Cumulative history and Readme for use with HMC V5.2.x
[ Last updated: August 25, 2006 ]
Contents
The information in this Readme contains hints and errata information about the Hardware Management Console.
Specific PTF information
This section lists the PTFs released for HMC V5 R2.0. The information for each PTF includes sections for enhancements and fixes, known issues (if applicable), and package information. The Package information section provides information to use during the download, installation and verification procedures for HMC corrective service/upgrade packages. For example, you can check the sizes and checksums of downloaded packages, and use the "Splash panel" information to verify that a fix or update was applied successfully. You can also access this PTF-specific information by clicking on the "View" link for any package on the "Downloads" pages of the HMC web site.
PTF MH00880
This package provides a fix for the vterm force close command for HMC V5.2.1. You can also reference this package by APAR MB01873.
This fix alleviates a problem for AIX and Linux partition users who force close vterm sessions with the "Close Terminal Window" option in the GUI or rmvterm command. A timing window in the managed system firmware causes a failure with the server resulting in SRC B170100A being logged. In redundant FSP configurations the managed system could terminate if the problem is encountered multiple times.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00880.zip MH00880.iso |
56025 442368 |
59175 48112 |
MB01873 | MH00880 |
Splash panel information (lshmc -V command output) | ||||
MH00880: vterm force close fix (10-26-2006) |
Enhancements and fixes
This package provides the following fix:
vterm force close behavior change
PTF MH00891 (Security fixes)
This package provides OpenSSL and Open SSH security fixes for HMC V5. You can also reference this package by APAR MB01905. It replaces MH00857
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00891.zip MH00891.iso |
3570046 3958784 |
40431 17045 |
MB01905 | MH00891 |
Splash panel information (lshmc -V command output) | ||||
MH00891: OpenSSL/OpenSSH security fixes for HMC V5 (11-07-2006) |
Enhancements and fixes
This package provides the following security fixes:
Name | Description |
---|---|
CVE-2006-3738/VU#547300 | Fix buffer overflow condition. |
CVE-2006-4343/VU#386964 | OpenSSL SSLv2 client code fails to properly check for NULL which could lead to a server program using openssl to crash. |
CVE-2006-2937 | Fix mishandling of an error condition in parsing of certain invalid ASN1 structures, which could result in an infinite loop which consumes system memory. |
CVE-2006-2940 | Certain types of public keys can take disproportionate amounts of time to process. This could be used by an attacker in a denial of service attack to cause the remote side top spend an excessive amount of time in computation. |
CVE-2006-4924 | Denial of service problems have been fixed in OpenSSH which could be used to cause lots of CPU consumption on a remote openssh server. |
CVE-2006-4925 | Fix problem where remote attacker is able to inject network traffic that could cause a client connection to close. |
PTF MH00857 (Security fix)
This package provides an OpenSSL security fix for HMC V5. You can also reference this package by APAR MB01870.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00857.zip MH00857.iso |
3530344 3915776 |
33939 11789 |
MB01870 | MH00857 |
Splash panel information (lshmc -V command output) | ||||
MH00857: OpenSSL security fix for HMC V5 (10-10-2006) |
Enhancements and fixes
This package provides the following security fix:
CVE-2006-4339: OpenSSL RSA signature evasion
PTF MH00840
This PTF provides a command monkacpid, that allows processor usage of the keventd kernel daemon. This PTF can be referenced by APAR MB01844.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00840.zip MH00840.iso |
4155 389120 |
06580 05331 |
MB01844 | MH00840 |
Splash panel information displayed after installation | ||||
MH00840: monkacpid to monitor acpi events (09-14-2006) |
Enhancements and fixes
A number of internal modems, when installed in HMC Machine Type 7310-C04 or 7310-C05, are affecting the performance of the HMC. If you have such an HMC configuration, install this PTF, and then run the monkacpid command from either
- a restricted shell terminal at the HMC, or
- a remote client over SSH.
This command produces output similar to the following. The output is refreshed every 4 seconds.
Every 4s: /usr/bin/top -s -b -n 1 -p 3 Thu Sep 14 14:57:19 2006 top - 14:57:20 up 53 min, 2 users, load average: 0.17, 0.10, 0.08 Tasks: 1 total, 0 running, 1 sleeping, 0 stopped, 0 zombie Cpu(s): 5.5% user, 1.0% system, 0.0% nice, 93.5% idle Mem: 1022096k total, 919596k used, 102500k free, 32516k buffers Swap: 2032212k total, 0k used, 2032212k free, 264288k cached PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 3 root 15 0 0 0 0 S 0.0 0.0 0:00.02 keventd
If the number in the %CPU column is greater than 10.0, please contact IBM Hardware support to order a replacement modem. Please reference Retain Tip H187630.
PTF MH00837
Fix missing cron entries after an upgrade
This PTF fixes problems with missing cron entries and file permission that occur following an upgrade.
