Management Console REST Web Services is not valid./" * Fixed an issue causing the sed command to fail when a command argument contains a dash. * Fixed an issue that can cause Transmit Service Information operations to fail after upgrading the HMC to a new release. * Fixed a timing issue that caused SRC E3D46FFF to be called home due to a call home failure that occurred because the Electronic Service Agent was not fully activated. * Corrected the values shown in the Storage I/O usage column on the Usage page of the Systems and Partitions tables in the new GUI dashboard. * Fixed an intermittent issue that causes SRC E3550037 to be called home when the reference code history of a partition is displayed on the GUI. * Fixed an issue with PCM energy metric sample collection for Enterprise BMC-based managed systems that caused SRC E3550046 to be called home. * Fixed an issue that caused SRC E3D45070 to be reported and called home during a Transmit Service Information operation due to specifying iqyy* as a file for transfer and it was coincidentally rotated or deleted during the operation. * Fixed an issue that caused the *asmmenu *command when run on the local HMC console to fail to launch the ASM interface for an Enterprise BMC-based managed system and launch a blank window instead. * Fixed an issue with the *logssh *command utility that prevented it from logging commands in the syslog. * Fixed an issue which always causes the email address to be omitted when a certificate signing request is created using the *mkhmccert *command. * Fixed an issue causing the interpolation line and shading to be missing from Performance and Capacity Monitoring (PCM) graphs for some intervals such as last month when accessing the PCM GUI from the old dashboard. * Fixed an issue that can cause a shared processor pool name to be changed after a server firmware update. * Fixed an issue that caused the setting of the inband BMC credentials for a Power HMC CR2 to fail when the password is expired. * Fixed an issue causing an SMTP server to fail to receive email notifications when the IP address specified for the SMTP server has a trailing space. * Fixed an issue that caused the following error to occur when using the GUI to upgrade the HMC: "/An error occurred/ /while downloading the upgrade file. Files not obtained from server. Check to see if the hostname, user id, password and directory entered are valid/." This error occurs when no directory is specified for the download location. * Fixed a timing issue that causes nothing to happen and no error to be displayed when the USB option is selected on the Update VIOS GUI page. * Fixed an issue preventing a partition from being set as a time reference partition on a managed system that does not support Live Partition Mobility but does support time reference. * Fixed an issue causing firmware updates for OpenPower systems to always fail with the error "/HSCF0276E Failure during readiness check operation against target./" * Fixed an issue preventing the State detail field from always being cleared when a system transitions from Incomplete state to Operating state. * Fixed an issue where the Last Reported Time on the GUI Manage Serviceable Events page displays the current time instead of the last reported time. This issue only occurs when the language is Korean. * Fixed a timing issue that can cause a 500 error to be returned to a Get ManagementConsole REST API call when another HMC session is logged out just after the Get call is made. The 500 error returned has a reason code of "/Unknown internal error./" and a message of "/Cannot invoke "com.ibm.hwmca.fw.servlet.util.HMCSession.getUserContext()" because "session" is null/". * Fixed an issue where the HCNID associated with a migratable SR-IOV adapter is changed every time a partition profile with that migratable SR-IOV adapter is activated or applied. With this fix, the same HCNID will be used every time, preventing duplicate network bonding from being created and preventing the creation of a new resource with a new MAC address. * Fixed a rare issue causing notifications in the GUI Notifications slide in window to show a blank Reference ID and Source and a date of "/Invalid Date, Invalid Date/". Security Fixes * Fixed Java vulnerabilities: CVE-2023-5676, CVE-2023-22067, and CVE-2023-22081. * Addressed CWE-200 (Information Exposure) in reset expired password form. * Fixed an Information and Stack Trace disclosure for GET requests with malformed parameters to an API endpoint. Known Issues & Limitations * If log in to the HMC GUI is failing with this error for LDAP or auto-managed users: /Error: "Logon Error: Invalid credential or Timeout. Please try again after some time, if it repeats, please follow troubleshooting steps from IBM support."/ Use the following troubleshooting steps: Check whether the user is LDAP or auto-managed authentication type. If so, run the following command to change the LDAP configuration: o chhmcldap -o s --timelimit 30 --bindtimelimit 20 If log in to the GUI still fails, run the following command: o chhmcldap -o s --timelimit 30 --bindtimelimit 10 Best Practices * User sessions - The following best practices helps avoid performance degradations gradually over a period of time due to increased login sessions as well as security vulnerabilities such as unauthorized access to the active HMC sessions. o It is a best practice to logoff from HMC UI and then close the browser tab instead of directly closing the tab o Set Idle session timeout for all the users and not leave the timeout as '0' which leaves it as no timeout. * Profile recommendations - The maximum number of partition profiles suggested per partition is 10. Installation Installation instructions for HMC Version 10 upgrades and corrective service can be found at these locations: Upgrading the HMC from Version V9R2 or V10R1M1010 to V10R2M1040 Updating, upgrading, and migrating your HMC machine code Update(s) for HMC V10R2M1042