IBM XIV Gen3 Storage System Version a. Release Notes

Transcription

1 IBM XIV Gen3 Storage System Version a Release Notes

2 First Edition (February 2015) This edition applies to IBM XIV Storage System version a and to all subsequent releases and modifications until otherwise indicated in new editions. Newer document editions may be issued for the same product version in order to add missing information or amend typographical errors. The edition is reset to 'First Edition' for every new product version. Copyright IBM Corporation US Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

3 Contents Release Notes What's new in IBM XIV software version / a Availability of code load Availability of Host Attachment Kits (HAK) Limitations Fixed issues SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS Known Issues SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS SYS Copyrights Contacting IBM Support Documentation format Notices and trademarks Copyright IBM Corp iii

4 iv IBM XIV Gen3 Storage System Version a: Release Notes

5 Release Notes These release notes are for IBM XIV Gen3 Storage System version a. Release date 11 February 2015 Compatibility This version requires Management Tools , or later. What's new in IBM XIV software version / a IBM XIV software version / a for IBM XIV Storage System Gen3 features the following: XIV readiness for VMware Virtual Volumes (VVols) XIV now supports VMware Virtual Volumes (VVOL) and is designed to enable VMware vsphere environments to easily automate XIV provisioning, offload snapshots and cloning, and instantly reclaim space, all at the virtual-machine level and while benefiting from XIV hotspot-free performance predictability and extreme capacity utilization. These capabilities will be delivered through the upcoming VASA 2.0-compliant version of the IBM Storage Integration Server, version 2.0. See the IBM XIV Storage System Product Overview for more information. XIV with 6 TB disk drives Lets you store 50 percent more data while using the same space and power as 4 TB drives, enabling up to 12 percent lower price per usable terabyte and 33 percent reduced energy use: v XIV offers the improved data economics of 6 TB drives while maintaining similar performance levels as for 4 TB drives and, as is the XIV way, without any tuning. v World-class rebuild speeds get even faster: The XIV rebuild mechanism, enhanced to use more system resources upon detecting IO idle time, now rebuilds 1 TB in under 10 minutes on average, and a6tbsystem in under one hour on average. Advanced XIV interoperability with virtual machines Further simplifies orchestration and automation, speeding up delivery of the services your clients need and reducing management costs: v Certified XIV latest SMI-S 1.6 support helps build dynamic, scalable, secure Microsoft-based cloud storage infrastructures with out-of-the box Microsoft System Center Virtual Machine Manager 2012 integration. v XIV provisioning in environments hosting IBM PowerVC automates IBM Power -based virtualized environments while delivering predictable service level agreements. SAP HANA TDI (Tailored Data Center Integration) certification Qualifies your XIV enterprise infrastructure for SAP HANA deployment, simplifying the deployment of real-time analytics and helping reduce related costs. Copyright IBM Corp

6 Availability of code load XIV is now ENERGY STAR certified Ensures green and cost-saving value through efficiencies that include reduced energy waste and cooling needs. Hardware Version a is only available for Gen3 hardware. Software This version supports hot upgrade from: v Technician Assistant Tool The upgrade requires Technician Assistant (TA) Tool version , or above. Documentation Refer to Preparing for code load on the Information Center. This topic details the steps required from the customer in order to prepare for the code load: com.ibm.help.xivgen3.doc/gen3/xiv_po_11_1_02.dita?lang=en. Availability of Host Attachment Kits (HAK) Limitations Fixed issues The latest IBM XIV Host Attachment Kit (HAK) version can be downloaded from the IBM Fix Central website: For detailed usage information, refer to the IBM Storage Host Software Solutions Information Center: hsg/hsg_hak_kcwelcome.html. IBM Hyper-Scale Mobility: v Applies only to systems located within the same data center. v Cannot be applied directly on a volume that belongs to a consistency group. Before such a volume can be moved using IBM Hyper-Scale Mobility, it must be removed from the consistency group. v Does not apply to volume snapshots. When the migration is changed to proxy state, all snapshots of the pertinent migrated volume are deleted automatically. v Does not migrate volume mirroring relationships. Before a volume can be moved using IBM Hyper-Scale Mobility, its mirroring relationship must be deleted. SYS IBM XIV does not support using more than one target between two systems in a Mirroring relation, or in IBM Hyper-Scale Mobility, as it may compromise the data on the destination. This operation, however, is not blocked by the XIV system. It is blocked when using the GUI in connected mode. Keep in mind that there is no benefit in defining more than a single target between two systems, as one target is always enough. 2 IBM XIV Gen3 Storage System Version a: Release Notes