Notes:
- If you have installed MH00822 and performed the upgrade by using the rstupgdata command, then install MH00837 after the reboot and restore are complete.
- If you happened to install MH00837, and then installed MH00822 to perform the upgrade, then you must re-apply MH00837 after the reboot and restore are complete.
This PTF can also be referenced by APAR MB01796.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00837.zip MH00837.iso |
36151 25487 |
7798 403456 |
MB01796 | MH00837 |
Splash panel information (or lshmc -v output) | ||||
MH00837: Fix missing cron entries (09-05-2006) |
Enhancements and fixes
Fixes these problems following and Upgrade to HMC Version 5:
- cron entries needed for LPAR utilization data collection are missing.
- user is unable to log in and download websm client.
PTF MH00822
rstupgdata for HMC Version 5
This PTF provides a new command, rstupgdata, that can be used to restore upgrade data, saved on DVD-RAM, after a new Install of HMC Version 5. You can also reference this package by APAR MB01665.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00822.zip MH00822.iso |
21432 440320 |
62248 05297 |
MB01665 | MH00822 |
Splash panel information (or lshmc -v output) | ||||
MH00822: rstupgdata command for HMC V5 (08-18-2006) |
Enhancements and fixes
A number of HMC machine types, 7310CR2/7315CR2/7310CR3/7315CR3, have experienced upgrade failures when moving from HMC V4.x to HMC V5.x, or from HMC V5.1 to HMC V5.2.x. Because of this issue, IBM strongly recommends the use of the following upgrade method to upgrade from HMC V4.X to HMC V5.X, or from HMC V5.1 to HMC V5.2.0 or V5.2.1. This method can be used on all machine types.
PTF MH00746
Security fixes for HMC 5.2.1
This security fix package must be installed on top of HMC V5 R2.1 and MH00688. You can also reference this package by APAR MB01396.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00746.zip MH00746.iso |
10330 411648 |
62764 31333 |
MB01396 | MH00746 |
Splash panel information (or lshmc -v output) | ||||
---|---|---|---|---|
MH00746: Security updates for HMC V5R2.1 (06-29-2006) |
Enhancements and fixes
The following security fixes are addressed in this package:
- Apache Web server token is not set.
- System Plan viewer failed to run.
- heapdump files not cleaned up properly.
- PATH not set correctly in restricted shell on upgrade.
PTF MH00688
Security fixes for HMC 5.2.1
This security fix package must be installed on top of HMC V5 R2.1. You can also reference this package by APAR MB01297.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00688.zip MH00688.iso |
37243889 37677056 |
63970 25428 |
MB01297 | MH00688 |
Splash panel information (or lshmc -v output) | ||||
MH00688: CVE-2006-0225, CVE-2006-0058 Security Updates for HMC V5R2.1 (05-31-2006) |
Enhancements and fixes
The following fixes are addressed in this package:
DST
Fix for Daylight Saving Time changes
Security fixes
- CVE-2006-0225 - openssh SECURITY: openssh scp remote attack vulnerability
- CVE-2006-0058 - sendmail SECURITY: sendmail remote code execution
- ssh -T does not setup environment correctly
PTF MH00695
InfoCenter update package
This package can also be referenced by APAR MB01378
Enhancements and fixes
Update package for Infocenter for HMC v5.2.1 (MH00695)
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00695_1.zip MH00695_2.zip MH00695_1.iso MH00695_1.iso |
632838581 470358676 634523648 476235776 |
22994 27417 41510 52173 |
MB01378 | MH00695 |
Splash panel information (or lshmc -v output) | ||||
MH00695: InfoCenter Update for HMC V5R2.1 (05-26-2006) |
PTF MH00594
Update package for HMC 5.2.1 (MH00594)
Use this package to update the HMC from HMC V5 R2 only to HMC V5 R2.1.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00594 (HMC 5.2.1 Update package) | ||||
HMC_Update_V5R2.1_1.zip HMC_Update_V5R2.1_2.zip |
583122562 651713837 |
20579 51677 |
MB00007 | MH00594 |
HMC_Update_V5R2.1_1.iso HMC_Update_V5R2.1_2.iso |
587395072 652111872 |
38742 47514 |
||
Splash panel information (or lshmc -V output) | ||||
version= Version 5 Release: 2.1 HMC Build level 20060502.1 base_version=V5.2.0 |
Enhancements and fixes
Please see the Enhancements and fixes section for the HMC 5.2.1 Recovery package (PTF MH00653) for the enhancements and fixes included in this update package.
PTF MH00653
Recovery media package for HMC 5.2.1 (MH00653)
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00563 (HMC 5.2.1 Recovery package) | ||||
HMC_Recovery_V5R2.1_1.iso HMC_Recovery_V5R2.1_2.iso |
1569423360 1349058560 |
32228 41391 |
MB01286 | MH00653 |
Splash panel information (or lshmc -V output) | ||||
version= Version: 5 Release: 2.1 HMC Build level 20060502.1 base_version=V5.2.1 |
Enhancements and fixes
Both the Recovery package and the Update corrective service package for HMC 5.2.1 include the following fixes and enhancements:
Partition Management
- Fix for incorrect display of workload group number in partition properties panel.
