IBM XIV Gen3 Storage System Version a. Release Notes

Transcription

1 IBM XIV Gen3 Storage System Version a Release Notes

2

3 Contents Release Notes What's new in IBM XIV software version a.. 1 Availability of code load Availability of Host Attachment Kits (HAK) Limitations Fixed issues SYS SYS SYS SYS SYS SYS SYS SYS SYS Known issues SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS Copyrights Contacting IBM Support Documentation format Notices and trademarks Copyright IBM Corp iii

4 iv IBM XIV Gen3 Storage System Version a: Release Notes

5 Release Notes These release notes are for IBM XIV Gen3 Storage System version a. Release date 21 August 2014 Compatibility This version requires Management Tools 4.4, or later. What's new in IBM XIV software version a IBM XIV software version a for IBM XIV Storage System Gen3 features the following: Multi-tenancy XIV multi-tenancy brings leading flexibility and simplicity to secure management of the data of multiple tenants within an XIV system. v Secure division and isolation of XIV resources into logical domains among tenants Adomain represents a subset of system resources (users, pools, hosts/clusters, targets, etc). The domain restricts the resources a user can manage. v Simple and quick delegation of storage administration permissions by the cloud provider to the tenant administrators v Exceptional ease of use and flexibility in securely managing multiple tenants v Easier tracking and reporting of storage domain operations See the IBM XIV Storage System Product Overview for more information. Multi-site mirroring XIV multi-site mirroring features three copies of data and delivers world-class high-availability and disaster recovery, enabling users to comply with business, government, and industry-driven requirements and regulations. It provides: v Three concurrent copies of the data v Simple failover and failback, while keeping data mirrored to ensure business continuity v Same leading ease of use and simplicity as XIV 2-way mirroring, avoiding the consuming setup and monitoring of traditional storage architectures v Negligible performance impact due to field-proven, ultra-efficient XIV mirroring technology v Non-disruptive extension of a 2-way mirror to a 3-way mirror v Ultra-efficient data transfer due to differential XIV asynchronous replication See the IBM XIV Storage System Product Overview for more information. QoS Per-pool performance class support XIV performance class support on a per-pool basis introduces the following Copyright IBM Corp

6 Availability of code load XCLI commands, pool_create and pool_change_config accept the new optional parameter pref_class=perf_class_name. 1. The total host IOPs and bandwidth of all mapped volumes/snapshots of the specified pool are constrained by the value of the relevant performance class. 2. XIV introduces a new XCLI command, perf_class_remove_pool for detaching a performance class definition from the pool. v v In 11.5, XIV QoS is enhanced to control bandwidth or IOPS to the new Domains as well as Hosts and Pools XIV also now offers 500 QoS classes per system, for greater management flexibility. v Benefits: XIV QoS enables virtual tiers without moving data between tiers, minimizing management efforts. Enables packaging of different service levels per customer, enhancing cloud business opportunities. Configurable SNMP version XIV adds an ability to configure which SNMP version to use (SNMPv2, SNMPv3). IP address filtering An option was added to XIV's management port to communicate only with pre-approved IP addresses. Each packet that comes in or goes out is compared against a list of approved addresses. Hardware Version a is only available for Gen3 hardware. Software This version supports hot upgrade from: v a v v b v a v v c v b v v a v v b v a v Documentation Refer to Preparing for code load on the Information Center. This topic details the steps required from the customer in order to prepare for the code load. com.ibm.help.xiv.doc/xiv_po_11_1_02.html 2 IBM XIV Gen3 Storage System Version a: Release Notes

