wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Check Fix to apply on AIX ======

===== Global check =====

First step, check the whole compatibility level between all components on FLRT site
https://www14.software.ibm.com/webapp/set2/flrt/power

Check server model and FW, OS level and PowerHA level...:
<cli prompt='#'>
[root@nim]/root# /usr/bin/dsh 'lsattr -El sys0 -a modelname' | cut -d ' ' -f3 | sort -u
IBM,8286-42A
IBM,9009-41A
[root@nim]/root# /usr/bin/dsh 'lsattr -El sys0 -a fwversion' | cut -d ' ' -f3 | sort -u
IBM,FW860.42
IBM,FW910.01
</cli>
<cli prompt='#'>
[root@nim]/root# oslevel -s
7100-05-02-1810
[root@nim]/root# halevel -s
7.2.2 SP1
</cli>

===== AIX patches =====

To know which security and hiper patch to apply on AIX LPARs, use the IBM FLRT.

All APARs: https://esupport.ibm.com/customercare/flrt/doc?page=aparCSV

Only HIPER: https://public.dhe.ibm.com/software/server/flrtvc/hiper_security.csv


First download latest script FLRTVC.ksh and latest hiper patch file. Please rename the script **flrtvc.ksh** by adding the version:
<cli prompt='#'>
[root@nim]/export/softs/flrt# ksh93 flrtvc_0.8.1.ksh -f hiper_security_2019-01.csv
Fileset|Current Version|Type|EFix Installed|Abstract|Unsafe Versions|APARs|Bulletin URL|Download URL|CVSS Base Score|Reboot Required|Last Update|Fixed In
bos.rte|7.2.3.15|sec||NOT FIXED - There is a vulnerability in FreeBSD that affects AIX.|7.2.3.0-7.2.3.15|IJ09625|http://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc||CVE-2018-6922:7.5|NO|11/08/2018|7200-03-03
bos.rte|7.2.3.15|sec||NOT FIXED - There is a vulnerability in FreeBSD that affects AIX.|7.2.3.0-7.2.3.15|IJ09625|http://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc||CVE-2018-6922:7.5|NO|11/08/2018|3.1.0.20
</cli>

For more details add **-av**

For info, latest security efix can be found in:
  https://aix.software.ibm.com/aix/efixes/security/

To get the list of all APARs and security:  
  https://esupport.ibm.com/customercare/flrt/doc?page=aparCSV

===== Microcode updates =====

To know which firmware to apply using the latest microcode catalog:
https://public.dhe.ibm.com/software/server/firmware/catalog.mic

Copy the file into **/var/adm/invscout/microcode/catalog.mic**

<cli prompt='#'>
[root@nim]/root# invscout -u -catl /tmp/catalog.mic

******  Command  ----  V2.2.0.20
******  Logic Database V2.2.0.2

Initializing ...
Identifying the system ...
Working ...
Getting system microcode level(s) ...
Scanning for device microcode level(s) ...

74 devices detected; each dot (.)
represents 10 devices processed:
.......

Writing Microcode Survey upload file ...
------------------------------------------------------------------------------------------------------------------------------------
Microcode Survey Results
------------------------------------------------------------------------------------------------------------------------------------
Hostname  . . . . . . : nim
Command Version . . . : 2.2.0.20
Logic Database Version: 2.2.0.2
Survey Date and Time  : Mon Jan 21 13:49:25 2019
OS Level  . . . . . . : 7.2.0.0
uname -M  . . . . . . : IBM,8286-42A
catalog.mic date  . . : 01-11-2019


Logical  Current Level  Available Level  Effect        Suggested Action  Device
------------------------------------------------------------------------------------------------------------------------------------
sys0     SV860_138      SV860_180        Take Offline  Update            5148-21L; 5148-22L; 8247-21L; 8247-22L; 8247-42L; 8284-
fcs0     00010000020025201919  00011000040041500010  None          Update            PCIe2 2-Port 16Gb FC Adapter
fcs1     00010000020025201919  00011000040041500010  None          Update            PCIe2 2-Port 16Gb FC Adapter
ent0     30100150              30100150              None          No Action         PCIe2 4-Port (10GbE SFP+ & 1GbE RJ45) Adapter
ent1     30100150              30100150              None          No Action         PCIe2 4-Port (10GbE SFP+ & 1GbE RJ45) Adapter
ent2     30100150              30100150              None          No Action         PCIe2 4-Port (10GbE SFP+ & 1GbE RJ45) Adapter
ent3     30100150              30100150              None          No Action         PCIe2 4-Port (10GbE SFP+ & 1GbE RJ45) Adapter
sissas0  16519500              19511400              None          Update            PCIe3 RAID SAS Adapter Quad-port 6Gb x8 & PCIe3 SAS Tap
hdisk0   37343134              37343138              None          Update            Savvio 15K.3  146/300GB SAS Disk Drive
hdisk24  37343134              37343138              None          Update            Savvio 15K.3  146/300GB SAS Disk Drive

Microcode Survey complete

The output files can be found at:
Upload file: /var/adm/invscout/nim.mup
Report file: /var/adm/invscout/invs.mrp
Report file: /var/adm/invscout/invs.mrrup

To transfer the invscout 'Upload file' for microcode
comparison, see your service provider's web page.
</cli>

 ls -l /var/adm/invscout/
   4 -rw-rw----    1 invscout system          474 Feb 19 03:08 8286-42A_21xxxxW-2.InvScoutOutput
 664 -rw-r--r--    1 root     system       676008 Feb 19 03:08 8286-42A_21xxxxW-2.VPD.xml

You can also use the MUP file **/var/adm/invscout/nim.mup** and compare it on IBM web page, this will report all firmware status: 
https://www14.software.ibm.com/support/customercare/mds/fetch?page=mdsUpload.html
wiki

User Tools

Site Tools

Page Tools
