IBM Support

A7004761 Expired Update Access Key (UAK) Order and Apply new UAK on Stand Alone IBM i or HMC Managed Power8, Power9 or Power10 servers.

Question & Answer


Question

How do we order and apply firmware update access keys (UAK) for POWER8, POWER9, and Power10 stand-alone systems running on IBM i OS?
How do we set up HMC Managing POWER8, POWER9 or Power10 servers to auto update access keys (UAK)?

Cause

Firmware Update Access Key Policy Briefly Explained:
Power8, Power9 and Power10 utilize server firmware Update Access Key (UAK) that is built in code that expires every 180 Days after warranty expires.  Systems must have a registered Hardware Maintenance service agreement on file for a new firmware update access key orders to be generated.

See information on IBM Power System Update Access Key Policy
Warranty Update Access Keys
During manufacturing, an initial UAK is installed that aligns with the servers warranty expiration dates.  A grace period is added depending on the Machine Type and Model. 
  • Low-end models have 36 months plus a 2-month grace period for UAK warranty.
  • High-end models have 12 months plus a 3-month grace period for UAK warranty.
Miscellaneous Equipment Specification (MES) Update Access Keys
  • High-End System Upgrades (MES) come with a 90-Day manufacturing UAK.
  • High-End Systems manufacturing records reflect the new UAK to the new VPD Anchor Card SN for 90 days.
  • If a system is not installed within the 90 days with service code 20 (to show MES Installed), a new UAK is needed to allow firmware updates. 
  • Without SC20 recorded by SSR(s) the UAK manufacturing records don't get updated. Manufacturing records keeps the original VPD Anchor Card SN and any new UAK request will fail for the new VPD Anchor card.
After Warranty Update Access Key Info:
Update access key warranty grace period is coded to allow time to register IBM Hardware Maintenance service agreements, special bid agreements and other terms of post-warranty agreement renewals.  Because IBM Hardware Maintenance service agreements can be registered randomly in any month of the year.  IBM created a 180-Day expiration interval to verify that that IBM hardware maintenance service agreements are registered and entitled for firmware downloads.
  • An Expired UAK does not affect normal server operation.
  • Update access keys do not require a dedicated system to apply.
  • UAK ensures that the latest server firmware can be downloaded on POWER8 systems and later.
  • UAK maintenance applies to both Stand-alone operating systems or systems managed by an HMC.
  • Firmware code is built in such a way that allows firmware downloads dated or released prior to the UAK expiration date.
  • Firmware code has been built to allow Hiper fixes in firmware to be downloaded with an expired UAK. It's important to have a current UAK to prevent emergency situations due to a Hiper fix.
  • Ordering and maintaining UAK is an administrative task maintained by clients administrative staff. Assistance is available to assist with methods of applying UAK.
  • Service and support best practices for Power Systems

Answer

 

IBM i V7R1M0 OS Power8 Stand-alone Systems (Non-HMC Managed Systems) Update Access Key (UAK) is a Manual process to order and enter a UAK

Step 1. Order an Update Access Key.

Determine your system serial number by entering this IBM i Command
===> WRKSYSVAL QSRLNBR

Enter Option 5=Display
Serial number. . . . :    21xxxxx (21 is a Plant ID that can vary)
  • You must have an IBM ID to access Entitled Systems Support (ESS). Register for an IBM ID Here:  What an IBM ID Can Do For You.
  • Login ESS Hover Over ‘My Entitled Hardware’ pull down >Select ‘Update Access Key.’
  • Add machine to list (menu) > Click the ‘+’ sign > Enter the Machine Type and Serial (Number) > Click Add to the list >Cancel or ‘x’ to exit. Follow the numerical sequence. Example:image-20231030205115-4
  • Click on the three vertical 'dots' under 'Actions' and Select 'Generate new key' Example:
image-20231030210330-5

Step 2. Enter UAK manually thru Advance System Management Interface (ASMi).

Step 3. Update the Server Firmware to the latest supported firmware release.