- Fix to allow hmcoperator and hmcpe users to shutdown partitions from GUI.
- Fix to preserver partition/profile ordering in a system profile.
- An Enhancement was added to the iSeries/pSeries IOP cache battery replacement procedure that prevents an immediate power down of a partition (abnormal shutdown). A delayed power down of the partition is required to clear the cache data prior to replacing the cache battery.
Utilization Data management
- Corrected display of CPW and CPU in LPAR Configuration and Sampling Dialogs.
- Corrected display of system sample events for configured/available memory.
Dump Fixes
- Prevent the extraction of the same dump when extraction of the dump is in progress.
- Display correct error message when system dump is initiated via command line when dump policy is disabled.
System Plan
- Enhancement to System Plan Viewer security, enforcing user's security class.
- Fixed error to deploysysplan command and user interface where system plans that had particular disk configurations or multile virtual host relationships would fail during LPAR deployment
User Management
Fix for saving user task roles to be persistent across HMC reboots.
Miscellaneous
- Fixed Installed Corrective Service help link page not found error.
- Automatic update to BIOS 1.13 for X336 with dual core processor support .
- Prevent upgrade data from restoring on a normal reboot.
- Enhancement to Access Manager to recover from code update permission problem.
Code Update
- Corrected a Redundant FSP Code Update problem so that HMC will commit code on secondary FSP even if primary FSP has already been accepted ( 595, 590, 570 w/ R-FSP FC).
- Deferred fixes can be applied sequentially with out activating previously applied deferred fixes.
- Enhanced Code Update Deferred Fix Pack Messages to better define deferred fix activation and list deferred fixes.
- Code Update levels displayed on System Information panel will reflect only the repository that is being targeted, and not the level on the HMC hard drive.
- Corrected a managed system common targeting locking issue that could be encountered after canceling an MES Code Update.
- Corrected a locking issue that could be encountered during an accept of a code update on multiple systems that access a common power resource.
- Corrected Dual FSP code Synch to properly set next IPL side on secondary.
- Corrected a Concurrent Firmware Code Update problem that allowed managed system and power frame updates even if an AIX I/O update only was selected.
- Adjusted estimated completion times for Concurrent Firmware Updates on models 590 and 595where multiple power frames are targeted.
- Corrected Firmware Code Update to allow Disruptive Activate via the command line (updlic -o d).
- Enhanced Firmware Code Update handling of the lslic command to display the deferred level attribute and deferred level information when deferred fixes were present but not activated on the system.
Scheduled Operations
Enhanced Scheduled Operations processor move to allow the user to input processing units in one hundredths precision.
Repair and Verify
- Corrected the Repair and Verify panels for GX bus adapter exchange on models 590 and 595.
- Repair and Verify support for new concentric clamp hardware for models 590 and 595. The new concentric clamp hardware requires that before installing a PU Book, the concentric clamp bushing and pin are flush with one another. A check must be performed to ensure they are flush or the PU Book will not seat correctly, causing system downtime and possible damage to the PU Book connectors.
- Added Repair and Verify support for 9115-505, 9110-510, 9123-710.
- Corrected and enhanced Repair and Verify for the concurrent exchange, remove, and install of PCI cards to coordinate instructions/processes between Operating Systems GUI, Hot Plug Manager GUI and Repair and Verify instructions.
- Corrected and enhanced Repair and Verify instructions and graphics for the installation of a PU Book, DCA's and cabling for models 590 and 595.
- Corrected the Repair and Verify instructions for the addition of BPA/BPD devices.
- Corrected the Repair and Verify instructions for the concurrent add of a second node on models 590 and 595.
- Enhanced the Repair and Verify instructions for exchange of BPC on systems with dual HMCs.
- Enhanced the Repair and Verify procedures for the 5791, 5794, and 7040-61D expansion units.
- Added support to Repair and Verify to handle the repair of a PCI Backplane in an I/O Drawer via a Serviceable event on models 590, 595 and 575.
- Added Repair and Verify support for 9133-55A enclosure.
- Enhanced progress messages for BPC repair.
Save Upgrade Data/Backup
Enhance Save Upgrade Data to preserve "Allowed Hosts" on upgrades to V5R2. The missing "Allowed Hosts" are: Secure ASM Access, Open Pegasus, FCS, Eclipse, L2TP, SLP, RSCT Peer Domains, Cluster Ready Hardware.
Network/Connectivity
- Enhanced the HMC remote support functions.
