Fix Readme
Abstract
This document provides information about the installation of Licensed Machine or Licensed Internal Code, which is sometimes referred to generically as microcode or firmware.
This package provides firmware for Power System S812L (8247-21L), Power System S822L (8247-22L), Power System S824L (8247-42L), Power System S812 (8284-21A), Power System S822 (8284-22A), Power System S814 (8286-41A), Power System S824 (8286-42A); Power System E850 (8408-E8E); Power System E850C (8408-44E); Power System S812L (5148-21L) and Power System S822L (5148-22L) servers only.
Release notes for SV860_245 / FW860.B3
Read the following important information prior to installing this Service Pack.
Service Pack Summary: Concurrent Service Pack
This service pack addresses a HIPER (High Impact/Pervasive) Security issue. Please see the Description file for details.
The product for which IBM provided this firmware or security update has reached End of Support. IBM is maintaining this final firmware or security update online to comply with legal requirements, but IBM’s retention of this update does not warrant that the IBM product is supported nor that this update covers issues or vulnerabilities after the date of the update’s publication.
Please review the Description file sections, AIX iFix Required and IBM i Minimum Levels, prior to upgrading to the SV860_039 (FW860.00) or later level of firmware.
Content
Minimum HMC Code Level
This section is intended to describe the "Minimum HMC Code Level" required by the System Firmware to complete the firmware installation process. When installing the System Firmware, the HMC level must be equal to or higher than the "Minimum HMC Code Level" before starting the system firmware update. If the HMC managing the server targeted for the System Firmware update is running a code level lower than the "Minimum HMC Code Level" the firmware update will not proceed.
he Minimum HMC Code level for this firmware is: HMC V8 R8.6.0 (PTF MH01654) with Mandatory efix (PTF MH01655) or higher.
Although the Minimum HMC Code level for this firmware is listed above, V9R2, HMC V9R2M951.2 (PTF MH01892) or higher is recommended to avoid an issue that can cause the HMC to lose connections to all servers for a brief time with service events E2FF1409 and E23D040A being reported. This will cause all running server tasks such as server firmware upgrade to fail.
For information concerning HMC releases and the latest PTFs, go to the following URL to access Fix Central:
http://www-933.ibm.com/support/fixcentral/
For specific fix level information on key components of IBM Power Systems running the AIX, IBM i and Linux operating systems, we suggest using the Fix Level Recommendation Tool (FLRT):
http://www14.software.ibm.com/webapp/set2/flrt/home
NOTES:
-You must be logged in as hscroot in order for the firmware installation to complete correctly.
- Systems Director Management Console (SDMC) does not support this System Firmware level.
AIX iFix Required
For IBM Power System servers with the PCIe 2-port Async EIA-232 Adapter installed on AIX partitions, an AIX fix resolving the async port interrupt handling (APAR IV77596) must be installed before updating to the SC840_056 (FW840.00) or later level of firmware.
The ports on the adapter (feature code EN27/EN28, CCIN 57D4) may become unusable with the installation of that firmware level due to an issue with how interrupts are handled. Many JAS_RTS error log entries are written to the error log due to this issue. Prior to this APAR shipping in a future Service Pack, AIX intends to publish ifixes for the latest Service Packs on all active Technology Levels on our ftp server, in ftp://aix.software.ibm.com/aix/ifixes/iv77596/ on or before Oct 13, 2015.
If you need an ifix other than the ones on this server, contact IBM support to request one for your specific situation. The procedure is intended to be performed by the customer. In the event that the customer has questions or concerns with the procedure, you should contact IBM Support. Please contact IBM Support: US Support: 1.800.IBM.SERV WW Support (select your country): http://www.ibm.com/planetwide/
IBM i Minimum Levels
For IBM i customers who have systems with machine type model 8286-41A or 8286-42A, firmware update has a prerequisite on partitions running IBM i operating system that own physical I/O.
For IBM i 7.1, the following minimum code levels are prerequisites:
IBM i 7.1 TR PTF Group SF99707 Level 9 + Cumulative PTF Package C4283710 + HIPER PTF Group
For IBM i 7.2, the following minimum code levels are prerequisites:
IBM i 7.2 TR PTF Group SF99717 Level 1 + Cumulative PTF Pacakge C4276720 + HIPER PTF Group
For IBM i 7.3,
- All IBM i 7.3 code levels are compatible with this firmware update.
Note 1: These code levels are not a requirement for IBM i partitions that are a client of VIOS.
Note 2: These IBM i code levels are listed as prerequisites for the feature code EMX0 expansion drawer. If this firmware release has already been applied, the above IBM i code level should be applied on IBM i partitions in order to maintain system stability.
