Clustered Data ONTAP Release Notes

IBM System Storage N series Clustered Data ONTAP 8.2.3 Release Notes SC27-6290-05

Contents Clustered Data ONTAP 8.2.3 Release Notes.................... 1 Changes introduced since Data ONTAP 8.2.................... 3 Changes in clustered Data ONTAP 8.2.3...................... 3 Changes in clustered Data ONTAP 8.2.2...................... 6 Changes in clustered Data ONTAP 8.2.1...................... 9 Unsupported features........................... 15 Functionality changes in future releases.................... 17 New and changed features in the Data ONTAP 8.2 release family............ 19 New platform and hardware support...................... 19 Support for 6-Gb/12-Gb SAS 3.0 HBA card................... 19 Support for 6-TB capacity disks....................... 19 Support for 800-GB SSDs......................... 19 Support for 400-GB SSDs......................... 20 Support for 1.6-TB SSDs.......................... 20 Support for SAS optical cables........................ 20 Support for shelf hot-remove........................ 20 Support for 1.2-TB performance disks..................... 21 Support for Flash Cache 2 modules...................... 21 Manageability enhancements......................... 21 FIPS 140-2 support for HTTPS........................ 21 Audit log for the nodeshell now included in AutoSupport messages........... 21 Changes to core dump management...................... 21 Changes to management of the autosupport role and account............ 22 Histogram-based predictions in RAVE..................... 22 Enhancements for managing SSH security configurations............... 22 Support for installing the root certificate of an SSL server on the cluster or SVM....... 23 HTTP access to log, core dump, and MIB files now enabled by default.......... 23 The system node service-processor commands now support the RLM.......... 24 The system node systemshell command will be removed from the advanced privilege level in an upcoming release............................ 24 Enhancement for monitoring system performance................. 24 Licensing changes for the Data ONTAP 8.2 release family.............. 25 Enhancements for managing digital certificates.................. 26 Security enhancements for managing user accounts and passwords of a role........ 27 Enhancements of management protocols.................... 28 Enhancements for managing cluster time.................... 28 New command family for managing the SP from Data ONTAP............. 29 Cluster user accounts of any role can now be configured to access the SP or RLM...... 30 Enhancements of the SP and RLM shell environments................ 30 SP and RLM now support IPv6 configuration.................. 30 Storage QoS.............................. 31 Copyright IBM Corp. 2015 iii

Enhancements for delivery of AutoSupport messages................ 31 Enhancements to health monitoring...................... 32 Support for collecting and viewing performance data over multiple time periods....... 33 Support for single node clusters....................... 33 Element Manager is no longer available.................... 33 SVM enhancements............................ 34 Replacement of Vserver name with Storage Virtual Machine name........... 34 Support for modifying the SVM language settings................. 34 SVMs can be peered within a cluster or across clusters............... 34 Change in size of the SVM's root volume.................... 35 High-availability pair enhancements....................... 35 New HA mode requirement........................ 35 Faster takeover with aggregate relocation.................... 35 Networking and security protocol enhancements.................. 35 Load balancing supported for LIFs hosted on VLANs................ 35 Support for disabling IPv6 SLAAC with RA enabled................ 35 Support for the network ping6 command.................... 36 Cluster peer job functionality no longer supported................. 36 Support for HTTPS service on intercluster LIFs.................. 36 SNMPv3 creates unique default engine IDs for each SNMPv3 agent in the cluster...... 36 Support for IPv6............................ 37 Support for two-node switchless clusters.................... 37 Storage resource management enhancements.................... 38 Aggregates can be expanded to 64-bit format without adding storage.......... 38 Increased maximum Flash Pool cache sizes for N3150, N3220, and N3240......... 38 Automated Workload Analyzer for Flash Pool cache sizing.............. 38 Support for FlexCache volumes....................... 38 Increased maximum aggregate size for some platforms............... 39 Increased maximum volume count for some platforms............... 39 Multi-disk carrier and single-disk carrier disk shelves can be combined in the same stack.... 39 Flash Pool aggregates support different RAID types and group sizes for SSD cache...... 39 Flexibility for calculating maximum Flash Pool SSD cache size in HA configurations..... 39 Disabled volume guarantees no longer reenabled automatically............ 40 Fractional reserve setting can be set only to 0 or 100................ 40 Infinite Volume enhancements........................ 40 Volume copy functionality no longer supported.................. 41 Storage efficiency enhancements........................ 42 Support for aggregate relocation....................... 42 Support for using volume efficiency priorities.................. 42 Support for detecting incompressible data in files................. 42 Support for reverting volume efficiency metadata................. 43 Support for data protection FlexClone volumes.................. 43 Support for automatic deletion of FlexClone LUNs................. 43 FlexArray Virtualization (Gateway) enhancements.................. 43 Gateway functionality renamed as FlexArray Virtualization.............. 43 Support added for FC direct-attached configurations with Entry and Midrange Disks back-end storage arrays............................. 43 Licensing requirement for Data ONTAP systems to use array LUNs........... 44 Licensing enhancement in Gateway systems................... 44 Support added for one Data ONTAP FC initiator connecting to multiple array target ports... 44 iv IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