- Added new SNMP version (community name)
Problem Analysis/Call Home
- Corrected problem that caused the calling home and save to DVD of serviceable event problem data to fail. The manual call home of data is indicated to be successful but fails. Copy to DVD failed with HSCS0141: "An error occurred while copying the selected file to the DVD media. Ensure there is available space on media and the try the operation again."
- Corrected a problem where RIO cabling errors were not being reported to Service Focal Point.
- Corrected an issue that caused dump retrieval to fail when multiple threads attempted to read dumps simultaneously.
- Enhanced handling of Managed System disconnects and reconnects so that error logs are not discarded and dumps are retrieved.
- Enhanced handling of operating system generated errors to prevent reporting of closed events after an HMC code update.
Service Focal Point
- Corrected Service Utilities to enable launching of ASM when an FSP ip address is available and the FSP is reachable on the network.
- Corrected descriptive text for "System Unit, Model 570". This previously appeared on several panels such as Service Utilities as "MLNODE".
Service Agent
- Enhanced Service Agent Connection Manager by adding a client adjustable timeout for pSeries POWER4 Servers.
- Added support to Repair and Verify for the repair of FSP devices on models 590 and 595.
PTF MH00610
Fixes for Dump Collection issues on redundant FSP
This PTF can only be installed on an HMC at the following code level:
HMC V5R2.0 and PTF MH00586
For model 9119-590, 9119-595, 9406-595, 9116-561 and 9117-570 systems with redundant service processor feature at system firmware levels SF235_160, SF235_180, and SF235_185:
A system firmware problem has been identified that will cause the secondary service processor (FSP) to reset during run time causing an FSP dump to be taken. The HMC currently does not collect the dump from the secondary FSP so after multiple occurrences, the FSP dump space will fill up resulting in the secondary FSP becoming deconfigured (GARDed) when no hardware problem exists.
The system will lose service processor redundancy and continue to run without interruption. Restoring service processor redundancy will require a scheduled maintenance outage.
To prevent the secondary FSP from becoming GARDed, HMC PTF MH00610 has been created to collect dumps from the secondary FSP so that the FSP's dump space will not fill up.
Enhancements and fixes
This package includes fixes for the following issues:
- Dump is not retrieved properly from redundant FSP.
- SFP event is not logged for missing FSP card.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00610.zip MH00610.iso |
7781834 8652800 |
01094 27000 |
MB01279 | MH00610 |
Splash panel information displayed after installation | ||||
MH00610: Fix Dump collection issues (03-09-2006) |
PTF MH00586
HMC 5.2 required maintenance
The PTF MH00586 corrective service package is a Required Maintenance fix that must be installed on HMC Version 5 Release 2.0
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
MH00586.zip MH00586.iso |
411536940 413945856 |
28266 05420 |
MB01365 | MH00586 |
Splash panel information displayed after installation | ||||
Version: 5 Release: 2.0 HMC Build level 20060210.1 MH00586: Required fixes for HMC V5R2.0 (02-14-2006) ","base_version=V5.2.0 |
Enhancements and fixes
This package provides fixes for the following issues:
- Fix for Daylight Saving Time changes
- Huge Page Activation problem
- Multiple partition shutdown deadlock problem
- System attention LED display problem
- Fix for disabling port 4411.
- R & V Cold FSP repair fixes
- Fix for hang when performing add FRU task on 9116-561 system
PTF MH00564
HMC 5.2 Update corrective service.
The HMC 5.2 Update corrective service package can be installed by means of the Install Corrective Service task.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
HMC_Update_V5R2.0_1.zip HMC_Update_V5R2.0_2.zip |
1029537894 991741042 |
33672 46088 |
MB01336 | MH00564 |
HMC_Update_V5R2.0_1.iso HMC_Update_V5R2.0_2.iso HMC_Update_V5R2.0_2.iso |
676667392 675817472 679307264 |
26537 51075 26171 |
||
Splash panel information displayed after installation | ||||
Version: 5 Release: 2.0 HMC Build level 20060117.1 ","base_version=V5.2.0 |
Enhancements and fixes
For enhancements and fixes included in the HMC 5.2 Update corrective service package, please see Enhancements and changes in HMC 5.2.
PTF MH00521
HMC 5.2 Recovery Media images.
The HMC 5.2 Recovery Media images can be used to upgrade your HMC from HMC 5.1 to 5.2, or to perform a clean installation of HMC 5.2.
Package name | Size (bytes) | Checksum | APAR # | PTF# |
---|---|---|---|---|
HMC_Recovery_V5R2.0_1.iso HMC_Recovery_V5R2.0_2.iso |
1540292608 1075544064 |
00985 11116 |
MB00004 | MH00521 |
Splash panel information displayed after installation | ||||
Version: 5 Release: 2.0 HMC Build level 20060210.1 ","base_version=V5.2.0 |
Enhancements and fixes
For enhancements and fixes included in the HMC 5.2 Recovery Media package, please see Enhancements and changes in HMC 5.2.