Reference the following URL for IBM i Support: Recommended fixes:
https://www-01.ibm.com/support/docview.wss?uid=nas8N1021194
Important Information
Downgrading firmware from any given release level to an earlier release level is not recommended.
If you feel that it is necessary to downgrade the firmware on your system to an earlier release level, please contact your next level of support.
When configuring a network interface card (NIC) for remote IPL, only the most recently configured protocol (IPv4 or IPv6) is retained. For example, if the network interface card was previously configured with IPv4 information and is now being configured with IPv6 information, the IPv4 configuration information is discarded.
A single network interface card may only be chosen once for the boot device list. In other words, the interface cannot be configured for the IPv6 protocol and for the IPv4 protocol at the same time.
Concurrent Firmware UpdatesConcurrent system firmware update is supported on HMC Managed Systems only.
DPSS Updates
Power 8 servers use a programmable power controller called a DPSS (Digital Power Subsystem Sweep) which is located in each system node. The DPSS is used to control P8 fan speeds, check voltage levels of the power supplies for proper level, and operation in the system node. The DPSS image is persistent and is only reloaded if there is a system firmware update that contains a DPSS change. If there is a DPSS change and the system firmware update is concurrent, the DPSS update is delayed to the next IPL of the CEC which will cause an additional 18 to 20 minutes to be added on to the IPL. If there is a change and the firmware update is disruptive, then DPSS update occurs when the service processor is resetting to service processor stand-by state, and will add 18 to 20 minutes to this transition. During the DPSS update the HMC or op-panel, will display DPSS update progress codes which may be overwritten on the HMC, but will be displayed as C100C300 thru C100C3FF. If there is a DPSS change in a system firmware service pack, the change will be designated as deferred in the service pack README. DPSS changes will be described along with a reminder of the 18 to 20 minute additional time in the Firmware Information and Description section in the README.
The DPSS download progress codes are documented in the IBM Knowledge Center:
https://www.ibm.com/support/knowledgecenter/POWER8/p8eai/C1xx_info.htm
Memory Considerations for Firmware Upgrades
Firmware Release Level upgrades and Service Pack updates may consume additional system memory.
Server firmware requires memory to support the logical partitions on the server. The amount of memory required by the server firmware varies according to several factors.
Factors influencing server firmware memory requirements include the following:
- Number of logical partitions
- Partition environments of the logical partitions
- Number of physical and virtual I/O devices used by the logical partitions
- Maximum memory values given to the logical partitions
Generally, you can estimate the amount of memory required by server firmware to be approximately 8% of the system installed memory. The actual amount required will generally be less than 8%. However, there are some server models that require an absolute minimum amount of memory for server firmware, regardless of the previously mentioned considerations.
Additional information can be found at:
http://www-01.ibm.com/support/knowledgecenter/9119-MHE/p8hat/p8hat_lparmemory.htm
Firmware Information
Use the following examples as a reference to determine whether your installation will be concurrent or disruptive.
For systems that are not managed by an HMC, the installation of system firmware is always disruptive.
Note: The concurrent levels of system firmware may, on occasion, contain fixes that are known as Deferred and/or Partition-Deferred. Deferred fixes can be installed concurrently, but will not be activated until the next IPL. Partition-Deferred fixes can be installed concurrently, but will not be activated until a partition reactivate is performed. Deferred and/or Partition-Deferred fixes, if any, will be identified in the "Firmware Update Descriptions" table of this document. For these types of fixes (Deferred and/or Partition-Deferred) within a service pack, only the fixes in the service pack which cannot be concurrently activated are deferred.
Note: The file names and service pack levels used in the following examples are for clarification only, and are not necessarily levels that have been, or will be released.
System firmware file naming convention:
01SVxxx_yyy_zzz
- xxx is the release level
- yyy is the service pack level
- zzz is the last disruptive service pack level
An installation is disruptive if:
- The release levels (xxx) are different.
- The service pack level (yyy) and the last disruptive service pack level (zzz) are the same.
- The service pack level (yyy) currently installed on the system is lower than the last disruptive service pack level (zzz) of the service pack to be installed.
An installation is concurrent if:
The release level (xxx) is the same, and
The service pack level (yyy) currently installed on the system is the same or higher than the last disruptive service pack level (zzz) of the service pack to be installed.
Example: Currently installed service pack is SV830_040_040, new service pack is SV830_071_040.