7 Fix: As of this release, only a single target definition is allowed between any pair of XIV systems. The system blocks the creation of additional targets. Hyper and up SYS Setting audit_config_set with a port that is larger than is not rejected. The default port 514 is used. Fix: The system now blocks usage of ports larger than SYS Attempting to connect to an LDAP server using SSL may fail and issue the error code LOGIN_FAILURE_LDAP_SERVER_UNREACHABLE after a previous connection was made to LDAP without using SSL, or connecting to an LDAP server with a different certificate. Fix: Issue resolved. SYS When working with LDAP, the user_authenticate XCLI command does not create a search for the user on the LDAP server. Fix: Issue resolved a SYS This release of XIV microcode addresses the following security vulnerabilities: CVE and CVE For more information, refer to Fix: Issue resolved. High Impact a Release Notes 3

8 SYS The audit_config_get and audit_config_set XCLI commands are not allowed for the Storage Administrator role. Fix: A Storage Administrator can now use these commands SYS This release of the XIV microcode addresses the CVE issue. For more information, refer to Fix: Issue resolved. High impact and up SYS This release of XIV microcode addresses the CVE issue, also known as the "POODLE SSL vulnerability". For more information, refer to also and Fix: XIV disables SSL V3 in this code version to avoid the POODLE vulnerability. Hyper and up SYS On a system that has active LDAP, when running one of the following commands with a user name longer than 63 characters, the module that is connected to the Management Tools or LDAP server fails: v ldap_search v ldap_search_for_group v ldap_show_groups_association v ldap_test v ldap_test_report Note: Do not retry any of these commands, as it can lead to failure of another module, and might lead to potential data loss. Fix: The system now accepts only LDAP names with up to 63 characters Moderate 4 IBM XIV Gen3 Storage System Version a: Release Notes

9 Known Issues a SYS On a system with 24 GB of RAM that serve as a destination for Asynchronous mirrors, a module might "freeze" due to accounting errors related to the memory reserved for the cache. This might result in hosts or mirrors disconnecting. Fix: Issue resolved. High impact and up SYS This release of XIV microcode addresses the CVE issue, also known as the "GHOST" vulnerability. The gethostbyname function of the GNU C Library (glibc) are vulnerable to a buffer overflow. For more information, refer to cvename.cgi?name=cve Fix: glibc has been replaced by a safe version. Hyper and up Attention: v The issues listed below apply to microcode version a, or to earlier versions. As long as a newer microcode version has not yet been released, a newer release notes edition for version a might be issued to provide a more updated list of known issues and workarounds. v When a newer microcode version is released for general availability, the release notes of version a will no longer be updated. Accordingly, check the release notes of the newer version to learn whether any newly discovered issues affect version a, or whether the newer version resolves any of the issues listed below. SYS Entering several certificates to the certificate parameter, ipsec_connection_* XCLI commands processes only the first certificate. Execute the relevant XCLI command for one certificate at a time. Medium Release Notes 5

10 and up SYS Resizing a pool (reducing its volume capacity) does not trigger the STORAGE_POOL_VOLUME_USAGE_INCREASED event when crossing the preset threshold. Pay special attention when resizing down a pool and up SYS When using IBM Hyper-Scale Mobility, on the Proxy phase, while the host is mapped to both the source volume and the destination volume (the source volume serves as a proxy to the destination), the system will not display a warning upon unmapping host from the proxy. Prior to unmapping the Proxy, verify that: v The host is mapped to the volume on the Destination system v IOs are actually being executed on that path You can do that either from the host side or by using the XIV statistic tools on the Destination system. Improvement and up SYS The following XCLI commands are completed successfully although the given user does not exist: v encrypt_recovery_key_generate v encrypt_keyserver_rekey v encrypt_recovery_key_rekey Make sure the user exists (use the user_list XCLI command) before running these commands. High impact - Serious and up SYS Deleting a user certificate reverts the system the XIV generic certificate instead to the system's unique certificate. 6 IBM XIV Gen3 Storage System Version a: Release Notes