7 Availability of Host Attachment Kits (HAK) Limitations Fixed issues The latest IBM XIV Host Attachment Kit (HAK) version can be downloaded from the IBM Fix Central website: For detailed usage information, refer to the IBM Storage Host Software Solutions Information Center: IBM Hyper-Scale Mobility: v Applies only to systems located within the same data center. v Cannot be applied directly on a volume that belongs to a consistency group. Before such a volume can be moved using IBM Hyper-Scale Mobility, it must be removed from the consistency group. v Does not apply to volume snapshots. When the migration is changed to proxy state, all snapshots of the pertinent migrated volume are deleted automatically. v Does not migrate volume mirroring relationships. Before a volume can be moved using IBM Hyper-Scale Mobility, its mirroring relationship must be deleted. SYS In an asynchronous mirroring relationship, whenever the clocks of the source and destination systems differ by a gap that is greater than the RPO, the destination enters an RPO lagging state, while the source is in an OK state. Moderate and up SYS The column listing hosts in the output of the perf_class_list XCLI has been removed. (In earlier versions, it showed only 55 hosts in a performance class, even if there were more.) and up SYS On an SSD populated system on which frequent snapshot create/delete actions are performed, an internal software race condition might occur, on rare occasions, where one of the internal data services fails, causing loss of access to 12 drives in the same module. High impact b and up Release Notes 3

8 SYS Creating more than 6500 Consistency Group snapshots may result in Tivoli Storage Productivity Center disconnections. Moderate and up SYS Listing the security administrators (through running the ldap_user_list XCLI command and the role parameter is set to securityadmin), the command fails and the following completion code is displayed: LOGIN_FAILURE_USER_NOT_AUTHENTICATED_BY_LDAP_SERVER and up SYS In rare cases, when hosts which are connected with iscsi and issue a unique pattern of IOs, connections to the remote target(s) are disconnected. High Impact and up SYS A Security Administrator can not monitor the state of the system's encryption. A Security Administrator can run the following commands: v disk_list v ssd_list v state_list and up SYS A problem in the management of the InfiniBand network manager can cause failure of multiple modules. High Impact and up 4 IBM XIV Gen3 Storage System Version a: Release Notes

9 Known issues SYS iscsi Login using the CHAP protocol fails. High Impact b and up SYS Entering several certificates to the certificate parameter, ipsec_connection_* XCLI commands processes only the first certificate. Workaround Execute the relevant XCLI command for one certificate at a time. Medium and up SYS Resizing a pool (reducing its volume capacity) does not trigger the STORAGE_POOL_VOLUME_USAGE_INCREASED event when crossing the preset threshold. Workaround Pay special attention when resizing down a pool. Severity Affected versions and up SYS When using IBM Hyper-Scale Mobility, on the Proxy phase, while the host is mapped to both the source volume and the destination volume (the source volume serves as a proxy to the destination), the system will not display a warning upon unmapping host from the proxy. Prior to unmapping the Proxy, verify that: v The host is mapped to the volume on the Destination system v IOs are actually being executed on that path You can do that either from the host side or by using the XIV statistic tools on the Destination system. Improvement and up Release Notes 5

10 SYS The following XCLI commands are completed successfully although the given user does not exist: v encrypt_recovery_key_generate v encrypt_keyserver_rekey v encrypt_recovery_key_rekey Workaround Make sure the user exists (use the user_list XCLI command) before running these commands. High impact - Serious and up SYS The statistics reported by the system for the I/O rates between an IBM Hyper-Scale Mobility proxy system and its IBM Hyper-Scale Mobility destination system might be higher than those reported from the host to the proxy system. This results from host IOs broken down into several IOs between the proxy and the destination. Severity Affected versions and up SYS In rare cases, trying to set a certification using the pki_set_pkcs12 XCLI command may fail. Workaround Run the command again and up SYS Deleting a user certificate reverts the system the XIV generic certificate instead to the system's unique certificate. Workaround Set the system-unique certificate as a default before removing the user certificate and up 6 IBM XIV Gen3 Storage System Version a: Release Notes