Firmware Information and Description
| Filename | 01SV860_245_165.rpm |
| Size | 99171810 |
| Checksum | 20902 |
| md5sum | 3bb57732855797fc4b1a8d3458c50129 |
Note: The Checksum can be found by running the AIX sum command against the rpm file (only the first 5 digits are listed).
ie: sum 01SV860_245_165.rpm
| SV860 For Impact, Severity and other Firmware definitions, Please refer to the below 'Glossary of firmware terms' url: https://www.ibm.com/support/pages/node/6555136 |
|
|
SV860_245_165 / FW860.B3
2023/05/22
|
Impact: Security Severity: HIPER HIPER/Pervasive: A problem was identified internally by IBM related to SRIOV virtual function support in PowerVM. An attacker with privileged user access to a logical partition that has an assigned SRIOV virtual function (VF) may be able to create a Denial of Service of the VF assigned to other logical partitions on the same physical server and/or undetected arbitrary data corruption. The Common Vulnerability and Exposure number is CVE-2023-30440. |
How to Determine The Currently Installed Firmware Level
You can view the server's current firmware level on the Advanced System Management Interface (ASMI) Welcome pane. It appears in the top right corner. Example: SV830_123.
Downloading The Firmware Package
Follow the instructions on Fix Central. You must read and agree to the license agreement to obtain the firmware packages.
Note: If your HMC is not internet-connected you will need to download the new firmware level to a USB flash memory device or ftp server.
Installing the Firmware
The method used to install new firmware will depend on the release level of firmware which is currently installed on your server. The release level can be determined by the prefix of the new firmware's filename.
Example: SCxxx_yyy_zzz
Where xxx = release level
- If the release level will stay the same (Example: Level SC830_040_040 is currently installed and you are attempting to install level SC830_071_040) this is considered an update.
- If the release level will change (Example: Level SC830_040_040 is currently installed and you are attempting to install level SC840_050_050) this is considered an upgrade.
HMC Managed Systems:
Instructions for installing firmware updates and upgrades on systems managed by an HMC can be found at:
https://www.ibm.com/support/knowledgecenter/8247-21L/p8ha1/updupdates.htm
NovaLink Managed Systems:
A NovaLink managed system does not have a HMC attached and is managed either by PowerVM Novalink or PowerVC using PowerVM Novalink.
Instructions for installing firmware updates and upgrades on systems managed by PowerVM NovaLink can be found at:
http://www.ibm.com/support/knowledgecenter/POWER8/p8eig/p8eig_updating_firmware.htm
HMC and NovaLink Co-Managed Systems:
A co-managed system is managed by HMC and NovaLink, with one of the interfaces in the co-management master mode.
Instructions for installing firmware updates and upgrades on systems co-managed by an HMC and Novalink is the same as above for a HMC managed systems since the firmware update must be done by the HMC in the co-management master mode. Before the firmware update is attempted, one must be sure that HMC is set in the master mode using the steps at the following IBM KnowledgeCenter link for NovaLink co-managed systems:
http://ibm.biz/novalink-kc
Then the firmware updates can proceed with the same steps as for the HMC managed systems:
https://www.ibm.com/support/knowledgecenter/8247-21L/p8ha1/updupdates.htm
Systems not Managed by an HMC or NovaLink:
Power Systems:
Instructions for installing firmware on systems that are not managed by an HMC can be found at:
https://www.ibm.com/support/knowledgecenter/8247-21L/p8ha5/fix_serv_firm_kick.htm
Systems running Ubuntu operating system:
If Ubuntu will be used to update the system firmware, please follow these instructions to extract the installable binary and update/upgrade the firmware:
1) Download the .gz (tarball) from Fix Central to your Ubuntu system (ie, to /tmp/fwupdate).
2) Extract the .gz file to /tmp/ on the Ubuntu system:
Example:
tar -xzf /tmp/fwupdate/01SV840_075_048.tar.gz -C /tmp/fwupdate
3) Use update_flash -v -f <extracted file name> to verify the package.
4) Update your firmware using update_flash:
/usr/sbin/update_flash -f <extracted file name>
System will reboot during the firmware update. When the system reaches Ubuntu run-time state, you can then commit or reject the firmware update:
Commit: /usr/sbin/update_flash -c
Reject: /usr/sbin/update_flash -r
IBM i Systems:
For information concerning IBM i Systems, go to the following URL to access Fix Central:
http://www-933.ibm.com/support/fixcentral/
Choose "Select product", under Product Group specify "System i", under Product specify "IBM i", then Continue and specify the desired firmware PTF accordingly.
Firmware History
The complete Firmware Fix History (including HIPER descriptions) for this Release level can be reviewed at the following url:
https://www.ibm.com/support/pages/node/6985293
Was this topic helpful?
Document Information
Modified date:
07 September 2023
UID
ibm16985523