Increased LUN count per Data ONTAP FC initiator................ 44 Support added for firmware NDU on HP EVA storage arrays............. 45 Support added for ALUA with EMC CLARiiON and VNX storage arrays......... 45 Enhancements for setting the target queue depth on a Data ONTAP system that uses array LUNs 45 File access protocol enhancements....................... 45 Limit on symbolic links for SMB access has been removed.............. 46 Support for enabling short name searches on the CIFS server............. 46 New validation checks when loading netgroup files from a URI............ 46 Support for checking client access to exports................... 46 Changes to the way clustered Data ONTAP advertises DFS capabilities.......... 46 Support for Windows NFSv3 clients...................... 47 New limits for local UNIX users, groups, and group members............. 48 Support for netgroup-by-host searches for NIS and LDAP.............. 48 New commands for managing protocols for SVMs................. 48 Support for managing how UNIX security-style data is presented to SMB clients....... 49 Support for restricting access for anonymous users................. 49 LDAP client configurations now support multiple DNs............... 49 Support for SQL Server over SMB solutions................... 50 Support for LDAP over SSL/TLS....................... 51 Support for multidomain name mapping searches................. 51 Support for creating Active Directory computer accounts for SVMs........... 52 Support for the default c$ administrative share.................. 52 Enhancements for NAS multiprotocol auditing.................. 52 Support for the KDC Resource SID Compression feature............... 52 New parameter to specify Kerberos SPN in a different OU.............. 53 Support for VMware vstorage over IPv6.................... 53 Support for qtree exports......................... 53 Support for Hyper-V over SMB solutions.................... 53 Support for Remote VSS share-based backups.................. 55 Support for FPolicy on SVMs with FlexVol volumes................ 55 Support for NAS auditing on SVMs with FlexVol volumes.............. 55 Support for local users and groups...................... 56 Support for SMB 3.0 on SVMs with FlexVol volumes................ 56 Support for SMB signing......................... 56 Support for BranchCache on SVMs with FlexVol volumes.............. 57 Support for SMB automatic node referrals on SVMs with FlexVol volumes......... 57 Support for ODX copy offload on SVMs with FlexVol volumes............. 57 Support for access-based enumeration..................... 58 Support for Previous Versions........................ 58 Support for offline files.......................... 58 Support for roaming profiles........................ 59 Support for redirected folders........................ 59 Support for file and directory security tracing on SVMs with FlexVol volumes........ 59 Support for viewing file security and audit policy information using the CLI........ 60 Support for managing NTFS file security and audit policies using the CLI......... 60 Support for displaying information about SMB sessions and open files.......... 61 Support for modifying the CIFS server domain.................. 61 Support for stopping and starting CIFS servers.................. 61 Export policies now optional for SMB access................... 61 Default UNIX user automatically created and assigned............... 62 Contents v