11 SYS The encrypt enabling process may fail due to a long time-out received from the TKLM server, or the TKLM server IP was defined wrongly. The ENCRYPT_ENABLE_COMPLETED event will not be presented in this case. The failure is visible via the encrypt_keyserver_list XCLI command. Use up to 4 IP configurations for TKLM servers. Validate that the TKLM IP address is configured correctly and the server is responsive and up SYS Running the encrypt_enable XCLI command immediately after defining a key server: v The command returns Command executed successfully. v Encryption is not enabled. v The ENCRYPT_ENABLE_NOT_COMPLETED event is issued. Wait 10 seconds and retry and up SYS In a multi-site mirroring relation, if the secondary source is deleted using the delete_xmirror command with the parameter force=yes, and then there is an attempt to activate xmirror, the xmirror_activate command may return a success return code, even though no secondary source volume has been defined. SYS Domain administrators from different domains that share a resource, can view and delete that resource's metadata. SYS snmpwalk for volume statistics may take a long time when multiple volumes are defined. Release Notes 7

12 and up SYS When associating separate LDAP groups to separate domains, an LDAP user can not belong to more than one group if not mentioned, specifically, by the group name in the format of If a user is not defined in such way and it's memberof field contains more than one group, an LDAP_USER_CONFIG_ERROR will be issued. SYS In a multi-site mirroring relation, if the destination remains connected to the source after the source is disconnected from the host and the secondary source, establishing an asynchronous mirror from the secondary source to the destination will require a full resynchronization. Moderate SYS In IP filtering, a Fully Qualified Domain Name (FQDN) is not supported by ip_access_group_remove_address. Use an IP address. SYS The system does not block application administrators, who belong to user groups in the global domain, from being designated as an MSM user. Choose the Storage Administrator to be the MSM user. Improvements 8 IBM XIV Gen3 Storage System Version a: Release Notes

13 SYS When working with IP filtering, a subnet can not be added to an IP access group if an IPO, that is part of the subnet, already exists in the access group. The ip_access_group_add_address command will complete without issuing an error, but the subnet will not be added. SYS IBM XIV does not support using more than one target between two systems in a Mirroring relation, or in IBM Hyper-Scale Mobility, as it may compromise the data on the destination. This operation, however, is not blocked by the XIV system. Keep in mind that there is no benefit in defining more than a single target between two systems, as one target is always enough. Hyper and up SYS CIM is not multi-tenant aware, meaning that it cannot be used by a domain administrator. Use the credentials of a global (non-domain) user, and set the domain access policy to OPEN (the default). SYS If any of the parameters of pool_change_config are invalid, the command may start running and fail halfway through. Make sure to run pool_change_config with valid parameter values. SYS IP filtering does not work for an IP range. An IP range can be defined using a mask. Release Notes 9

14 SYS When changing a volume to read only, the system does not raise a SCSI Unit Attention to make the host aware of the change. Moderate and up SYS When using IP filtering, there is no validation that the user entered a valid IP address into the IP Access Group. Severity SYS When adding IP addresses to an IP Access Group for IP filtering, you cannot add two addresses with the same IP, but different netmasks. SYS If an SSD fails during the encryption enabling process, the SSD_HAS_FAILED_WHILE_ENABLING_ENCRYPTION event message may not be displayed (the status of the SSD reflects the correct state of the SSD). SYS When using default setting for RHEL syslog server, which does not implement protocol-23 from RFC-5424 ( most of the event data is not displayed. Modify default RHEL rsyslog configuration (/etc/syslog.conf). Instead of the default: $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat Use: 10 IBM XIV Gen3 Storage System Version a: Release Notes

15 $ActionFileDefaultTemplate RSYSLOG_SyslogProtocol23Format SYS The format=full parameter on the XCLI help command is not supported. Use -f all instead of format=full. SYS Output from the XCLI command ldap_user_list role=storageadmin does not list domain administrators. SYS Setting audit_config_set with a port that is larger than is not rejected. The default port 514 is used. Use a legal port number less than, or equal to SYS When in LDAP authentication mode, a domain that has users associated with it can not be deleted. 1. Turn off the LDAP authentication. 2. Dissociate the old users from the domain. 3. Delete the domain. 4. Turn on the LDAP authentication. Release Notes 11