IBM i V7R2M0 OS or higher on Power8, Power9, and Power10 Stand-alone Systems (Non-HMC Managed Systems) Update Access Key (UAK) Auto update

Note: If, a UAK was ordered manually from Entitled Systems Support (ESS) the IBM i OS UAK Auto Update will fail with an error message CPIEF88.
Ref. CPIEF88: Download and apply Update Access Key stopped for the reason code from the audit log.
Note: Power8 servers firmware must be at SV840 or later for Auto UAK to work properly.
Follow Step 4. To enter the UAK that was manually ordered, then complete:
Step 1. Update IBM i OS with critical Java PTFs for ESA/ECS for UAK OS Auto updates.
Step 2.  IBM i OS Automatic Update Access Keys with IBM Electronic Service Agent (ESA)
  • Check and record your *ACTIVE Firmware and Update Access Key expiration date by entering IBM i command  ===> DSPFMWSTS <enter>
    Firmware entitlement date . . . . . . . . . :   04/01/22
     *ACTIVE SV840_xxx
  • Power8, if Server Firmware Level is below SV840 Skip to Steps 3, 4 and 5 otherwise continue here for Power8 firmware above SV840:
  • Prepare your server before the next A7004761 is logged in 180 Days or six months. Perform every step in the following document to completion:
  • DSPMSG QSYSOPR search for message id CPIEF87: Update Access Key has been handled successfully. This message indicates that the UAK refresh processing determined that the expiration date of the UAK was within the next 30 days. The processing downloaded the new UAK and applied the new UAK successfully.
    This ends the ESA Automatic Firmware Update Access Key setup.

  • There are cases once A7004761 is logged the Auto UAK with IBM eSA might not work. In this case, a manual intervention is needed to order and enter a new UAK via ASMi Complete Steps 3 and 4.

  • For CPIEF88 UAK Download stopped Reason Codes see Manage update access keys with IBM Electronic Service Agent (ESA) on IBM i

Step 3.  Order and apply new UAK for manual entry.
Note: Power8 servers firmware must be at SV840 or later for Auto UAK to work properly.
  • Determine your system serial number by entering IBM i Command
    ===> WRKSYSVAL QSRLNBR
    Enter Option 5=Display
    Serial number. . . . :    21xxxxx (21 is a Plant ID that can vary)
  • You must have an IBM Id to use Entitled Systems Support (ESS). Register for an IBM ID Here:  What an IBM ID Can Do For You.
  • Login ESS Hover Over ‘My Entitled Hardware’ pull down >Select ‘Update Access Key.’
  • Add machine to list (menu) > Click the ‘+’ sign > Enter the Machine Type and Serial (Number) > Click Add to the list >Cancel or ‘x’ to exit. Follow the numerical sequence. Example:
image-20231030205115-4
  • Click on the three vertical 'dots' under 'Actions' and Select 'Generate new key' Example:       image-20231030210330-5
Step 4. Enter Power8, Power9 and Power10 UAK manually using Advance System Management Interface (ASMi).
image-20190206184242-4

Step 5. Update the Server Firmware to SV840 or higher for Power8 to support ESA Automatic UAK at IBM i V7R2M0 OS or higher.

Note: Step 5 Also applies to Power9 and Power10 firmware download.

  • Check and record your *ACTIVE Firmware and Update Access Key expiration date by entering IBM i command  ===> DSPFMWSTS <enter>
    Firmware entitlement date . . . . . . . . . :   04/01/22
     *ACTIVE SV840_xxx
  • IBM i OS Firmware PTFs are in format MHxxxxx (MHxxxx are not included in Cume or Hardware group PTFs).
  • Run Fix Level Recommendation Tool (FLRT) to get the recommended server firmware level.
  • Find the latest IBM i OS firmware MHxxxx PTF by machine type, model, and IBMi OS Release here: Server Firmware for stand-alone IBM i systems

  • From the IBM i command line, download the latest Server Firmware.    Examples:

