Hardware Management Console

Updated: January 15, 2007

This Readme contains the following information:

• Information on specific corrective service packages (PTFs)
• Hints and tips for the HMC Desktop
• History of enhancements and known issues for the Hardware Management Console
• Education information

All releases of the HMC Version 4.x machine code will manage an iSeries Server. A pSeries Server requires HMC Version 4.2 (or greater) machine code.

Use the following information, especially the Package information during the download, installation and verification process.

Description

This package is critical for customers in China that connect to the IBM service provider using a modem for remote service and support.

The phone numbers used to connect to the IBM service provider from China have changed. You must make configuration changes and install this package prior by January 31, 2007, to avoid a disruption in remote service and support from China. Refer to Enhancements and Fixes for a full description of the steps required to make this change.

You can also reference this package by APAR MB01993.

Package information

This package provides the following fixes:

Update Modem Connectivity to the IBM service provider in China

As of February 1, 2007, the existing phone numbers used by the HMC to connect to the IBM service provider within China will be discontinued. Effective immediately a new, expanded set of phone numbers are available to connect to IBM in China.

Before your HMC can successfully connect to the IBM service provider using these new numbers, this package must be installed on your HMC. We recommend that you configure a minimum of two phone numbers.

The new North China phone number 16970 can be dialed from the following cities

The new South China phone number 4006 744444 can be dialed from the following cities

The following phone number will be accessible throughout China

You may continue to connect to the IBM service provider electronically from China without installing this package if you can do either of the following:

1. Use an existing broadband connection to connect to IBM. You can configure either the Internet VPN or Internet SSL option.

   OR

2. Configure your HMC to call home using an international call to an AT&T access point outside of China. The following numbers may be convenient alternatives. Note that international dialing codes must be added to call them from China.

Steps required to change phone numbers used to connect to the IBM service provider

1. Before you begin, install this package.
2. Log on the Hardware Management Console. In the navigation area, open Service Applications. Select the Remote Support Option, and then click Configure Outbound Connectivity.
3. Within the Customize Outbound Connectivity Pane, click the Local Modem Tab. Within the Local Modem tab, locate the Telephone Number box, and then select Add.
4. From the Add Telephone Number pane, make sure that China is selected as the Country or Region. Compare the phone numbers displayed to the list shown above. If the new numbers are displayed in the list, select a number from the list, and then click Add.
5. If the newer numbers are not yet on your list, you may type the numbers in the Telephone Number field instead of selecting of one of the numbers displayed. Note that if you manually enter these numbers, there is an additional requirement that the System Address, as specified in the Customize Customer Information Pane, is set to China.
6. IBM recommends that a minimum of two phone numbers be configured for each Call Home server. You may test your connectivity to each phone number from the Customize Outbound Connectivity Pane.
7. Once you have successfully tested your connectivity using the new numbers, you should remove the older numbers from the list of Telephone numbers. From the Customize Outbound Connectivity Pane, select the phone number you wish to remove, and then click Remove.
8. After you have completed all your changes, click OK from the Customize Outbound Connectivity Pane.

Description

This package provides OpenSSL and Open SSH security fixes for HMC V4. You can also reference this package by APAR MB01906. It replaces MH00858.

Package information

This package provides the following security fixes:

Description

This package provides OpenSSL security fix for HMC V4R5.0. This PTF will require MH00454 to be present. You can also reference this package by APAR MB01872.

Package information

This package provides the following security fix:

CVE-2006-4339: OpenSSL RSA signature evasion

Description

This PTF provides a command monkacpid, that allows processor usage of the keventd kernel daemon. This PTF can be referenced by APAR MB01862.

Package information

A number of internal modems, when installed in HMC Machine Type 7310-C04 or 7310-C05, are affecting the performance of the HMC. If you have such an HMC configuration, install this PTF, and then run the monkacpid command from either

• a restricted shell terminal at the HMC, or
• a remote client over SSH.