Support for IPv6 with CIFS......................... 62 Maximum ACE limit for NFSv4 ACLs has increased................ 62 Support for NFS over IPv6......................... 63 Support for NFSv4.1 file delegations...................... 63 Support for end-to-end parallel processing for NFS................. 63 SAN enhancements............................ 63 SnapVault backups now support LUNs..................... 63 Support for FlexClone LUNs........................ 63 Support for VMware and Microsoft copy offload................. 64 Support for AIX............................ 64 Support for increased SAN configuration limits.................. 64 Increase in maximum paths from host to LUN for Windows.............. 64 Data protection enhancements......................... 64 Scalability limits for NDMP and dump backup and restore sessions........... 65 Change to how SnapMirror relationships are shown................ 65 Protection of data at rest through Storage Encryption................ 66 Supported NDMP version in Data ONTAP 8.2.x.................. 66 Support for KMIP 1.1........................... 66 Support for multipath tape access...................... 66 Serial numbers used for tape aliasing..................... 66 NDMP modes for backup and restore operations................. 67 Increased number of cluster peers...................... 67 SnapMirror transfer speed control within a cluster................. 67 Support for backing up FlexVol volumes to SnapVault backups............. 67 SnapVault backups now support LUNs..................... 67 Antivirus enhancements........................... 68 Support for offbox antivirus........................ 68 Support for Antivirus Connector....................... 68 Command mapping for Vscan command.................... 68 Requirements for running clustered Data ONTAP 8.2................ 69 Supported systems and cluster configurations................... 69 Unsupported systems in clustered Data ONTAP................... 69 Cluster network and management network switch compatibility requirements......... 70 Storage system, disk, and disk shelf firmware................... 70 Important cautions............................ 73 Upgrade cautions............................. 73 DNS name service lookups fail if servers are not reachable over UDP.......... 73 Incomplete upgrades must be restarted on the correct node.............. 73 Caution when upgrading a system with unsupported network port interface group names... 73 Upgrade to Data ONTAP 8.2.1 or later is required to enable offbox antivirus........ 74 Change in how Data ONTAP handles file names containing UTF-16 supplementary characters.. 74 N6210 and N6040 systems with Flash Cache modules not supported........... 75 Support for striped volumes removed..................... 75 Support for NFSv2 removed........................ 75 Compatible versions of management software are required.............. 75 FlexClone license must be enabled after upgrading to Data ONTAP 8.2.......... 75 Deduplication is disabled post upgrade due to insufficient space for metadata....... 76 Stale metadata not automatically removed during deduplication operations on a volume.... 76 vi IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

Setting 7-Mode CIFS option values might lead to disruptions when upgrading to clustered Data ONTAP 8.2.............................. 76 Manageability cautions........................... 77 If you reinstall a license key in Data ONTAP 8.2 or later, you must use the new license key format 77 Changes to SP firmware update methods.................... 77 Antivirus cautions............................. 78 Support for on-board antivirus is discontinued from Data ONTAP 8.1.3 and later...... 79 Storage management cautions......................... 79 Disk failures might increase for some disk models after upgrading to this version of Data ONTAP 79 File access and protocols cautions....................... 79 Storage system disruption when moving volumes accessed by Windows NFS clients..... 80 Requirements for NFSv4.1 and pnfs..................... 80 Permission denied error when NFS clients try to access NTFS security style volumes..... 80 Limited support for NFS with IPv6...................... 81 DNS timeouts might lead to access issues for NFS IPv6 clients............. 81 Changes in failure handling when processing export policy rules............ 81 Exceeding recommended maximums on CIFS servers might result in disruption of service... 82 Silent failure of chmod, chown, and chgrp commands when run on junction points...... 83 SMB reconnections might fail after Data ONTAP upgrade.............. 83 High-availability configuration cautions..................... 84 Change in the storage failover giveback -require-partner-waiting option.......... 84 Revert and downgrade cautions........................ 84 Offbox antivirus must be disabled before reverting to an earlier release of Data ONTAP.... 84 Requirement to reset SSH security configurations when downgrading or reverting to a release earlier than Data ONTAP 8.2.1........................ 84 Downgrade or revert operation fails when qtree exports are enabled........... 85 Licensing implications for reverting a node that is shipped with Data ONTAP 8.2 or later to an earlier release............................. 86 Reverting to a release earlier than Data ONTAP 8.2 might require installation of licenses for some features............................... 86 NTP remains enabled even after you revert to a release earlier than Data ONTAP 8.2..... 86 SP firmware might require a downgrade if you revert or downgrade to an earlier Data ONTAP release................................ 87 Revert considerations for digital certificates................... 87 If you revert to Data ONTAP 8.1.2 or earlier, you must reset some RBAC characteristics.... 88 Prerequisites for RSH accounts and IPv6 firewall policies before reverting to a release earlier than Data ONTAP 8.2............................ 88 Before reverting to a release earlier than Data ONTAP 8.1.1, you must delete any existing authentication tunnel........................... 88 ACLs containing more than 400 ACEs are dropped during revert............ 89 Known problems and limitations....................... 91 Manageability issues............................ 91 Some Data ONTAP commands cannot use supported SSL-based protocols as valid URL schemes 91 Multiple takeover cycles with the flexscale.lopri_blocks option enabled might result in controller failure................................ 92 False alert seen in cluster switch configurations.................. 92 Ctrl-C does not stop continuously running commands in non-interactive SSH sessions..... 92 AutoSupport messages for system health alerts might include an incorrect subject when in mixed-version state........................... 93 Contents vii

