====== Check Fix to apply on AIX ======
===== Global check =====
First step, check the whole compatibility level between all components on FLRT site
https://www14.software.ibm.com/webapp/set2/flrt/power
Check server model and FW, OS level and PowerHA level...:
[root@nim]/root# /usr/bin/dsh 'lsattr -El sys0 -a modelname' | cut -d ' ' -f3 | sort -u
IBM,8286-42A
IBM,9009-41A
[root@nim]/root# /usr/bin/dsh 'lsattr -El sys0 -a fwversion' | cut -d ' ' -f3 | sort -u
IBM,FW860.42
IBM,FW910.01
[root@nim]/root# oslevel -s
7100-05-02-1810
[root@nim]/root# halevel -s
7.2.2 SP1
===== AIX patches =====
To know which security and hiper patch to apply on AIX LPARs, use the IBM FLRT.
All APARs: https://esupport.ibm.com/customercare/flrt/doc?page=aparCSV
Only HIPER: https://public.dhe.ibm.com/software/server/flrtvc/hiper_security.csv
First download latest script FLRTVC.ksh and latest hiper patch file. Please rename the script **flrtvc.ksh** by adding the version:
[root@nim]/export/softs/flrt# ksh93 flrtvc_0.8.1.ksh -f hiper_security_2019-01.csv
Fileset|Current Version|Type|EFix Installed|Abstract|Unsafe Versions|APARs|Bulletin URL|Download URL|CVSS Base Score|Reboot Required|Last Update|Fixed In
bos.rte|7.2.3.15|sec||NOT FIXED - There is a vulnerability in FreeBSD that affects AIX.|7.2.3.0-7.2.3.15|IJ09625|http://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc||CVE-2018-6922:7.5|NO|11/08/2018|7200-03-03
bos.rte|7.2.3.15|sec||NOT FIXED - There is a vulnerability in FreeBSD that affects AIX.|7.2.3.0-7.2.3.15|IJ09625|http://aix.software.ibm.com/aix/efixes/security/freebsd_advisory.asc||CVE-2018-6922:7.5|NO|11/08/2018|3.1.0.20
For more details add **-av**
For info, latest security efix can be found in:
https://aix.software.ibm.com/aix/efixes/security/
To get the list of all APARs and security:
https://esupport.ibm.com/customercare/flrt/doc?page=aparCSV
===== Microcode updates =====
To know which firmware to apply using the latest microcode catalog:
https://public.dhe.ibm.com/software/server/firmware/catalog.mic
Copy the file into **/var/adm/invscout/microcode/catalog.mic**
[root@nim]/root# invscout -u -catl /tmp/catalog.mic
****** Command ---- V2.2.0.20
****** Logic Database V2.2.0.2
Initializing ...
Identifying the system ...
Working ...
Getting system microcode level(s) ...
Scanning for device microcode level(s) ...
74 devices detected; each dot (.)
represents 10 devices processed:
.......
Writing Microcode Survey upload file ...
------------------------------------------------------------------------------------------------------------------------------------
Microcode Survey Results
------------------------------------------------------------------------------------------------------------------------------------
Hostname . . . . . . : nim
Command Version . . . : 2.2.0.20
Logic Database Version: 2.2.0.2
Survey Date and Time : Mon Jan 21 13:49:25 2019
OS Level . . . . . . : 7.2.0.0
uname -M . . . . . . : IBM,8286-42A
catalog.mic date . . : 01-11-2019
Logical Current Level Available Level Effect Suggested Action Device
------------------------------------------------------------------------------------------------------------------------------------
sys0 SV860_138 SV860_180 Take Offline Update 5148-21L; 5148-22L; 8247-21L; 8247-22L; 8247-42L; 8284-
fcs0 00010000020025201919 00011000040041500010 None Update PCIe2 2-Port 16Gb FC Adapter
fcs1 00010000020025201919 00011000040041500010 None Update PCIe2 2-Port 16Gb FC Adapter
ent0 30100150 30100150 None No Action PCIe2 4-Port (10GbE SFP+ & 1GbE RJ45) Adapter
ent1 30100150 30100150 None No Action PCIe2 4-Port (10GbE SFP+ & 1GbE RJ45) Adapter
ent2 30100150 30100150 None No Action PCIe2 4-Port (10GbE SFP+ & 1GbE RJ45) Adapter
ent3 30100150 30100150 None No Action PCIe2 4-Port (10GbE SFP+ & 1GbE RJ45) Adapter
sissas0 16519500 19511400 None Update PCIe3 RAID SAS Adapter Quad-port 6Gb x8 & PCIe3 SAS Tap
hdisk0 37343134 37343138 None Update Savvio 15K.3 146/300GB SAS Disk Drive
hdisk24 37343134 37343138 None Update Savvio 15K.3 146/300GB SAS Disk Drive
Microcode Survey complete
The output files can be found at:
Upload file: /var/adm/invscout/nim.mup
Report file: /var/adm/invscout/invs.mrp
Report file: /var/adm/invscout/invs.mrrup
To transfer the invscout 'Upload file' for microcode
comparison, see your service provider's web page.
ls -l /var/adm/invscout/
4 -rw-rw---- 1 invscout system 474 Feb 19 03:08 8286-42A_21xxxxW-2.InvScoutOutput
664 -rw-r--r-- 1 root system 676008 Feb 19 03:08 8286-42A_21xxxxW-2.VPD.xml
You can also use the MUP file **/var/adm/invscout/nim.mup** and compare it on IBM web page, this will report all firmware status:
https://www14.software.ibm.com/support/customercare/mds/fetch?page=mdsUpload.html