This command produces output similar to the following. The output is refreshed every 4 seconds. Every 4.0s: /usr/bin/top -s -b -n 1 -p 6        Thu Sep 14 20:29:30 2006

top - 20:29:31 up 1 day, 5:14, 5 users, load average: 0.04, 0.01, 0.00
Tasks: 1 total, 0 running, 1 sleeping, 0 stopped, 0 zombie
Cpu(s): 1.6% us, 0.3% sy, 0.0% ni, 97.2% id, 0.9% wa, 0.0% hi, 0.0% si
Mem: 1032992k total, 1005644k used, 27348k free, 36820k buffers
Swap: 2040244k total, 0k used, 2040244k free, 192952k cached

PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
6 root 15 -10 0 0 0 S 0.0 0.0 0:00.00 keventd

If the number in the %CPU column is greater than 10.0, please contact IBM Hardware support to order a replacement modem. Please reference Retain Tip H187630.

Description

Fixes for leap second handling, DST time and openssl to be applied to HMC 4.5. This PTF requires that PTF MH00454 is already installed on the HMC.

This package includes fixes for the following issues:

• New library to handle leap second and DST time zone properly.
• Fix for Daylight Saving Time changes.
• Provides CAN-2005-0109: OpenSSL update.
• Provides CAN-2005-2969: OpenSSL fix for potential SSL 2.0 Rollback vulnerability

Package information

Description

Maintenance Fix that must be installed on HMC Version 4 Release 5.0 (This required maintenance package replaces the previous maintenance fix, PTF MH00324

This required maintenance package must be installed on HMC 4.5. This package includes all the fixes previously included in MH00324, as well as those in the following PTFs: MH00378, MH00364, MH00399, and MH00415. This service package is referenced by APAR MB01223.

The fixes in this package address the following issues:

• Fix for Apache security
• Fix for password expiration
• Disable DMA for DVD drive on 7310/7315-CR2
• Fix for frame name change independent of frame number change
• Fix for multiple call home issues
• Fix for power code update on HPS and 595/575 servers together
• Fix for memory leak on the HMC
• iSeries LPAR Configuration migration utility support for 7310 CR3

Package information

Description

Apache security fix

This package provides an update to the Apache server code, and must be installed on the V4 R2.0 or above HMC. This service package is referenced by APAR MB01199.

Security fixes

The fixes in this package address the following security issues:

• CAN-2004-0940 : Apache buffer overflow fix.
• CAN-2004-0885 : mod_ssl vulnerabilities fix.
• CAN-2005-1268 : mod_ssl vulnerabilities fix.
• CAN-2005-2088 : Apache vulnerabilities fix.

Package information

InfoCenter update package

Update to InfoCenter for HMC V4R5.0.

Package information

Description

Fix password expiration

Enhancements and fixes

Fixes to preserve password expiration, when user changes the password

Package information

Description

Fix hang with media usage on 7310/7315CR2

Enhancements and fixes

Fixes for system hang on 7310/7315CR3 when using certain type of CD/DVD media.

Prerequisites

You must have V4 R5.0 HMC and PTF MH00324 installed before you can install this corrective service.

Package information

Description

migrcfg fix for 7310CR3

Enhancements and fixes

iSeries LPAR migration configuration utility support on HMC Model 7310 CR3

Package information

Description

Required maintenance package for HMC Version 4 Release 5.0. This fix was replaced by PTF MH00454

Enhancements and fixes

• Provides miscellaneous fixes for the Server and Frame management functions.
• Provides miscellaneous fixes for the Repair and Verify function.
• Provides fix for Licensed Internal Code Update on multiple managed systems using the FTP/DVD/IBM service web site option.
• Provides the capability of activating 32GB or more of On/Off CoD memory
• Provides fix for memory leak on the HMC.

Package information

The MH00324 maintenance package replaces the MH00318 maintenance package. That is, MH00324 includes all the fixes previously included in the MH00318 package, and must be installed on HMC 4.5.

Description

HMC V4 R5.0 Upgrade

This package can be installed using the Install Corrective Service task on the HMC.

