Update Access Key must be up to date (valid IBM maintenance contract), to be able to apply a new firmware level

You can check expiration with

[root@aixa01]/root# /usr/bin/lparstat -u
FW Update Access Key Expiration  (YYYYMMDD):  20230512
AIX Update Access Key Expiration (YYYYMMDD):  -
AIX Image Date                   (YYYYMMDD):  -

Or

[root@aixa01]/root# lscfg -vpl sysplanar0 |grep -p "System Firmware"    
Microcode Image.............NL1020_035 NL1020_033 NL1020_035        
Microcode Level.............FW1020.00 FW1020.00 FW1020.00        
Microcode Build Date........20220527 20220527 20220527        
Update Access Key Exp Date..20220515        
Hardware Location Code......U9105.42A.XXXXXXX-Y1      
Physical Location: U9105.42A.XXXXXXX-Y1

By default, newly delivered systems include an UAK that expires after three years. Thereafter, the UAK can be extended every six months, but only if a current hardware maintenance contract exists for that server. The contract can be verified on the

https://www.ibm.com/servers/eserver/ess

As update access keys expire, they must be replaced by using the Hardware Management Console (HMC) or the ASMI on the eBMC.

My server already has an update access key, do I need another one for AIX?

If your Power10, or later, server has AIX partitions then you need an AIX update access key (UAK) installed on the server. A single AIX UAK covers all of the AIX levels and LPARs running on a server.

What happens when my AIX update access key expires?

Before expiration, the system will generate informational messages that the AIX update access key (UAK) is about to expire (several warnings in the 30 days prior to expiration). These notifications are visible on the HMC GUI. After expiration, the system will continue to operate normally and generate notifications that the key needs to be replaced. If there is no AIX UAK present, the system will continue to operate normally and generate notifications that an AIX UAK needs to be applied to the server. Messages will also be displayed during AIX boot, AIX update, and Live Partition Mobility (LPM) operations indicating that the UAK needs to be renewed or applied in the case of a missing AIX update access key.

The capability to perform AIX updates and other operations is not impacted by the presence of an expired or missing AIX UAK.

When will I need a new AIX update access key for my Power10 and later servers?

Ideally an AIX update access key (UAK) should be replaced within 30 days prior to expiration. Your Power10 (and later) server will provide several warnings in the 30 days prior to the expiration of the AIX UAK.

Before applying an AIX update that is newer than the expiration date of an AIX UAK, the UAK should be replaced. A server is entitled to all AIX updates that were made available during the time period for which the server had a valid AIX update access key.

Additionally, when performing LPM the destination server needs to have an AIX UAK that has not expired or has an expiration date later than the date of the AIX image running in the LPAR being migrated.

How can I check the AIX update access key expiration date or OS Image date from the Hardware Management Console?

You can check the AIX update access key (UAK) expiration date using the lssyscfg command:

# lssyscfg -m <name of managed system> -r sys -F aix_update_access_key_exp_date
08/15/2021

The AIX OS Image date can be viewed using the lssyscfg command:

# lssyscfg -m <name of managed system> -r lpar -F name,os_image_date

How can I check the AIX update access key expiration date or OS Image date from AIX?

It is possible to check the AIX update access key expiration date and the image date for the currently installed version of AIX using the lparstat -u command:

Also errpt

A new update access key can be acquired by visiting the following website: http://www.ibm.com/servers/eserver/ess

What is the active duration of a new AIX Update Access Key?

The initial Update Access Key is loaded during the manufacturing process and is dated to align with the expiration of the initial SWMA agreement.

The term of any renewal key will be a duration of 180 days or align with the expiration date of the SWMA agreement, whichever comes first.

How do I install an AIX update access key if I am using HMC to manage my Power10 servers?

Enter your replacement AIX update access key (UAK) via the “Enter CoD Code” panel on your HMC. Navigate to the server and then click on ‘Capacity On Demand’ and ‘CoD Functions’. Then click on ‘Enter CoD Code’ and enter your code on the screen.

Note that the AIX UAK is a Capacity on Demand (CoD) code. It indicates whether the server has an active Software Maintenance Agreement (SWMA). There is a single AIX UAK per server (not one per LPAR.)

Can the system automatically renew AIX update access keys?

Yes, the HMC can be configured to update the AIX update access key (UAK) using the “Transmit Service Information” panel under the “Schedule and Send Data” tab.  Note that this requires that the server have an active SWMA agreement, and that Electronic Service Agent has been configured on the HMC.

What if I am managing Power9 or earlier servers with my HMC?

AIX update access keys are a feature on Power10 and later servers.

https://www.ibm.com/support/pages/management-aix-update-access-keys

once register, you can go on the HMC, open a power server, select CoD Functions, and then Enter CoD Code