    POWER8 IBM i command ===> SNDPTFORD PTFID((MH0xxxx 5733908 V7R2M0))
    POWER9 IBM i command ===> SNDPTFORD PTFID((MH0xxxx 5733909 V7R2M0))
    POWER10 IBM i command ===> SNDPTFORD PTFID((MH0xxxx 5733910 V7R3M0))
  • A system IPL is required to apply system firmware. The control panel must be set to 01BN PVM=T
  • Stage the server firmware to be applied at the next IPL ref. PTF Apply Assistance
  • Prepare your server before the next A7004761 is logged in 180 Days or six months.  If you received message CPIEF87 in Step 2. Ignore the next step, otherwise complete the following UAK ESA setup instructions:
  • Manage update access keys with IBM Electronic Service Agent (ESA) on IBM i
This ends the ESA Automatic Firmware Update Access Key setup.

HMC-Managed Systems - Hardware Management Console (HMC) or vHMC (Virtual Software Appliance) setup for Automatic Firmware Update Access Key

Step 1. Set up HMC for Automatic Firmware Update Access Key

Step 2. Update the Hardware Management Console (HMC) or vHMC (Virtual Software Appliance) above V8.840.0 or Higher.

Step 3. Set up HMC for Automatic Firmware Update Access Key
  • Complete: How To Automatically Update Access Key)
  • Note: If the HMC is lower than V8.840.0 with A7004761 already logged and you do not update your HMC to V8.840.0, manual intervention is required. Continue with Step. 4

Step 4. Manually request a new Update Access Key.

  • Find your system machine type, model, and serial number (MTMSN).
  • Use the HMC and locate the General Properties tab that displays the system's name, serial number, model, and type General Settings - Properties
  • You must have an IBM Id to use Entitled Systems Support (ESS). Register for an IBM ID Here:  What an IBM ID Can Do For You.
  • Login ESS Hover over ‘My Entitled Hardware’ pull down >Select ‘Update Access Key.’
  • Add machine to list (menu) > Click the ‘+’ sign > Enter the Machine Type and Serial (Number) > Click Add to the list >Cancel or ‘x’ to exit. Follow the numerical sequence. Example:image-20231030205115-4
  • Click on the three vertical 'dots' under 'Actions' and Select 'Generate new key' Example:                    image-20231030210330-5

Step 5. Manually Enter Update Access Key

This completes the HMC UAK Auto Call Home Setup for HMC at or above V8.840.

Resolving Update Access Key Hardware Entitlement Issues

  • The most common reason UAK cannot be ordered is because systems are not registered for Hardware Maintenance or Entitled.  Contact your IBM Marketing Sales Channel to assist. You can also submit a 'Get help' request:
  • Add machine to list (menu) > Click the ‘+’ sign > Enter the Machine Type and Serial (Number) > Click Add to the list >Cancel or ‘x’ to exit. Follow the numerical sequence. Example: image-20231030205115-4
  • Click on the three vertical 'dots' under 'Actions' and Select 'Get help' Example:             image-20231031134109-1
  • Choose your Severity >Expand ‘These values will be submitted along with your comments' >Product: Firmware  > Machine type and Machine serial should be populated if not enter them. >Comments: enter your comments Example In numerical order:image-20231031135057-2
  • Once your request is submitted, a case number will created.
  • Entitled Systems Support (ESS) Need help? Contact ESS Support

[{"Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"7063CR1","label":"Hardware Management Console (7063-CR1)"},"ARM Category":[{"code":"a8m3p000000F95dAAC","label":"Capacity On Demand \/ Update Access Key (UAK)"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Type":"MASTER"},{"Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"7063CR2","label":"Hardware Management Console (7063-CR2)"},"ARM Category":[{"code":"a8m3p000000F95dAAC","label":"Capacity On Demand \/ Update Access Key (UAK)"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Type":"MASTER"},{"Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"HW1A1","label":"IBM Power Systems"},"ARM Category":[{"code":"","label":""}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Type":"MASTER"}]

Product Synonym

AS400; iSeries; IBMi; IBM i; OS/400, UAK, Update Access Key, ESS

Document Information

Modified date:
19 March 2024

UID

nas8N1022509

Page Feedback