Enhancements and fixes

• Provides support to configure Switch Network Interface (SNI) adapters.
• Provides command line function to list and force release the HMC locks on a managed frame.
• Provides support for BPC and IO Drawer Concurrent Maintenance.
• Provides support for 48 servers per HMC.
• Enhanced processing of multiple media/files in Install Corrective Service.

Package information

The download for this upgrade package consists of two ZIP files, both of which must be installed.

InfoCenter (language) update package

Verifying Information Center update after installation

After the HMC is rebooted, follow these steps:

1. Select Information Center and Setup Wizard in the navigation area.
2. On the content area, check for the Local Information Center Version, which should contain:
   IBMhmc_InfoCenter.de_DE-5.0.1-bld, IBMhmc.InfoCenter.es_ES-5.0.1-bld, IBMhmc.InfoCenter.fr_FR-5.0.1-bld, IBMhmc.InfoCenter.it_IT-5.0.1-bld, IBMhmc.InfoCenter.pt_BR-5.0.1-bld.

This corrective service package updates the HMC Information Center to include the following languages:

• German
• Spanish
• French
• Italian
• Brazilian Portuguese

InfoCenter (language) update package

Verifying Information Center update after installation

After the HMC is rebooted, follow these steps:

1. Select Information Center and Setup Wizard in the navigation area.
2. On the content area, check for the Local Information Center Version, which should contain:
   IBMhmc_InfoCenter.cs_CZ-5.0.1-bld, IBMhmc.InfoCenter.hu_HU-5.0.1-bld, IBMhmc.InfoCenter.nl_NL-5.0.1-bld, IBMhmc.InfoCenter.ru_RU-5.0.1-bld, IBMhmc.InfoCenter.sk_SK-5.0.1-bld

This corrective service package updates the HMC Information Center to include the following languages:

• Czech
• Hungarian
• Dutch
• Russian
• Slovak

InfoCenter (language) update package

Verifying Information Center update after installation

After the HMC is rebooted, follow these steps:

1. Select Information Center and Setup Wizard in the navigation area.
2. On the content area, check for the Local Information Center Version, which should contain:
   IBMhmc_InfoCenter.ja_JP-5.0.1-bld, IBMhmc.InfoCenter.zh_CN-5.0.1-bld, IBMhmc.InfoCenter.zh_TW-5.0.1-bld

This corrective service package updates the HMC Information Center to include the following languages:

• Japanese
• Simplified Chinese
• Traditional Chinese

• To launch the browser, right click on the desktop to display the menu. Select "Net", and then "Browser".
• To start a restricted shell terminal, right click on the desktop to bring up the menu. Select Terminals", and then "rshterm".
• Currently, HMC only stores four (4) service processor dumps and four (4) platform system dumps per managed system.
• Changes of a partition profile do not apply immediately to the partition. The changes on the partition only take effect when activation is done through the profile.
• To view keylock positions and SRC values when performing Operator Panel Service Functions through Service Focal Point, use the Server and Partition plugin.
• To view system event logs, you must login as a user with the hmcpe role. From Service Applications, select Service Focal Point -> Service Utilities -> Actions -> View Problem Logs.
• Before using the HMC to upgrade your i5 or p5 Power5 server to the 01SF230_120_120 Firmware code level, your HMC must be installed with the V4 R5.0 HMC code.
• Prior to performing the update to V4 R5.0 HMC code, any open serviceable events should be resolved and closed. Otherwise, existing open events may no longer be viewable in the Service Focal Point GUI and refcode E35F0010 is dialed home.
• If the HMC is used in a Cluster 1600 environment, see the following Redbooks Technote: Cluster 1600 and the Hardware Management Console

The Ext3 File System has been enabled since HMC Version 4 Release 3. If you wish to take advantage of journaled file system, you must install or upgrade your HMC using the Version 4 Release 3 and higher Recovery CDs.

Server and Partition - Server Management

• Provides support to configure Switch Network Interface (SNI) adapters.
• Provides command line function to list and force release the HMC locks on a managed frame.

