Suma act as automatic download server for AIX packages

Here you'll find the IP address for downloading
https://www.ibm.com/support/pages/node/6573219

NOTE

• IP addresses for the esupport.ibm.com server are changed from the 2023 version of the esupport.ibm.com server.
• Add firewall rules for all new IP addresses. However, do not change or remove the existing firewall rules.
• The port numbers of the fix distribution website can be either 80 for HTTP or 443 for HTTPS.

Prerequisites: packages required for SUMA

[root@aix01]/# lslpp -Lc
bos.ecc_client:bos.ecc_client.rte:7.3.2.0: : :C: :Electronic Customer Care Runtime : : : : : : :0:0:/:2345
bos.suma:bos.suma:7.3.2.1: : :C: :Service Update Management Assistant (SUMA) : : : : : : :0:0:/:2419
bos.esagent:bos.esagent:7.3.2.1: : :C: :Electronic Service Agent : : : : : : :0:0:/:2419

[root@aix01]/# /usr/ecc/bin/config_conn_path -c 'PRIMARY' -y 'HTTP_PROXY' -t 'YES' -a  '10.10.10.10' -x '8443'
###########################################################
Testing HTTP Proxy Service Configuration
Performing HTTP Proxy Connectivity Test ... SUCCESS

[root@aix01]/# /usr/ecc/bin/config_conn_path -d 'PRIMARY'
#type:ttyport:modem_type:primary_location:secondary_location:prefix:host:port:userid
HTTP_PROXY::::::10.10.10.10:8443:

[root@aix01]/# /usr/esa/bin/verifyConnectivity -tw
Performing Connectivity Verification Test
success  Edge_Bulk_Data_1      esupport.ibm.com              129.42.56.189    443
success  Edge_Bulk_Data_2      esupport.ibm.com              129.42.54.189    443
success  Edge_Bulk_Data_3      esupport.ibm.com              129.42.60.189    443
success  Edge_Bulk_Data_4      esupport.ibm.com              2620:0:6c2:200:129:42:60:189  443
success  Edge_Bulk_Data_5      esupport.ibm.com              2620:0:6c4:200:129:42:54:189  443
success  Edge_Bulk_Data_6      esupport.ibm.com              2620:0:6c0:200:129:42:56:189  443
success  Edge_Fix_Repository_1  esupport.ibm.com              129.42.56.189     80
success  Edge_Fix_Repository_2  esupport.ibm.com              129.42.54.189     80
success  Edge_Fix_Repository_3  esupport.ibm.com              129.42.60.189     80
success  Edge_Fix_Repository_4  esupport.ibm.com              2620:0:6c2:200:129:42:60:189   80
success  Edge_Fix_Repository_5  esupport.ibm.com              2620:0:6c4:200:129:42:54:189   80
success  Edge_Fix_Repository_6  esupport.ibm.com              2620:0:6c0:200:129:42:56:189   80
12 successes
0 failures
Connectivity Verification Test Results: succeeded

[root@aix01]/# suma -c -a DOWNLOAD_PROTOCOL=https

[root@aix01]/# suma -c
        FIXSERVER_PROTOCOL=https
        DOWNLOAD_PROTOCOL=https
        DL_TIMEOUT_SEC=180
        DL_RETRY=1
        HTTP_PROXY=
        HTTPS_PROXY=
        USE_FIPS_PROVIDER=no
        CHECK_CERTIFICATE_REVOCATION=no
        SCREEN_VERBOSE=LVL_INFO
        NOTIFY_VERBOSE=LVL_INFO
        LOGFILE_VERBOSE=LVL_VERBOSE
        MAXLOGSIZE_MB=1
        REMOVE_CONFLICTING_UPDATES=yes
        REMOVE_DUP_BASE_LEVELS=yes
        REMOVE_SUPERSEDE=yes
        TMPDIR=/var/suma/tmp
        WEB_IDENTITY_FILE=

Unfortunately, the attributes HTTP_PROXY and HTTPS_PROXY are no longer supported by SUMA. This is also documented in the SUMA manual page!

The SUMA command shares the proxy connectivity settings with the Electronic Service Agent.

Test Downloading

[root@aix01]/# suma -x -a Action=Preview -a RqType=Latest

[root@aix01]/# suma -x -a RqType=SP -a Action=Download -a FilterML=7200-05 -a RqName=7200-05-04-2220 -a DLTarget=/suma/tmp

Debug

suma -l
suma -c -a LOGFILE_VERBOSE=LVL_DEBUG
suma -c
suma -D
/usr/esa/bin/verifyConnectivity -tw
/usr/ecc/bin/config_service_proxy -d
/usr/ecc/bin/config_conn_path -d 'PRIMARY'
/usr/ecc/bin/config_conn_path -d 'SECONDARY'
/usr/ecc/bin/config_conn_path -d 'TERTIARY'

[root@aix01]/# /usr/sbin/suma -x -a RqType=SP -a Action=Download -a RqName=7200-02-01-1732 -a FilterML=7200-02 -a DLTarget=/tmp -a DisplayName="Download request for oslevel 7200-02-01-1732"

We will use the following two commands for this example case

[root@aix01]/# /usr/sbin/suma -x -a Action=Preview -a RqType=Latest -a FilterML=7200-02 -a DisplayName="Preview Latest 72 TL2 Download Request" -a DLTarget=/tmp

[root@aix01]/# /usr/sbin/suma -x -a Action=Metadata -a RqType=Latest -a FilterML=7200-02 -a DisplayName="Actual Latest 72 TL2 Download Request" -a DLTarget=/tmp

http://gibsonnet.net/blog/dwarchive/AIX%20SUMA%20in%202018%20(Chris%27s%20AIX%20Blog).html

By default SUMA requires Java7, so change the version to Java8

[root@aix01]/var/spool/cron/crontabs# suma -x -a RqType=SP -a Action=Download -a FilterML=7200-05 -a RqName=7200-05-04-2220 -a DLTarget=/suma/tmp
Exception in thread "main" java.lang.UnsupportedClassVersionError: JVMCFRE003 bad major version; class=ECCWrapper, offset=6

Change Java version

# vi /usr/suma/bin/suma

  find the following variable:

    # Global Variables
    #########################################################
    ######################
    my $JAVA = "/usr/java7_64/jre/bin/java";
    if (! -e $JAVA) {
            find_java();
    }

    change it to:

    # Global Variables
    #########################################################
    ######################
    my $JAVA = "/usr/java8_64/jre/bin/java";
    if (! -e $JAVA) {
            find_java();
    }

  Then SUMA starts working as expected.

  The script use find_java, that list java fileset as
  follow :
  /usr/java7/jre/bin/java
  /usr/java7/bin/java
  /usr/java7_64/jre/bin/java
  /usr/java7_64/bin/java
  /usr/java8_64/jre/bin/java
  /usr/java8_64/bin/java

  It takes the first that is executable it select java 7
  and errors out.

Problem summary

  suma failed because of Java 7 is selected instead of Java 8

Problem conclusion

  Change the default java search path to Java 8

0500-059 Entitlement is required to download

if there is an error message, it can be a maintenance contract topic

https://www.linkedin.com/pulse/do-you-know-what-suma-regarding-aix-power-systems-philippe-herm%C3%A8s/