Notification
Risk classification
Informational
Subcategories for Informational notifications
Troubleshooting & Fixes
Affected Domain
Any TS4500 and TS7700 with remote access enabled through remote support center
Abstract
The remote support center feature that allows IBM to remotely connect to tape storage products utilizing TSSC/IMC requires the device to initiate a connection back to IBM on a set of fixed hostnames / IP addresses.
The hostnames / IP addresses used for this feature are changing in 2022.
Clients that use remote support center need to update their product and any firewall, HTTP proxies, or Remote Support proxies to continue to use remote support center without interruption.
A number of other IBM Storage products are also affected by this change. Links to details about the other products are included at the end of the document.
Description
To continue to allow IBM to provide remote support for tape storage products utilizing TSSC/IMC, changes need to be made to client network environment before the end of December 2022.
The new hostnames and IP addresses are active and ready to use, however for security reasons they do not respond to ping requests.
|
Hostname |
IP Address |
Port |
Description |
|
y03lcxapp002.ahe.boulder.ibm.com 2) |
204.146.30.139 |
22, 443 1) |
remote support center front server |
|
y01lcxapp002.ahe.pok.ibm.com 2) |
129.33.206.139 |
22, 443 1) |
remote support center front server |
|
y03lcxahttp008.ahe.boulder.ibm.com 2) |
204.146.30.157 |
22, 443 1) |
remote support center front server |
|
y01lcxahttp008.ahe.pok.ibm.com 2) |
129.33.207.37 |
22, 443 1) |
remote support center front server |
|
xrsc-front-srv-1.southdata.ibm.com 3) |
170.225.126.11 |
22, 443 1) |
remote support center front server |
|
xrsc-front-srv-2.southdata.ibm.com 3) |
170.225.126.12 |
22, 443 1) |
remote support center front server |
|
xrsc-front-srv-3.eastdata.ibm.com 3) |
170.225.127.11 |
22, 443 1) |
remote support center front server |
|
xrsc-front-srv-4.eastdata.ibm.com 3) |
170.225.127.12 |
22, 443 1) |
remote support center front server |
1) Port 443 required for remote support center proxy only
2) current remote support center front server expected to be discontinued by 12/31/2022
3) new remote support center front server available as of publishing this article
Recommended Action
TSSC/IMC configuration of remote support center settings can be changed by accessing the TSSC/IMC Web UI as documented in the TS7700 client IBM Docs:
https://www.ibm.com/docs/en/ts7700-virtual-tape/5.2.2?topic=security-managing-remote-support
https://www.ibm.com/docs/en/ts7700-virtual-tape/5.2.2?topic=security-managing-remote-support
After accessing the TSSC/IMC Web UI the “Support Center String” can be updated by removing the current string with the old hostnames or IP addresses:
y03lcxapp002.ahe.boulder.ibm.com:22;y01lcxapp002.ahe.pok.ibm.com:22;y03lcxahttp008.ahe.boulder.ibm.com:22;y01lcxahttp008.ahe.pok.ibm.com:22
and replacing it with the new string with the new hostnames or IP addresses:
xrsc-front-srv-1.southdata.ibm.com:22;xrsc-front-srv-2.southdata.ibm.com:22;xrsc-front-srv-3.eastdata.ibm.com:22;xrsc-front-srv-4.eastdata.ibm.com:22
Remote Support Proxy
IBM provides an optional product known as a Remote Support proxy that can be installed in the client environment. This proxy coalesces the remote support center traffic for multiple storage devices into a single server and tunnels the traffic through an HTTPS connection.
Any Remote Support Proxy configuration must be upgraded to v1.3.2 or higher, to utilize the new hostnames / IP addresses accordingly.
HTTP Proxy Configuration – only for Remote Support Proxy
Any HTTP proxies that are used for Remote Support Proxy connections might need to update configurations to allow connections to the new hostnames / IP addresses.
Firewall Configuration
Any firewall rules that were previously created to allow connections to the current hostnames / IP addresses must be updated with the new hostnames / IP addresses.
Other Affected Products
- Spectrum Virtualize
- IBM XIV Gen2, IBM XIV Gen3, and IBM FlashSystem A9000/R systems
- DS8000: Most DS8000 systems are not affected. The DS8000 team will contact affected customers directly
- IBM FlashSystem 900
Date first published
09 June 2022
[{"Risk Classification":"Informational","Line of Business":{"code":"","label":""},"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"STFS69","label":"TS7700"},"ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Risk Classification":"Informational","Line of Business":{"code":"LOB26","label":"Storage"},"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"STQRQ9","label":"TS4500 Tape Library (3584)"},"ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Was this topic helpful?
Document Information
Modified date:
09 June 2022
UID
ibm16586384