11 Set the system-unique certificate as a default before removing the user certificate and up SYS Running the encrypt_enable XCLI command immediately after defining a key server: v The command returns Command executed successfully. v Encryption is not enabled. v The ENCRYPT_ENABLE_NOT_COMPLETED event is issued. Wait 10 seconds and retry and up SYS In a multi-site mirroring relation, if the secondary source is deleted using the delete_xmirror command with the parameter force=yes, and then there is an attempt to activate xmirror, the xmirror_activate command may return a success return code, even though no secondary source volume has been defined. SYS Domain administrators from different domains that share a resource, can view and delete that resource's metadata. SYS snmpwalk for volume statistics may take a long time when multiple volumes are defined and up Release Notes 7

12 SYS When associating separate LDAP groups to separate domains, an LDAP user can not belong to more than one group if not mentioned, specifically, by the group name in the format of If a user is not defined in such way and it's memberof field contains more than one group, an LDAP_USER_CONFIG_ERROR will be issued. SYS In a multi-site mirroring relation, if the destination remains connected to the source after the source is disconnected from the host and the secondary source, establishing an asynchronous mirror from the secondary source to the destination will require a full resynchronization. Moderate SYS In IP filtering, a Fully Qualified Domain Name (FQDN) is not supported by ip_access_group_remove_address. Use an IP address. SYS The system does not block application administrators, who belong to user groups in the global domain, from being designated as an MSM user. Choose the Storage Administrator to be the MSM user. Improvements SYS When working with IP filtering, a subnet can not be added to an IP access group if an IPO, that is part of the subnet, already exists in the access group. The ip_access_group_add_address command will complete without issuing an error, but the subnet will not be added. 8 IBM XIV Gen3 Storage System Version a: Release Notes

13 SYS CIM is not multi-tenant aware, meaning that it cannot be used by a domain administrator. Use the credentials of a global (non-domain) user, and set the domain access policy to OPEN (the default). SYS If any of the parameters of pool_change_config are invalid, the command may start running and fail halfway through. Make sure to run pool_change_config with valid parameter values. SYS IP filtering does not work for an IP range. An IP range can be defined using a mask. SYS When changing a volume to read only, the system does not raise a SCSI Unit Attention to make the host aware of the change. Moderate and up SYS When using IP filtering, there is no validation that the user entered a valid IP address into the IP Access Group. Severity Release Notes 9

14 SYS When adding IP addresses to an IP Access Group for IP filtering, you cannot add two addresses with the same IP, but different netmasks. SYS If an SSD fails during the encryption enabling process, the SSD_HAS_FAILED_WHILE_ENABLING_ENCRYPTION event message may not be displayed (the status of the SSD reflects the correct state of the SSD). SYS The format=full parameter on the XCLI help command is not supported. Use -f all instead of format=full. SYS Output from the XCLI command ldap_user_list role=storageadmin does not list domain administrators. SYS When in LDAP authentication mode, a domain that has users associated with it can not be deleted. 1. Turn off the LDAP authentication. 2. Dissociate the old users from the domain. 3. Delete the domain. 4. Turn on the LDAP authentication. 10 IBM XIV Gen3 Storage System Version a: Release Notes