Enhancements and changes in HMC 5.2
HMC 5.2 enhancements for the Hardware Management Console include:
Server and Partition Management
- Support for configuring Huge Page Memory.
- Support for collecting and viewing resource utilization data.
- Support for On/Off CoD High Water Mark.
- Support for Redundant Error Reporting.
System plans
- Automated creation of partition profiles, system profiles and their interrelated settings based on sysplan files.
- Support for managing system plans (import, export, deploy, remove, view).
- Support for creating a system plan from a managed system.
Repair and verify
- Concurrent maintenance support for p5 595, i5 595 Node add.
- Concurrent maintenance support for p595, i5 595 Redundant Clock Repair.
HMC Command Line
- The following commands have been added for utilization data management
chlparutil
Changes the HMC settings for utilization data collection for managed systemslslparutil
Lists utilization data collected for a managed systemrmlparutil
Removes utilization data collected for a managed system - The following commands have been added for system plans:
cpsysplan
Imports or exports system plans to or from the HMCdeploysysplan
Deploys a system plan to a managed systemlssysplan
Lists system plan files on the HMCmksysplan
Creates a system plan from a managed systemrmsysplan
Removes a system plan from the HMC - The chhmc command has been enhanced to configure the network interface on the HMC as a startup device.
- The chusrtca command has been enhanced to allow the display of a banner file prior to SSH login to the HMC.
- The lshmc -r command has been enhanced to display network boot settings.
- The lshmc ���V command has been enhanced to display the version of the recovery images installed on the HMC.
- The lshwres command has been enhanced to display the maximum system capacity value for memory and processors for a managed system.
- The lsrefcode command has been enhanced to display managed system reference codes for the secondary service processor.
- The mksyscfg command has been enhanced to save the current configuration of a partition to a new partition profile.
- The following commands have been enhanced to support huge page memory: chhwres, chsyscfg, lshwres, lssyscfg, and mksyscfg.
- The following commands have been enhanced to support redundant error path reporting: chsyscfg, lssyscfg, and mksyscfg.
National Language Support
- Support for BiDi (Bi-directional), UTF-8, and other locales
- Support for additional keyboards
Known issues in HMC 5.2.0
Upgrading from HMC Version 4 to HMC Version 5
- The Certificate Authority public key file for use with Websm Java Webstart client is not preserved when an HMC is upgraded from version 4 to version 5. The result is a warning message that a non-secure connection will be used when using Java Webstart client to connect to the upgraded HMC version 5. To resolve this problem, regenerate the Certificate Authority public key file by following these steps at the local HMC:
- Select System Manager Security ' Certificate Authority ' Copy this Certificate Authority's public key ring file to removable media. Perform this operation at the local HMC where the Certificate Authority was defined and the server keys were previously generated.
- Insert a media to receive the public key ring file, and then select HMC or AIX Client option when prompted.
- When the task completes, use the media created on the HMC that the webstart client was downloaded from. Select System Manager Security 'Certificate Authority' Copy Another Certificate Authority's public key ring file from removable media.
- When the task completes, the Certificate Authority public key ring file is re-created on the HMC.
- At the completion of the Upgrade, the HMC's hostname will remain as localhost.localdomain. Shutdown and reboot the HMC to use the hostname assigned to the HMC prior to the Upgrade.
Server and Partition
- Dynamic partition configuration for memory move can take a while. During that time, no other operation can be performed on the partition.
- After configuring your network setting, make sure to reboot your HMC. Otherwise, dynamic logical partitioning for AIX/Linux partitions may not work.
- Users cannot change virtual Opticonnect and HSL Opticonnect settings through the GUI without activating the changes through a partition profile. Users can change the settings dynamically through the command line interface.
Usage:
chhwres -m <managed system name> -r virtualio --rsubtype virtualopti -p <partition name> -o s -a virtual_opti_pool_id=[0|1]Usage:
chhwres -m <managed system name> -r virtualio -rsubtype hsl -p <partition name> -o s -a hsl_pool_id=[0|1] - Error messages for some Dynamic Logical Partitioning tasks give 'AIX' as the partition type even though it is actually a Linux partition.
- User with hmcoperator and hmcpe task role cannot shutdown a partition from the GUI. The user can use the command line interface to shutdown the partition.
Usage: chsysstate -m <managed system name> -r lpar -n <partition name> -o shutdown
- Only a single USB floppy drive can be attached to save CoD data and Security keys.
- In remote client mode when performing Dynamic partition configuration for memory, entering invalid values in the combobox field causes loss of keyboard control. Do one of the following to recover:
- Close the dialog and re-launch.
OR - Close the error dialogs and click on the Advanced tab. Return to the Main tab, and then use the keyboard to enter valid values.
- Close the dialog and re-launch.
- Unable to perform Dynamic Logical Partitioning virtual I/O remove operations if the partition does not have a current profile.