The system health cluster-switch show command might display other devices as switches.... 93 The dashboard health vserver show command takes a long time to run.......... 94 Account locked message not displayed when the maximum number of invalid login attempts is set to 4 or higher............................ 95 Audit log might expose password information as a result of password field queries in some iterator-based ONTAPIs.......................... 95 The maximum number of attempted retries value fails to update............ 95 Health Monitor does not display the current maximum retries value........... 95 Setting default thresholds for dashboard alarms to 100% or greater is allowed........ 95 Networking issues............................. 96 The first VLAN configured over a port might bring the port down temporarily....... 96 Error caused by having a Storage Virtual Machine (SVM) peer relationship without a cluster peer relationship.............................. 96 Disabling fast path in some networking environments................ 96 SVM issues............................... 97 Service outage might occur if allowed protocols are not modified correctly on the SVM.... 97 Root volumes without SVMs might be created during high I/O operations......... 97 SVM peer relationship might be in an inconsistent state due to simultaneous SVMs operations.. 97 Creating a user account with vsadmin-backup role fails when upgraded to clustered Data ONTAP 8.2.x................................ 97 Storage resource management issues....................... 98 Out of space errors could be returned when fractional reserve is set to zero........ 98 Disk-type mixing might occur even when disk type is specified............ 99 FlexCache volumes not supported on certain storage systems............. 99 Qtree creation fails on a mixed cluster running Data ONTAP 8.2 and Data ONTAP 8.2.1.... 99 In-progress volume move operations might fail during an upgrade........... 99 Volume move job cannot proceed after resizing the volume.............. 99 Volume move operation can stall during baseline transfer.............. 100 Volume move operations fail if a SnapMirror checkpoint exists............ 100 Cutover action of wait displayed as defer_on_failure by the volume move show command 100 Error message about no space might be due to lack of inodes in the SVM root volume.... 101 FlexArray Virtualization (Gateway) issues.................... 101 Too many storage devices presented to the Data ONTAP system............ 101 Some Hitachi or HP XP array LUNs might not be visible.............. 101 Infinite Volume issues........................... 102 Client application errors when accessing Infinite Volume dongle files.......... 102 Example workflows for Infinite Volumes removed from the OnCommand community site... 102 Snapshot policy attribute might need to be modified................ 103 Storage classes require additional configuration with array LUNs........... 103 File access and protocols issues........................ 103 LDAP over SSL/TLS name service lookups fail.................. 103 Loading UNIX group file from URI fails when file contains split groups......... 104 Access for hosts in netgroups without primary DNS entry fails............ 104 Access might be denied when using FPolicy with the native engine........... 104 Connection requests to CIFS shares using NTLM with a NetBIOS domain name longer than 15 characters or a fully qualified domain name (FQDN) fail.............. 105 CIFS ACLs not updated as expected when using the CLI to modify volumes........ 105 Changes to the way the active audit log is viewed using Event Viewer.......... 105 Changes to support for duplicate CIFS super user accounts............. 106 UNIX to Windows name mapping fails when domain is empty or uses wildcard...... 106 viii IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