15 SYS If a mirroring related snapshot (LRS) on the Source volume of an active xmirror is deleted, due to lack of snapshots space in the pool, then subsequent xmirror_activate commands on the Source fail with a misleading completion code XMIRROR_SLAVE_HAS_MORE_RECENT_DATA. Remove the xmirror relation. 1. Remove the Source-Destination asynchronous mirror relation. 2. Ensure that the pool has enough space on the Source. 3. Reestablish the Source-Destination asynchronous mirror relation. 4. Reestablish and activate the xmirror relation. During this process, the Source-Secondary Source synchronous mirror relation can continue working. Moderate SYS Multi-tenancy does not support Sun directory or Open LDAP group objects. Static groups reflecting domain administrators fail to log in, and receive an unrecognized role completion code. Specify a hardcoded, string value attribute, for example 'description' attribute, as the xiv_group_attr parameter, rather than an LDAP group object attribute. For more information, see the IBM XIV Storage System Architecture and Implementation Redbook. Moderate SYS In the XCLI Help, the command descriptions for the domain_manage and domain_move_gp commands are incorrect. Release Notes 11

16 SYS On XIV with 6TB drives, the system cannot handle a single restore of a volume, or a Consistency Group (CG), where the total hard size of the volumes involved and all their snapshots exceeds 90% of the system's usable capacity. Avoid creating a single volume, or a single CG, with a total hard size that exceeds 50% of the system's usable capacity. High impact and up SYS On XIV systems, Hyper-Scale Manager supports LDAP UPN mode only when there are no domains configured on the system. If domains are configured on the system, LDAP UPN mode is not supported. Try configuring the system using different LDAP login modes. Improvement Copyrights Copyright IBM Corporation US Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. Contacting IBM Support References in this documentation to IBM products, programs, or services do not imply that IBM intends to make these available in all countries in which IBM operates. Any reference to an IBM product, program or service is not intended to state or imply that only IBM's product, program or service may be used. Any functionally equivalent product, program or service that does not infringe any of IBM's intellectual property rights may be used instead of the IBM product, program or service. Evaluation and verification of operation in conjunction with other products, except those expressly designated by IBM, are the user's responsibility. The release is supported via: Voice calls Will come into Level 1 or Front Line Support as they do for the current product. Customers will use the appropriate support phone number for their respective countries; refer to the World Wide Directory for the support numbers by country IBM XIV Gen3 Storage System Version a: Release Notes

17 Documentation format Notices and trademarks Notices The publications for this product are in Adobe Portable Document Format (PDF) and should be compliant with accessibility standards. If you experience difficulties when you use the PDF files and want to request a web-based format or accessible PDF document for a publications, send a request by to starpubs@us.ibm.com. In the request, be sure to include the IBM publication number and title. When you sent information to IBM, you grant IBM a nonexclusive right to use to distribute the information in any way it believes appropriate without incurring any obligation to you. INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some jurisdictions do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice. Trademarks Linux is a trademark of Linus Torvalds in the United States, other countries, or both. Microsoft, Windows, and Windows Server are trademarks of Microsoft Corporation in the United States, other countries, or both. Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Other company, product, or service names may be trademarks or service marks of others. THIRD-PARTY LICENSE TERMS AND CONDITIONS, NOTICES AND INFORMATION The license agreement for this product refers you to this file for details concerning terms and conditions applicable to third party software code included in this product, and for certain notices and other information IBM must provide to you under its license to certain software code. The relevant terms and conditions, notices and other information are provided or referenced below. Please note that any non-english version of the licenses below is unofficial and is provided to you for your convenience only. The English version of the licenses below, provided as part of the English version of this file, is the official version. Notwithstanding the terms and conditions of any other agreement you may have with IBM or any of its related or affiliated entities (collectively "IBM"), the third party software code identified below are "Excluded Components" and are subject to the following terms and conditions: v the Excluded Components are provided on an "AS IS" basis Release Notes 13

18 v v v IBM DISCLAIMS ANY AND ALL EXPRESS AND IMPLIED WARRANTIES AND CONDITIONS WITH RESPECT TO THE EXCLUDED COMPONENTS, INCLUDING, BUT NOT LIMITED TO, THE WARRANTY OF NON-INFRINGEMENT OR INTERFERENCE AND THE IMPLIED WARRANTIES AND CONDITIONS OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE IBM will not be liable to you or indemnify you for any claims related to the Excluded Components IBM will not be liable for any direct, indirect, incidental, special, exemplary, punitive or consequential damages with respect to the Excluded Components. 14 IBM XIV Gen3 Storage System Version a: Release Notes

19

20 Printed in USA