- Unable to tab to the ���Help���, ���Back���, ���Next���, and ���Cancel��� buttons in the setup wizard. User needs to use the mouse to click on the buttons.
- To customize a task role for a user to open and use the 5250 console, you need to include the following tasks for that role:
Console Tasks->Partition->Open Terminal Window
Command Line Tasks->Logical Partition->5250 Console Connect
Command Line Tasks->Logical Partition->5250 Console Write - The HMC will display the wrong device information since the feature code 2849 is used for two different adapters :
OS/400 p Linux p AIX PCI 100/10Mbps Ethernet IOA 2849 n/a n/a PCI 2D Graphics Accelerator n/a 2849 2849
Only a visual inspection of the slot on the machine will be able to determine if the adapter is an Ethernet card or a Graphics card. Once the partition is activated with the adapter in the profile, the description should display the correct adapter information.
LIC Code Update
- If the HMC remote client loses its connection while it is downloading firmware, the download fails. Retrying the operation "Change internal Code" might fail again with the message "Object is busy, and the task cannot handle busy objects". Reboot the HMC and retry the "Change internal Code" operation.
- To recover from the error message "ACT01724 The operation failed due to an internal code failure": Verify that the state of the managed systems and frames is connected by using the lssysconn -r all command at the command line. Retry the operation.
- When LIC Code Update is in progress, the Frame state changes from standby/standby to standby/unavailable. This change may happen if a power dump is in progress, and then the code update operation fails. Wait for the Frame state to change back to standby/standby, and then retry the operation.
- To recover when the error message "HSCF0052W Frame tttt-mmm*sssssss is locked by another process" is shown when you perform the Licensed Internal Code Update operation on the p5 595, i5 595, p5 590 and p5 575 managed systems:
- Verify that no other frame operation that uses the following locks:
Repair and Verify Operation
Initialize Frame Operation
Set Frame Number Operation
Licensed Internal Code Updateis in progress on a remote HMC or a dual HMC.
- Next, issue the rmlock command to force the release of the HMC lock on a managed frame.
Usage:
rmlock -e <frame name>
- Verify that no other frame operation that uses the following locks:
National Language Support
- Mnemonics are not supported in double-byte and ru locales
- The HMC uses several external components. These components are not developed by the HMC team and are translated as part of a separate translation plan and schedule. The mix of English and translated text is an unavoidable situation and has the potential to occur anytime the HMC is updated or pulls in a new version of an external application that is updated in between normally scheduled translation cycles.
- Due to the limitations of groff, some characters in the output of "man" command might be corrupted in traditional Chinese, simplified Chinese and Korean when the window is too narrow. Widen the window and retry the command.
- If the browser on the HMC is used to view Japanese PDF files, Japanese text will not be displayed correctly in the bookmark page. Only English PDF files can be viewed on the HMC, even when the language is set to ja_JP.
- Korean input is not supported. Press Shift-Space to switch between English and Korean input mode.
- Traditional and Simplified Chinese input is supported in zh_TW and zh_CN locales. Press CTRL-Space to switch between English and Chinese input mode. Press CTRL-Shift to select an input method. Press space bar to see more Chinese characters.
- Japanese input is supported. Press Shift-Space to switch between English and Japanese input mode.
- User ID, User information, HMC User password, Partition name, managed system name, profile name and system profile name are in English only.
- IBM275 doesn't work well when connecting from IBM Personal Communications or iSeries Access to an HMC. Use another Brazil codepage. The codepage "IBM930 Japan Katakana" doesn't work well either. Use "IBM930 Japan Katakana Extended" instead.
- An ibm5250 session opened on the HMC locally will be in the same locale as the one that is set for the HMC. To open a session in a different locale, change the HMC locale first, logout, login, and then invoke ibm5250. The other option is to connect to the HMC using a remote emulator, for example, IBM Personal Communications or iSeries Access, in the desired locale.
Languages | Supported or Not Supported | Locales |
---|---|---|
English | Supported | en_US, en_GB, en_GB@euro, en_AU, en_BE, en_BE@preeuro, en_CA, en_HK, en_Ne, en_IE, en_IE@preeuro, en_NZ, en_PH, en_PK, en_ZA, en_SG |
German | Supported | de_DE, de_DE@preeuro, de_CH, de_AT, de_AT@preeuro, de_LU, de_LU@euro |
French | Supported | fr_FR, fr_FR@preeuro, fr_CH, fr_CA, fr_BE, fr_BE@euro, fr_LU, fr_LU@euro |
Italian | Supported | it_IT, it_IT@preeuro, it_CH |
Spanish | Supported | es_ES, es_ES@preeuro, es_AR, es_BO, es_CL, es_CO, es_CR, es_DO, es_EC,es_SV, es_GT, es_HN, es_MX, es_NI, es_PA, es_PY,es_PE, es_PR, es_US, es_UY,es_VE |
Brazilian Portuguese | Supported | pt_BR |
Japanese | Supported | ja_JP |
Simplified Chinese | Supported | zh_CN, zh_SG |
Traditional Chinese | Supported | zh_TW, zh_HK |
Korean | Supported | ko_KR |
Hungarian | Supported | hu_HU |
Dutch | Supported | nl_NL, nl_NL@preeuro, nl_BE, nl_BE@preeuro |
Russian | Supported | ru_RU |
Czech | Supported | cs_CZ |
Slovakian | Supported | sk_SK |
Miscellaneous Functions
- Help Search is not supported. Help Find is supported.