Unexpected behavior after loading local UNIX users or groups from a URI........ 106 Data ONTAP LDAP client does not support revoked certificates............ 106 CIFS ACLs not updated as expected when using the CLI to modify volumes........ 107 Change to the maximum number of audit-enabled SVMs supported in the cluster...... 107 Change in behavior of -allow-suid parameter for export policy rules.......... 107 Changes to how share properties on existing shares are managed........... 107 SETATTR request with read delegation stateid from Linux client over NFSv4.1 mount can cause read delegation to be recalled....................... 108 NFS server -enable-ejukebox parameter change after upgrade............. 108 Setting very large NFSv4.1 ACLs might fail with error NFS4ERR_REQ_TOO_BIG...... 109 Group ID limitation for NFS RPCSEC_GSS................... 109 Dependence of FPolicy on SSL certificates if using mutual authentication......... 109 Changes to the -superuser parameter of the vserver export-policy rule create command.... 110 Default LDAP client schema is corrected during upgrade.............. 110 Microsoft Windows 7 and Windows 8 clients fail to rename files and directories....... 111 CIFS node referral feature works only if LIFs are enabled for both CIFS and NFS...... 111 CIFS widelinks are not accessible from Mac clients................ 112 Creation of a CIFS server fails when using credentials from a trusted domain....... 112 SAN administration issues.......................... 112 SAN commands and options reserved for future use................ 112 Transition of a 7-Mode LUN to a clustered Data ONTAP LUN with the lun create command does not work.............................. 113 Data protection issues........................... 113 SnapMirror updates fail on destination volume if a missing Snapshot copy on the source system is used............................... 113 Failure of SnapVault transfer in a SnapMirror to SnapVault cascade can halt SnapMirror transfers 113 Different interconnect link speeds can affect SnapVault transfer performance........ 114 Checking SnapMirror relationship information not up-to-the-minute........... 114 Issues with using wildcards with load-sharing mirror relationships........... 115 Upgrading older style data protection mirror relationships.............. 115 SnapVault transfers unexpectedly grow and shrink secondary volumes.......... 116 Aggregate relocation interrupts SnapMirror transfers................ 116 NDMP remote restores can fail when backup server is running Microsoft Windows Server 2003 117 NDMP management not supported for clustered Data ONTAP 8.2........... 117 Tape backup policy during volume move, SFO, and ARL.............. 117 DAR fails if the file and the LUN have the same name on the destination volume...... 118 Changes to published documentation..................... 119 Changes to the clustered Data ONTAP library................... 119 Changes to Gateway document titles...................... 120 Changes to the File Access Management Guide for CIFS................ 120 Changes to information about connections allowed to a share............. 120 Incorrect limit listed for maximum number of symbolic links for SMB access........ 120 Certain commands must be run from nodes that have routes to external servers...... 121 Changes to the requirements for share names when creating home directory shares..... 121 How to control automatic DFS advertisements in clustered Data ONTAP with a CIFS server option............................... 121 Managing whether the CIFS server automatically advertises DFS capabilities........ 122 Changes to the way paths are recorded in the audit log event record.......... 123 Determining what the complete path to the audited object is............ 124 Contents ix

