IBM Security Virtual Server Protection for VMware 1.1.0.1 ===================================================================== Last modified: 04/20/2012 PLEASE READ THIS DOCUMENT IN ITS ENTIRETY. © Copyright IBM Corporation 2009, 2012. U.S. Government Users Restricted Rights — Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBMCorp. ===================================================================== CONTENTS ===================================================================== - Description - Compatibility - Applying the Update - MD5 of included files - Customer Support - Reporting product issues DESCRIPTION ===================================================================== This patch contains enhancements for IBM Security Virtual Server Protection for VMware 1.1.0.1 Details -------- This patch fixes a PSoD that can occur in ESX(i) 4.1 under certain set conditions [CR 303313] COMPATIBILITY ===================================================================== This update is applicable only to: ESX(i) 4.1 only IBM Security Virtual Server Protection for VMware 1.1.0.1 APPLYING THE UPDATE ===================================================================== To apply the update: (all steps performed with root permissions) A pre-requisite for applying the patch is that all guest VMs on the ESX be migrated to another host if business continuity is needed else the customer should be prepared to shut them down before following the instruction below. It is assumed that VSP 1.1.0.1 is installed and running on the ESX(i) 4.1 host. NOTE: If you have NEVER performed Network Configuration / ESX Server Configuration in provVSetup before on the host (e.g. with a new installation), you should skip steps 1 - 4 and start at step 5. 1. Invoke the uninstall of the agent from the provVSetup menu. Please do not delete the SVM after that but only power it off instead. 2. On the ESX host, ensure that the vib is uninstalled by running the following command: esxupdate --vib-view query | grep ibm The vib should be in an uninstalled state. If it is not, run the following command: esxupdate remove -b cross_ibm-iss-vmkmod_400.1.1.0.1-164009 The vib should now be in uninstalled state. 3. On the ESX host, ensure that the ibm-iss-vmkmod is unloaded. Run the following command: vmkload_mod -l | grep ibm The module ibm-iss-vmkmod should not show up. If the module ibm-iss-vmkmod shows up, run the following command: vmkload_mod -u ibm-iss-vmkmod 4. Reboot the ESX server and check that the ibm-iss-vmkmod is still unloaded as performed in step 3. If the ibm-iss-vmkmod module still shows up, run the follwing command to unload ibm-iss-vmkmod: vmkload_mod -u ibm-iss-vmkmod Then run the follwing command twice to uninstall the VIB: esxupdate remove -b cross_ibm-iss-vmkmod_400.1.1.0.1-164009 Reboot the host again. 5. Copy the patch files to the /root directory of the SVM (install-ISS-VSP-IF001.sh / iss-packetif4.1-1.1.0.1.0070-1.i586.rpm / iss-packetif4.1.sigtgz). 6. On the SVM, execute the patch installation script: sh install-ISS-VSP-IF001.sh 7. Invoke Network Configuration / ESX Server Configuration in provVSetup. The updated vib will be pushed and installed on the ESX host. 8. Using the VMware vSphere client, go to the settings for the SVM, and ensure the "Connected" and "Connect at power on" checkboxes are checked for network adapters 2, 3 and 6. 9. Query the vib and the ibm-iss-vmkmod. They should now show as installed and loaded. MD5 OF INCLUDED FILES ===================================================================== fae6c9a5d32db37d8561cee72af318f9 install-ISS-VSP-IF001.sh 8f3be8bcddb0f26953b1879f511b137f iss-packetif4.1-1.1.0.1.0070-1.i586.rpm b12bc96a34cf4fa0a7d1338c619da1a7 iss-packetif4.1.sigtgz CUSTOMER SUPPORT FOR NORTH AMERICA ===================================================================== IBM Security Solutions provides technical support to customers that are entitled to receive support. The IBM Support Portal -------- Before you contact IBM Security Solutions about a problem, see the IBM Support Portal at http://www.ibm.com/software/support The IBM Software Support Guide -------- If you need to contact technical support, use the methods described in the IBM Software Support Guide at http://www14.software.ibm.com/webapp/set2/sas/f/handbook/home.html The guide provides the following information: - Registration and eligibility requirements for receiving support - Customer support telephone numbers for the country in which you are located - Information you must gather before contacting customer support INFORMATION REQUIRED FOR REPORTING PRODUCT ISSUES ===================================================================== If you encounter a problem with this product, please make notes that are as detailed as possible about the following: - Version of IBM Security Virtual Server Protection for VMware - IBM Security Virtual Server Protection for VMware configuration - Network deployment - Specific failure symptoms or undesirable behavior This information helps us reproduce the problem and resolve it as quickly as possible.