- Printing is not supported.
- The numerical keypad on some keyboards doesn't work. Use the normal numerical keys instead.
- When your Power5 system is shipped to you it is in a non-HMC managed mode by default. Once you attach
and set up an HMC to manage your Power5 system, the default non-HMC managed mode exits. The
procedure to return to the default non-HMC managed mode is documented on the InfoCenter website under "Resetting the server to a non-partitioned configuration". Use the following link to view the document.
http://publib.boulder.ibm.com/infocenter/eserver/v1r2s/en_US/info/iphbl/iphblresetserver.htm
Reference | Abstract |
---|---|
CAN-2005-0109 | OpenSSL update |
CAN-2005-2969 | OpenSSL fix for potential SSL 2.0 Rollback vulnerability |
CVE-2004-0175 | OpenSSH SCP Client File Corruption Vulnerability |
CVE-2002-0839 CVE-2002-0840 CVE-2002-0843 |
Apache HTTPD Multiple Vulnerabilities |
CVE-2001-0572 | SSHv1 Protocol Available |
CAN-2003-0989 | tcpdump remote DOS |
CAN-2004-0078 | mutt remote buffer overflow |
CAN-2004-0110 | libxml2 URI Parsing Remote Buffer Overflow |
CAN-2004-0109 CAN-2004-0181 |
Linux kernel ISO9660/JFS local privilege escalation, info leak |
CAN-2004-0183 | tcpdump ISAKMP remote DOS |
CAN-2004-0427 CAN-2004-0424 CAN-2004-0229 CAN-2004-0228 CAN-2004-0394 |
Linux kernel privilege escalation, local DoS |
CAN-2004-0174 CAN-2003-0020 CAN-2003-0993 CAN-2003-0542 |
apache - multiple vulnerabilities |
CAN-2004-0554 | Linux kernel "__clear_fpu()" Macro local DoS |
CAN-2004-0523 | kerberos aname_to_localname remote root compromise |
CAN-2004-0492 | apache: remote overflow in mod_proxy |
CAN-2004-0460 CAN-2004-0461 VU#317350 VU#654390 |
dhcp-server: remote system compromise |
CVE-2002-1363 | libpng remote DoS |
CAN-2004-0590 | Certificate chain authentication in Openswan pluto |
CAN-2004-0649 | L2tpd: remote execution of arbitrary files w/ privs of l2tpd user |
VU#388984 VU#236656 VU#160448 VU#477512 VU#817368 VU#286464 CAN-2004-0597 CAN-2004-0598 CAN-2004-0599 |
libpng: multiple vulnerabilities |
CAN-2004-0415 | kernel: local privilege escalation, race condition in file offset pointer handling |
VU#550464 CAN-2004-0644 |
krb5: remote unauthenticated DoS |
CAN-2004-0817 | imlib: local execution via heap overflow |
CAN-2004-0687 CAN-2004-0688 |
xf86: multiple buffer overflows with malformed xpm images |
CAN-2004-0966 | gettext: Insecure temporary file handling |
CAN-2004-0804 CAN-2004-0886 |
tiff: Buffer overflows in image decoding |
CAN-2004-0884 | Cyrus-sasl2: (ver2.1.7)Insecure handling of environment variable |
CAN-2004-0971 | krb5: krb5-workstation: Possible symlink attack, priv escalation via temproary file mishandling |
CAN-2004-0989 | libxml: remote code execution, buffer overflow |
CAN-2004-0975 | Openssl: possible symlink attack via temp file mishandling |
CAN-2004-0940 | Apache: local buffer overflow in get_tag function in mod_include |
SUSE-SA:2004:041 | xf86: SuSE security updates for libxpm |
CAN-2004-0782 | mlib: SuSE xpm security updates in imlib |
CAN-2004-1010 | zip: buffer overflow in info-zip when using recursive folder compression |
CAN-2004-1308 | tiff: multiple buffer overflows |
CAN-2004-0986 | iptables: variable init failure can cause failure to load firewall rules |
CAN-2004-0883 CAN-2004-0949 CAN-2004-1070 CAN-2004-1071 CAN-2004-1072 CAN-2004-1073 CAN-2004-1074 |
kernel: SuSE update for multiple local and remote DoS vulnerabilities |
CAN-2005-0155 CAN-2004-0452 CAN-2005-0077 |
Perl: SuSE security update to address two priv escalation and a buffer overflow condition |
CAN-2005-0449 CAN-2005-0209 CAN-2005-0529 CAN-2005-0530 CAN-2005-0532 CAN-2005-0384 CAN-2005-0210 CAN-2005-0504 CAN-2004-0814 CAN-2004-1333 CAN-2005-0003 |
SuSE updates for multiple issues on 2.4-2.6.11 kernels |
CAN-2005-1993 | sudo: vulnerabilities allow execution of arbitrary commands |
CAN-2005-1267 CAN-2005-1278 CAN-2005-1279 CAN-2005-1280 |
tcpdump: fix for several DOS vulnerabilities |
CAN-2005-1151 CAN-2005-1152 CAN-2005-1349 CAN-2005-0103 CAN-2005-0104 CAN-2005-1455 CAN-2005-1454 CAN-2004-1456-CAN-2004-1470 |
tiff: buffer overflow allows execution of arbitrary code |
Hints and Tips for the HMC Desktop
- To launch the browser, right click on the desktop to display the menu. Select "Net", and then "Browser".