HMC Code Update

LIC Code Update - CFM Updates

• HMC V4 R5.0 and FW 01SF230_120_120 are the minimum code levels required to support CFM.
• The following message will be displayed when a concurrent Licensed Internal Code update is initiated from the HMC:
  
  Notice: "Do not perform any configuration or management operations on the managed system while Licensed Internal Code is being updated".

Note: Performing a concurrent Licensed Internal Code update will require the Service Processor to be reset as part of the process. This reset will cause any operations that are in progress to be disrupted. Therefore, it is highly recommend that you do not perform any tasks on the managed-system that is being updated until the firmware update is complete. However, if an operation does occur, the code update might still complete correctly and the operation might also complete correctly. If there is a failure, please allow the concurrent firmware update to complete before retrying a new operation. If the concurrent firmware update fails, please remove the corrupted image and retry the concurrent Licensed Internal Code update again.

IO Drawer Concurrent Maintenance

• Provides support for 19" and 24" MES Upgrade and Repair and Verify procedures.
• HMC V4 R5.0 and FW 01SF230_120_120 are the minimum code levels required to support IO Drawer Concurrent Maintenance.
• Currently not supported on Linux partitions
• Minimum AIX levels needed : AIX 5.2: IY70060 (APAR), U802287 (PTF) AIX 5.3: IY70202 (APAR), U802024 (PTF)

HMC Command Line

• The following commands have been added:
  dlslic - queries the Licensed Internal Code (LIC) level of each Power FRU
  lslock - lists which HMC owns the lock on a managed frame
  rmlock - forces an HMC lock on a managed frame to be released
• An option has been added to the lslic command to list Licensed Internal Code (LIC) on High Performance Switches.
• An option has been added to the lshwinfo command to display ambient air temperatures for the systems contained in a managed frame.
• An option has been added to the lssvcevents command to display events that occurred during a specified number of preceding minutes.
• An option has been added to the updlic command to upgrade the Licensed Internal Code (LIC) on a managed system to a new release.
• An option has been added to the updlic command to update LIC on High Performance Switches.
• The following commands have been enhanced to support Switch Network Interface (SNI) adapters: chsyscfg, lshwres, lssyscfg and mksyscfg.

Server and Partition

• Dynamic partition configuration for memory move can take a while. During that time, no other operation can be performed.
• After configuring your network setting, make sure to reboot your HMC. Otherwise, dynamic logical partitioning for AIX/Linux partitions may not work.
• Users cannot change virtual Opticonnect and HSL Opticonnect settings through the GUI without activating the changes through a partition profile. Users can change the settings dynamically through the command line interface.
• Usage: chhwres -m -r virtualio --rsubtype virtualopti -p -o s -a virtual_opti_pool_id=[0|1]
• Usage: chhwres -m -r virtualio -rsubtype hsl -p -o s -a hsl_pool_id=[0|1]
• Error messages for some Dynamic Logical Partitioning tasks give 'AIX' as the partition type even though it's actually a Linux partition.
• Unable to perform Dynamic Logical Partitioning virtual I/O remove operations if the partition does not have a current profile.
• The HMC will display the wrong device information since the feature code 2849 is used for two different adapters : OS/400 p Linux p AIX PCI 100/10Mbps Ethernet IOA 2849 n/a n/a PCI 2D Graphics Accelerator n/a 2849 2849
• Only a visual inspection of the slot on the machine will be able to determine if the adapter is a Ethernet card or a Graphics card. Once the partition is activated with the adapter in the profile, the description should display proper adapter information.
• After an FSP is replaced in a Power5 server, i5/OS partitions will not IPL properly and get B2xx 3110 SRC and B2xx 3200 SCR's since the IPL Source is changed on the partition to D. On the HMC go to the Partition Properties Panel and select the Setting tab and change the IPL Source value and re-IPL the partition.
• During B&C drawer power cycle 14001302 SRC is posted intermittently and needs to be ignored.
• A B1818600 error is posted from Perc with a user section showing "Process name: netsSlp" which should be ignored.