Managing how file security is presented to SMB clients for UNIX security-style data..... 125 Enabling or disabling the presentation of NTFS ACLs for UNIX security-style data..... 125 Configuring access restrictions for anonymous users................ 126 Changes to the System Administration Guide................... 127 Changes to information about saving core dump files............... 127 Additions to "Monitoring the health of your system"................ 127 What AutoSupport subsystems are...................... 127 Changes to commands for managing AutoSupport................ 127 Changes to the Clustered Data ONTAP Physical Storage Management Guide.......... 128 Maintenance center behavior changes..................... 128 SED lockout limits and types........................ 128 Unnecessary step listed in disk sanitization procedure............... 128 Changes to the Logical Storage Management Guide................. 128 Obtaining a qtree junction path....................... 128 Incomplete information in "Creating a FlexClone volume".............. 129 Changes to the Network Management Guide................... 129 Removal of LIF addressing restriction..................... 129 Incorrect default behavior for failover of cluster management LIFs........... 130 Changes to the Data Protection Guide...................... 130 Restoring a volume from a Snapshot copy in a SnapVault secondary volume........ 130 Changes to the SAN Administration Guide.................... 132 Title of the Status field in the unified-connect show command output has been renamed... 132 Changes to the SAN Configuration Guide.................... 132 Incorrect PVR requirements listed for shared SAN configurations........... 132 Changes to the Data Protection Tape Backup and Recovery Guide............ 133 Changes to the error message Too many active dumps/restores currently in progress.... 133 Behavior of incremental dump backup when a FlexVol volume is full.......... 133 Changes to the error message Dumps temporarily disabled on volume, try again topic... 133 Changes to the Data Protection Guide...................... 134 Incorrect column title in the table listing SMTape scalability limits........... 134 Changes to the Manual Page Reference..................... 134 Missing parameter descriptions in the command-line interface............ 134 Changes to the FlexArray Virtualization Implementation Guide for Third-Party Storage....... 135 Workaround when LUNs are not visible with Hitachi or HP XP storage arrays....... 135 Changes to the FlexArray Virtualization Installation Requirements and Reference Guide....... 137 Incorrect reference to a Gateway guide.................... 137 Websites............................... 139 Copyright and trademark information..................... 141 Trademark information........................... 142 Notices................................ 145 Index................................ 147 x IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

Clustered Data ONTAP 8.2.3 Release Notes The release notes describe new features, enhancements, and known issues for this release, as well as additional information related to running this release on specific storage systems. About the clustered Data ONTAP 8.2.3 release Clustered Data ONTAP 8.2.3 is a General Availability (GA) release and the third maintenance release in the Data ONTAP 8.2 release family. It includes innovations and features only available in clustered deployments. This release family also includes capabilities that were available earlier in 7-Mode releases. Attention: If you have a N6210 or N6040 storage system with Flash Cache modules installed, do not upgrade to clustered Data ONTAP 8.2. Flash Cache modules are not supported on N6210 or N6040 systems running clustered Data ONTAP 8.2. Data ONTAP 8.2 introduces licensing changes that affect how you manage the licenses of your cluster. For more information about licensing changes, see Licensing changes for the Data ONTAP 8.2 release family on page 25. For a complete list of functionality changes in the 8.2 release family, see New and changed features in the Data ONTAP 8.2 release family on page 19. Some clustered Data ONTAP features are not supported in this release. For more information, see Unsupported features on page 15. Name change for the Gateway functionality in Data ONTAP 8.2.1 RC2 Starting with Data ONTAP 8.2.1 RC2, the capability of using LUNs on a storage array, formerly identified as Gateway functionality, has a new name Data ONTAP FlexArray Virtualization Software. Name change for Vserver in Data ONTAP 8.2.1 RC1 Beginning with the Data ONTAP 8.2.1 RC1 release, Storage Virtual Machine is the new descriptive name for Vserver. In the documentation, the term SVM refers to Vserver. Copyright IBM Corp. 2015 1

Name change for cluster capabilities in Data ONTAP 8.2 Beginning with the Data ONTAP 8.2 release, capabilities of the Data ONTAP operating system that were previously designated by the term Cluster -Mode are now referred to as clustered Data ONTAP. The new terminology can be found in IBM N series support web sites, product interfaces, and technical documentation. For example, you might be upgrading from Data ONTAP 8.1.x running in Cluster-Mode to clustered Data ONTAP 8.2. The underlying cluster technology is the same. About these release notes It is a best practice for all clustered Data ONTAP users to review these release notes. These release notes highlight new capabilities and system behavior introduced in the clustered Data ONTAP 8.2 release family. v If Data ONTAP is already running on clusters in your environment, you should familiarize yourself with relevant topics before upgrading to clustered Data ONTAP 8.2 or later. If you are upgrading to this Data ONTAP release or reverting from this release to an earlier release, see the Clustered Data ONTAP Upgrade and Revert/Downgrade Guide for this release. v v v If this is the first deployment of systems running clustered Data ONTAP in your environment, you should also see all of the Data ONTAP documentation available at www.ibm.com/storage/support/nseries/ Changes to published documentation on page 119 contains information that has become available after the library provided with this release was published. For more information about Data ONTAP releases, see the Data ONTAP Release Model at www.ibm.com/storage/support/nseries/. 2 IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