- To start a restricted shell terminal, right click on the desktop to bring up the menu. Select Terminals", and then "rshterm".
- Currently, HMC only stores four (4) service processor dumps and four (4) platform system dumps per managed system.
- Changes of a partition profile do not apply immediately to the partition. The changes on the partition only take effect when activation is done through the profile.
- To view keylock positions and SRC values when performing Operator Panel Service Functions through Service Focal Point, use the Server and Partition plugin.
- To view system event logs, you must login as a user with the hmcpe role. From Service Applications, select Service Focal Point -> Service Utilities -> Actions -> View Problem Logs.
- HMC Version 4 Release 2 or higher is required to manage pSeries Power5 servers.
- HMC has enabled UTF-8 locale support. This additional support is currently only available through the command line. To enable the new locales, execute the following command: chhmc -c <locale> -s modify -l <locale name>
- HMC has enabled additional keyboard support. There are multiple pages for the keyboard configuration. During the keyboard configuration, enter 98 to go the next page and 97 to go to the previous page.
- If the HMC is used in a Cluster 1600 environment, see the following PDF-formatted document for scaling limitations: IBM eServer 1600 Facts and Features
- Refer to the following page for the recommended HMC and Server code levels for the currently supported Power5 releases. Power5 Code Matrix: https://esupport.ibm.com/customercare//sas/f/hmc/power5/tips/matrix.html
eServer i5 and p5 Education available on Resource Link
The following customer courses will be available from Resource Link for the Product Announce on May 4, 2004.
- How to Use the eServer i5 and p5 Hardware Management Console
This course explains how to install and configure the Hardware Management Console (HMC) for the Model 520/570. It also covers the HMC's basic operations by exploring the general user interface. Partitioning is discussed in detail, with explanations showing both command line and GUI support. - eServer i5 and p5 - Physical Planning for Installation
This course discusses considerations for the physical planning for installation of eServer Models 520 and 570. It then provides the user with links to obtaining the step-by-step installation procedures. - Resource Link Highlights
This course provides an overall look at the major Resource Link (RL) areas and how to use them. These areas are Planning, Education, Library, Forums, Fixes, Problem Solving, Services, Customer Initiated Upgrade, and Tools. It also provides step-by-step procedures in using the Subscription function. - Performing Licensed Internal Code Maintenance
This course discusses about maintaining the software that enables hardware such as the service processor on your eServer POWER5 system.
Access to these courses requires an IBM Registration ID and Resource Link Access.
To obtain an IBM Registration ID
- Go to http://www.ibm.com/servers/resourcelink
- Select "Register" under New users
- On the My IBM Registration, fill in an e-mail address for IBM ID and password, and the Security question and answer and the Country of residence and then click Continue and fill in the rest of the User information and click Submit.
Resource Link Access for New Users
- Go to http://www.ibm.com/servers/resourcelink
- Select "Sign in" enter the IBM ID and password you used to register above
- Select "Customer"
- Click "Submit" Once submitted it will take an hour before the access takes effect
To view a course
- Sign in to Resource Link
- Select Education in the navigation bar on the left
- From the Education page, select "eServer i5 and p5 courses"
- Select "How to Use the eServer i5 and p5 Hardware Management Console"
- Select "Performing Licensed Internal Code Maintenance"
- Double-click the link to open the course.
Notes:
- The courses are browser based. For optimal viewing, we recommend Microsoft Internet Explorer 6.0 or higher with your display set at 1024 x 768. To set your display, go to My Computer -> Display -> Settings
- Course pages can be book marked for easy retrieval.
- Course simulations open in a separate window. Use the X in the upper right corner of the window to close the simulation.
- If there are QuickTime videos in the course, you need to have the QuickTime viewer installed. A link to the free viewer is on each Resource Link course page and on the related page within each course.