Frame Management

Diskette Drive for 7310-CR3 HMC (x336)

The 7310-CR3 does not come with a diskette drive. If you are configuring the HMC as a Certificate of Authority Server, and wish to copy public key signed by the server to diskette, you can order the USB diskette drive from IBM, to be used with the 7310-CR3.

Service Applications

The first and last BPC serviceable event timestamps for Serviceable Event displayed in the Repair Serviceable Event and Managed Serviceable Events GUI may display either blanks or show the year as "2". The Serviceable Event Details screen carries a "Serviceable Event Creation timestamp which can be viewed and which gives the timestamp on the HMC that the first error arrived.

LIC Code Update

• If the HMC remote client loses its connection while it is downloading firmware, the download fails. Retrying the operation "Change internal Code" might fail again with the message "Object is busy, and the task cannot handle busy objects". Reboot the HMC and retry the "Change internal Code" operation.
• Recovery procedure when error message "ACT01724 The operation failed due to an internal code failure". Verify that the state of the managed systems and frames are connected using the command line "lssysconn -r all", and then retry the operation.
• When LIC Code Update is in progress, the Frame state changes from standby/standby to standby/unavailable. This change may happen if a power dump is in progress, and the code update operation will fail. Wait for the Frame state to change back to standby/standby, and then retry the operation.
• Recovery procedure when error message "HSCF0052W Frame tttt-mmm*sssssss is locked by another process" is shown when performing Licensed Internal Code Update Operation on the p5 595, i5 595, p5 590 and p5 575 managed systems. Verify that no other frame operation that uses the following lock:
  
• Repair and Verify Operation
  
• Initialize Frame Operation
  
• Set Frame Number Operation
  
• Licensed Internal Code Update
  
• is in progress on a remote HMC or a dual HMC. Next, issue the rmlock command to force the release of the HMC lock on a managed frame.
  
• Usage: rmlock -e
• Updating Licensed Internal code on multiple Managed Systems in a p575 within the same power frame can be updated simultaneously by using the following procedure:
  
  
  1. Select one Managed System in each frame from the "Target Option Selection" panel. This action updates the Licensed Internal Code on the Power Subsystem and the selected Managed System.
  2. Select the remaining Managed Systems in all frames from the "Target Option Selection" panel. This action updates Licensed Internal Code on the remaining managed systems. The Power Subsystem was already updated in Step 1 and will not be updated again.

     Note: After the Licensed Internal Code has been updated in Step 1, the image is saved on the HMC. The "disk" repository can then be used for subsequent updates in Step 2.

HMC Code Update

HMC Management

National Language Support

• Mnemonics are not supported in double byte and ru locales
• The HMC uses several external components. These components are not developed by the HMC team and are translated as part of a separate translation plan and schedule. The mix of English and translated text is an unavoidable situation and has the potential to occur anytime the HMC is updated or pulls in a new version of an external application that is updated in between its normally scheduled translation cycles.
• Due to the limitation of groff, some characters in the output of "man" command might be corrupted in traditional Chinese, simplified Chinese and Korean when the window is too narrow. Widen the window and retry the command again.
• Korean input is not supported. Press Shift-Space to switch between English and Korean input mode.
• Traditional and Simplified Chinese input is supported in zh_TW and zh_CN locales. Press CTRL-Space to switch between English and Chinese input mode. Press CTRL-Shift to select an input method. Press space bar to see more Chinese characters.
• Japanese input is supported. Press Shift-Space to switch between English and Japanese input mode.
• User ID, User information, HMC User password, Partition name, managed system name, profile name and system profile name are in English only.
• IBM275 doesn't work well when connecting from IBM Personal Communications or iSeries Access to an HMC. Use another Brazil codepage. The codepage "IBM930 Japan Katakana" doesn't work well either. Use "IBM930 Japan Katakana Extended" instead.
• An ibm5250 session opened on the HMC locally will be in the same locale as the one that is set for the HMC. To open a session in a different locale, change the HMC locale first, logout, login and then invoke ibm5250. The other option is to connect to the HMC using a remote emulator, e.g. IBM Personal Communications or iSeries Access, in the desired locale.
• To access the file remote_client.html on a HMC from a remote web browser, please set the HMC locale to one of the following: cs_CZ (Czech), de_DE (German), en_US (English), es_ES (Spanish), fr_FR (French), hu_HU (Hungarian), it_IT (Italian), ja_JP (Japanese), ko_KR (Korean), nl_NL (Dutch), pt_BR (Brazilian Portuguese), ru_RU (Russian), sk_SK (Slovak), zh_CN (Simplified Chinese) and zh_TW (Traditional Chinese).
• Note: For each of the locales that is not supported in the V4 R2 HMC the numeric, date, time, calendar and currency formats that are specific to a given locale may not be displayed as expected.

