Sun Microsystems, Inc.  Oracle System Handbook - ISO 7.0 May 2018 Internal/Partner Edition
   Home | Current Systems | Former STK Products | EOL Systems | Components | General Info | Search | Feedback

Asset ID: 1-72-2177437.1
Update Date:2018-01-23
Keywords:

Solution Type  Problem Resolution Sure

Solution  2177437.1 :   Oracle ZFS Storage Appliance: Critical Security bug fixes for ZFSSA BIOS/ILOM (April 2016)  


Related Items
  • Sun ZFS Storage 7420
  •  
  • Oracle ZFS Storage ZS3-2
  •  
  • Sun Storage 7110 Unified Storage System
  •  
  • Oracle ZFS Storage ZS4-4
  •  
  • Sun Storage 7210 Unified Storage System
  •  
  • Sun Storage 7410 Unified Storage System
  •  
  • Sun Storage 7310 Unified Storage System
  •  
  • Oracle ZFS Storage ZS3-4
  •  
  • Sun ZFS Storage 7120
  •  
  • Oracle ZFS Storage Appliance Racked System ZS4-4
  •  
  • Sun ZFS Storage 7320
  •  
  • Oracle ZFS Storage ZS3-BA
  •  
Related Categories
  • PLA-Support>Sun Systems>DISK>ZFS Storage>SN-DK: 7xxx NAS
  •  




In this Document
Symptoms
Cause
Solution
References


Applies to:

Oracle ZFS Storage ZS3-BA - Version All Versions and later
Oracle ZFS Storage ZS4-4 - Version All Versions and later
Oracle ZFS Storage Appliance Racked System ZS4-4 - Version All Versions and later
Sun Storage 7310 Unified Storage System - Version All Versions and later
Sun Storage 7210 Unified Storage System - Version All Versions and later
7000 Appliance OS (Fishworks)

Symptoms

Critical Security bug fixes for the Oracle ZFS Storage Appliance platforms are now available (April 2016).

The bug fixes take the form of BIOS/ILOM upgrade patches.

 

IMPORTANT NOTE: This document is OBSOLETED by Doc ID 2351298.1 (Oracle ZFS Storage Appliance: Critical Security bug fixes for ZFSSA BIOS/ILOM (October 2017))

 

Cause

Oracle ZFS Storage Appliance platform BIOS/ILOM security bug fixes.

 

Solution

Please upgrade to the latest available BIOS/ILOM version for the specific platform.

 

PLEASE NOTE:  If it is determined that the BIOS/ILOM version needs to be upgraded this MUST be done through Oracle support - Open a Service Request for assistance, OR via an Oracle Certified Partner.

 

NOTE:  To determine the 'currently running' BIOS/ILOM version, and/or to discover the latest available BIOS/ILOM versions, please see Doc Id 1174698.1 - How to check the SP BIOS revision level.

 

IMPORTANT NOTE:  Latest 'Critical Security bug fixes' are available in Doc ID 2351298.1 - Oracle ZFS Storage Appliance: Critical Security bug fixes for ZFSSA BIOS/ILOM (October 2017)

 

7x10 component firmware

NOTE: There are NO plans to upgrade the 7x10 Appliance BIOS/ILOM firmware

 

 

7x20 component firmware

Sun Storage 7120/7320 (Lynx+)

SW1.7.6        ILOM 3.1.2.52_r109596, BIOS 08.14.01.11

SW1.7.6        ILOM 3.1.2.52_r109596, BIOS 08.14.01.11        patchId 23170931

Reference:  MOS Doc ID 1357409.1 - Sun ZFS Storage Appliance: How to update the BIOS for a 7x20 NAS appliance

*See Note 1 below

 

Sun Storage 7420 (Callisto)

SW1.7.2      ILOM 3.2.6.20.a r110631, BIOS: 09.05.05.02, Power CPLD: 16, PC-Check: 6.29s

SW1.7.2      ILOM 3.2.6.20.a r110631, BIOS: 09.05.05.02, Power CPLD: 16, PC-Check: 6.29s        patchId 23634066

Reference:  MOS Doc ID 1357409.1 - Sun ZFS Storage Appliance: How to update the BIOS for a 7x20 NAS appliance

*See Note 1 below

*See also Important Note 2 below

 

Sun Storage 7420 M2 (Callisto +)

SW 1.6        ILOM 3.2.6.20 r109303, BIOS: 16.04.03.00,  CPLD: 17, PC-Check: 6.30s (*)

SW 1.6        ILOM 3.2.6.20 r109303, BIOS: 16.04.03.00,  CPLD: 17, PC-Check: 6.30s (*)        patchId 23092579

Reference:  MOS Doc ID 1357409.1 - Sun ZFS Storage Appliance: How to update the BIOS for a 7x20 NAS appliance