16 SYS If a mirroring related snapshot (LRS) on the Source volume of an active xmirror is deleted, due to lack of snapshots space in the pool, then subsequent xmirror_activate commands on the Source fail with a misleading completion code XMIRROR_SLAVE_HAS_MORE_RECENT_DATA. Remove the xmirror relation. 1. Remove the Source-Destination asynchronous mirror relation. 2. Ensure that the pool has enough space on the Source. 3. Reestablish the Source-Destination asynchronous mirror relation. 4. Reestablish and activate the xmirror relation. During this process, the Source-Secondary Source synchronous mirror relation can continue working. Moderate SYS Multi-tenancy does not support Sun directory or Open LDAP group objects. Static groups reflecting domain administrators fail to log in, and receive an unrecognized role completion code. Specify a hardcoded, string value attribute, for example 'description' attribute, as the xiv_group_attr parameter, rather than an LDAP group object attribute. For more information, see the IBM XIV Storage System Architecture and Implementation Redbook. Moderate SYS Attempting to connect to an LDAP server using SSL may fail and issue the error code LOGIN_FAILURE_LDAP_SERVER_UNREACHABLE after a previous connection was made to LDAP without using SSL, or connecting to an LDAP server with a different certificate. After installing version , connect to the LDAP server with SSL, making sure that a previous connection was not made without using SSL. Or, try connecting from a different management port. If both fail, contact XIV Support. 12 IBM XIV Gen3 Storage System Version a: Release Notes

17 Copyrights Copyright IBM Corporation US Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. Contacting IBM Support Documentation format Notices and trademarks Notices References in this documentation to IBM products, programs, or services do not imply that IBM intends to make these available in all countries in which IBM operates. Any reference to an IBM product, program or service is not intended to state or imply that only IBM's product, program or service may be used. Any functionally equivalent product, program or service that does not infringe any of IBM's intellectual property rights may be used instead of the IBM product, program or service. Evaluation and verification of operation in conjunction with other products, except those expressly designated by IBM, are the user's responsibility. The release is supported via: Voice calls Will come into Level 1 or Front Line Support as they do for the current product. Customers will use the appropriate support phone number for their respective countries; refer to the World Wide Directory for the support numbers by country. The publications for this product are in Adobe Portable Document Format (PDF) and should be compliant with accessibility standards. If you experience difficulties when you use the PDF files and want to request a web-based format or accessible PDF document for a publications, send a request by to starpubs@us.ibm.com. In the request, be sure to include the IBM publication number and title. When you sent information to IBM, you grant IBM a nonexclusive right to use to distribute the information in any way it believes appropriate without incurring any obligation to you. INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice. Release Notes 13

18 Trademarks Linux is a trademark of Linus Torvalds in the United States, other countries, or both. Microsoft, Windows, and Windows Server are trademarks of Microsoft Corporation in the United States, other countries, or both. Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Other company, product, or service names may be trademarks or service marks of others. THIRD-PARTY LICENSE TERMS AND CONDITIONS, NOTICES AND INFORMATION The license agreement for this product refers you to this file for details concerning terms and conditions applicable to third party software code included in this product, and for certain notices and other information IBM must provide to you under its license to certain software code. The relevant terms and conditions, notices and other information are provided or referenced below. Please note that any non-english version of the licenses below is unofficial and is provided to you for your convenience only. The English version of the licenses below, provided as part of the English version of this file, is the official version. Notwithstanding the terms and conditions of any other agreement you may have with IBM or any of its related or affiliated entities (collectively "IBM"), the third party software code identified below are "Excluded Components" and are subject to the following terms and conditions: v the Excluded Components are provided on an "AS IS" basis v v v IBM DISCLAIMS ANY AND ALL EXPRESS AND IMPLIED WARRANTIES AND CONDITIONS WITH RESPECT TO THE EXCLUDED COMPONENTS, INCLUDING, BUT NOT LIMITED TO, THE WARRANTY OF NON-INFRINGEMENT OR INTERFERENCE AND THE IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE IBM will not be liable to you or indemnify you for any claims related to the Excluded Components IBM will not be liable for any direct, indirect, incidental, special, exemplary, punitive or consequential damages with respect to the Excluded Components. 14 IBM XIV Gen3 Storage System Version a: Release Notes

19

20 Printed in USA