Miscellaneous Functions

• Help Search is not supported. However, Find is supported for Help.
• Printing is not supported.
• The numerical keypad on some keyboards doesn't work. Use the normal numerical keys instead.
• When your power5 system is shipped to you it is in a non-HMC managed mode by default. Once you attach and set up an HMC to manage your power5 system, the default non-HMC managed mode is exited. The procedure to return to the default non-HMC managed mode is documented on the InfoCenter website under "Resetting the server to a non partitioned configuration". The following link will direct you to the document.
  http://publib.boulder.ibm.com/infocenter/eserver/v1r2s/en_US/info/iphbl/iphblresetserver.htm

The following customer courses will be available from Resource Link for the Product Announce on May 4, 2004.

• How to Use the eServer i5 and p5 Hardware Management Console
  This course explains how to install and configure the Hardware Management Console (HMC) for the Model 520/570. It also covers the HMC's basic operations by exploring the general user interface. Partitioning is discussed in detail, with explanations showing both command line and GUI support.
• eServer i5 and p5 - Physical Planning for Installation
  This course discusses considerations for the physical planning for installation of eServer Models 520 and 570. It then provides the user with links to obtaining the step-by-step installation procedures.
• Resource Link Highlights
  This course provides an overall look at the major Resource Link (RL) areas and how to use them. These areas are Planning, Education, Library, Forums, Fixes, Problem Solving, Services, Customer Initiated Upgrade, and Tools. It also provides step-by-step procedures in using the Subscription function.
• Performing Licensed Internal Code Maintenance
  This course discusses about maintaining the software that enables hardware such as the service processor on your eServer POWER5 system.

Access to these courses requires an IBM Registration ID and Resource Link Access.i

To obtain an IBM Registration ID

1. Go to http://www.ibm.com/servers/resourcelink
2. Select "Register" under New users
3. On the My IBM Registration, fill in an e-mail address for IBM ID and password, and the Security question and answer and the Country of residence and then click Continue and fill in the rest of the User information and click Submit.

Resource Link Access for New Users:

1. Go to http://www.ibm.com/servers/resourcelink
2. Select "Sign in" enter the IBM ID and password you used to register above
3. Select "Customer"
4. Click "Submit" Once submitted it will take an hour before the access takes effect

To view a course:

1. Sign in to Resource Link
2. Select Education in the navigation bar on the left
3. From the Education page, select "eServer i5 and p5 courses"
4. Select "How to Use the eServer i5 and p5 Hardware Management Console"
5. Select "Performing Licensed Internal Code Maintenance"
6. Double-click the link to open the course.

Notes:

1. The courses are browser based. For optimal viewing, we recommend Microsoft Internet Explorer 6.0 or higher with your display set at 1024 x 768. To set your display, go to My Computer -> Display -> Settings
2. Course pages can be book marked for easy retrieval.
3. Course simulations open in a separate window. Use the X in the upper right corner of the window to close the simulation.
4. If there are QuickTime videos in the course, you need to have the QuickTime viewer installed. A link to the free viewer is on each Resource Link course page and on the related page within each course.

Documentation, installation guides, cumulative PTF history, best practices, and related support information:

HMC documentation

• HMC Notices
• POWER code matrix
• FLRT: Fix Level Recommendation Tool