For use with HMC Version 10 Release 3 M1061

Contents

The information in this Readme contains the fix list and other package information about the Hardware Management Console.

• PTF MF71713
• PTF MF71714
• Package information
• Fixes included
• Command Line Change
• Known issues and limitations
  
• Best Practices
• Installation

General fixes

• Added the Manage Virtual Storage task back to the old dashboard.  To launch the Manage Virtual Storage task, on the All Virtual I/O Servers view select the Virtual I/O Server, then click Actions > View All Actions > Manage Virtual Storage.
  
• Removed the Schedule operations task from all the action menus on the new GUI.  To launch the schedule operations dashboard, click "Schedule management" in the left side navigation area on the new GUI.
  
• Fixed an issue that caused the remote partition field to be incorrectly changed when a virtual fibre channel adapter in a partition profile is edited using the new GUI and any other property for that adapter is changed.
  
• Fixed an issue that causes the following errors to be displayed when trying to save changes on the new Network settings GUI:
  "REST0316 Changing console settings completed with error. Please find error details below:
  REST0433 The static route with the given info cannot be added. Please check the values given, Destination 0.0.0.0, Gateway Default Mask -." 
  These errors occur only when no HMC IP address is configured.
  
• Fixed an issue where the email address from which customer notification emails are sent is the default email address and not the from email address configured by the user.
  
• Fixed an issue that causes all HMC network routes to be deleted when any changes are saved on the HMC Settings page on the new GUI.
  
• Fixed a timing issue that can cause VLAN mappings to be lost when performing VM Recovery Manager restart operations of partitions on more than one destination system simultaneously.
  

Security fixes

• Fixed Apache Tomcat vulnerabilities: CVE-2024-52317 and CVE-2024-52318
  
• Fixed Java Runtime Environment vulnerability: CVE-2024-10917
  
• Fixed Oracle Java SE vulnerabilities: CVE-2024-21217 and CVE-2024-21208
  
• Fixed bzip2 vulnerability: CVE-2019-12900
  
• Fixed expat vulnerability:  CVE-2024-50602
  
• Fixed OpenSSL vulnerability: CVE-2024-5535
  
• Fixed linux-firmware vulnerabilities: CVE-2023-20584, CVE-2023-31315, CVE-2023-31356

Command Line Change

• The chhmcencr and lshmcencr commands have been enhanced to configure and display the host key algorithms which can be used by the HMC SSH interface.
  

Known Issues and Limitations

• When the HMC's locale is set to a locale that ends in @euro or @preeuro, the local console GUI will not load after logging in. To work around this issue, change the HMC's locale to a locale that does not end in @euro or @preeuro. Locales that end in @euro or @preeuro will be removed in a future release.
• The text "Label.ManageBackupProfileReact" appears in the System actions menu. It is not a valid action. This action will be removed from the menu in a future release.
  
• Setting the Microsoft Edge browser to a language not supported by the HMC will cause Learn More links on the GUI to fail to launch help pages with the message "The requested help document was not found."
  
• Dates, times, and numbers on the GUI Performance dashboard are shown in the format based on the HMC language instead of the browser language.
  
• Occasionally a Kerberos user login may fail even when the credentials are valid. As a workaround, try logging in again with the same credentials after a short delay of 15 to 30 seconds.
  
• The state detail for an Enterprise BMC-based system in No Connection state may be blank after the VMI network settings are cleared. To display the correct state detail, reset the connection to the system.
  
• After clearing the VMI network settings for an interface, the managed system may remain in No Connection state even though there is an active network connection to the other VMI interface. To work around this issue, reset the connection to the system.
  
  

Best Practices

• User sessions - The following best practices helps avoid performance degradations gradually over a period of time due to increased login sessions as well as security vulnerabilities such as unauthorized access to the active HMC sessions.
• It is a best practice to logoff from HMC UI and then close the browser tab instead of directly closing the tab
• Set Idle session timeout for all the users and not leave the timeout as '0' which leaves it as no timeout.

Upgrading or restoring HMC Version 10 Release 3

Updating, upgrading, and migrating your HMC machine code

Update(s)for HMC V10R3M1061