*See Note 1 below

*See also Important Note 2 below

 

 

ZS3-x component firmware

ZS3-2 (Netra X3-2 Server /Sun Netra X4270 M3 Server Concord)

SW 1.3        ILOM: 3.2.6.32 r109399 BIOS: 21.00.02.27 MB FPGA:025

SW 1.3        ILOM: 3.2.6.32 r109399 BIOS: 21.00.02.27 MB FPGA:025        patchId 24467149

Reference:  Check/Configure BIOS Settings - https://stbeehive.oracle.com/teamcollab/wiki/ZFSSAFieldSupport:ZS3-2+Motherboard+Replacement

*See also Important Note 2 below

 

ZS3-4/ZS3-BA (Sun Server X2-4 / Sun Fire X4470 M2 Callisto+)

SW 1.6        ILOM 3.2.6.20 r109303, BIOS: 16.04.03.00, CPLD: 17, PC-Check: 6.30s (*)

SW 1.6        ILOM 3.2.6.20 r109303, BIOS: 16.04.03.00, CPLD: 17, PC-Check: 6.30s (*)        patchId 23092579

Reference:  Check/Configure BIOS Settings - https://stbeehive.oracle.com/teamcollab/wiki/ZFSSAFieldSupport:ZS3-4+Motherboard+Replacement

*See Note 1 below

*See also Important Note 2 below

 

ZS3-ES (Sun Server X3-2 / Sun Fire X4170 M3 Nashua)

SW 1.4.4        ILOM 3.2.4.76 r108980, BIOS 17.11.05.00

SW 1.4.4        ILOM 3.2.4.76 r108980, BIOS 17.11.05.00        patchId 23119636

Reference:  Check/Configure BIOS Settings - https://stbeehive.oracle.com/content/dav/st/ZFSSAFieldSupport/Public%20Documents/PDF_Files/ZS3-ES_MB_Replacement_Procedure.pdf

 

 

ZS4-x component firmware

ZS4-4 (Sun Server X4-4 Callisto)

SW 1.3        ILOM 3.2.6.20 r109303, BIOS: 24.05.02.00

SW 1.3        ILOM 3.2.6.20 r109303, BIOS: 24.05.02.00        patchId 23109232

Reference:  Check/Configure BIOS Settings - https://stbeehive.oracle.com/teamcollab/wiki/ZFSSAFieldSupport:ZS4-4+Motherboard+Replacement

*See also Important Note 2 below

 

 

ZS5-x component firmware

ZS5-2 (Netra Server X5-2)

SW 1.1    ILOM 3.2.6.34 r111631, BIOS 32.00.01.09

SW 1.1    ILOM 3.2.6.34 r111631, BIOS 32.00.01.09        patchId 24607342

 

ZS5-4 (Oracle Server X5-4)

SW 1.1.0    ILOM 3.2.6.20 r109303, BIOS 36.02.10.00

SW 1.1.0    ILOM 3.2.6.20 r109303, BIOS 36.02.10.00      patchId 23115362

 

 

Note 1:

There is no option to preserve BIOS configuration during the ILOM/BIOS upgrade for this platform.

After the SW update, the BIOS configuration needs to be manually set as described in the "Configure BIOS" section of the corresponding platform motherboard replacement procedure.

 

Important Note 2:

This note applies to any ILOM/BIOS upgrade from a version earlier than 3.2.6 to this new ILOM/BIOS version for any platform and irrespective of any AK version.

If the system is currently running an ILOM version of 3.2.6.x (or later) it is not affected.

ILOM/BIOS 3.2.6 update addendum

Issue:  AK allows users to create password that has no restrictions in terms of password length etc.   But recent release of ILOM/BIOS, based on ILOM branch 3.2.6 and later has
introduced a password restriction. This restriction will prevent the Host Appliance Kit (AK) from being able to continue the current practice of using passwords less than 8 character long.
In order to continue allow the current AK practice of no restriction, the upgrade of ILOM/BIOS needs to follow the new procedure to upgrade the ILOM/BIOS.

To preserve the current settings and preserve all the accounts/passwords, a bash script should be run from a remote Linux/Solaris system with SFTP service enabled, that will
automatically preserve the logins and passwords and sets the password length to a minimum level of 1.

For details, please see

        https://stbeehive.oracle.com/content/dav/st/ZFSSAFieldSupport/Public%20Documents/ILOMUpdateAddendumTJV1.2.odt

If you have difficulties accessing the above page, please contact NAS TSC.

 

References

<NOTE:2054991.1> - Oracle ZFS Storage Appliance: Critical Security bug fixes for ZFSSA BIOS/ILOM (October 2015)

Attachments
This solution has no attachment
  Copyright © 2018 Oracle, Inc.  All rights reserved.
 Feedback