Changes introduced since Data ONTAP 8.2 There have been a number of changes for this release, including new and changed features, new cautions, and new limitations. v If you are new to the clustered Data ONTAP 8.2 release family, go directly to New and changed features in the clustered Data ONTAP 8.2 release family. Changes in clustered Data ONTAP 8.2.3 The clustered Data ONTAP 8.2.3 release includes support for hardware enhancements, software enhancements, and bug fixes. New platform and hardware support This release includes support for the following new platform hardware: v Support for 6-Gb/12-Gb SAS 3.0 HBA card on page 19 For more information, see New platform and hardware support on page 19. New and changed features This release includes the following new and changed features: Networking and security protocol enhancements on page 35 v Load balancing supported for LIFs hosted on VLANs on page 35 v Support for disabling IPv6 SLAAC with RA enabled on page 35 v Support for the network ping6 command on page 36 File access protocol enhancements on page 45 v Limit on symbolic links for SMB access has been removed on page 46 v Support for enabling short name searches on the CIFS server on page 46 v New validation checks when loading netgroup files from a URI on page 46 v Support for checking client access to exports on page 46 v Changes to the way clustered Data ONTAP advertises DFS capabilities on page 46 v Support for Windows NFSv3 clients on page 47 v New limits for local UNIX users, groups, and group members on page 48 Copyright IBM Corp. 2015 3

v Support for netgroup-by-host searches for NIS and LDAP on page 48 v New commands for managing protocols for SVMs on page 48 New cautions The following cautions are new in this release: Upgrade cautions on page 73 v DNS name service lookups fail if servers are not reachable over UDP on page 73 File access and protocols cautions on page 79 v Storage system disruption when moving volumes accessed by Windows NFS clients on page 80 v Limited support for NFS with IPv6 on page 81 New known problems and limitations There are new known issues in this release: SVM issues on page 97 v Service outage might occur if allowed protocols are not modified correctly on the SVM on page 97 Infinite Volume issues on page 102 v Client application errors when accessing Infinite Volume dongle files on page 102 File access and protocols issues on page 103 v LDAP over SSL/TLS name service lookups fail on page 103 v Loading UNIX group file from URI fails when file contains split groups on page 104 v Connection requests to CIFS shares using NTLM with a NetBIOS domain name longer than 15 characters or a fully qualified domain name (FQDN) fail on page 105 v Access for hosts in netgroups without primary DNS entry fails on page 104 v Access might be denied when using FPolicy with the native engine on page 104 Data protection issues on page 113 v SnapMirror updates fail on destination volume if a missing Snapshot copy on the source system is used on page 113 4 IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

Removed problems and limitations The following known problems and limitations have been removed in this release: Transition issues v System panics during SnapMirror resynchronization while transitioning a 7-Mode volume containing replicated qtrees or LUNs Manageability issues v Non-interactive SSH displays password changes in clear text File access and protocols issues v Qtrees in FlexClone volume might have different export policies than qtrees in parent volume v NFS export policy rules with locally defined host names cause client mounts to fail HA pair issues v Cluster HA configuration is wrongly shown as correct after a mailbox destroy operation on a two-node cluster Documentation changes The following new or changed information supplements the documentation available for this release: Changes to the File Access Management Guide for CIFS on page 120 v Certain commands must be run from nodes that have routes to external servers on page 121 v Changes to the requirements for share names when creating home directory shares on page 121 v How to control automatic DFS advertisements in clustered Data ONTAP with a CIFS server option on page 121 v Managing whether the CIFS server automatically advertises DFS capabilities on page 122 v Changes to the way paths are recorded in the audit log event record on page 123 Determining what the complete path to the audited object is on page 124 v Changes to information about connections allowed to a share on page 120 Changes introduced since Data ONTAP 8.2 5

Changes to the Clustered Data ONTAP Physical Storage Management Guide on page 128 v Maintenance center behavior changes on page 128 v SED lockout limits and types on page 128 Changes to the Logical Storage Management Guide on page 128 v Obtaining a qtree junction path on page 128 For more information about other important documentation updates, see Changes to published documentation on page 119. Changes in clustered Data ONTAP 8.2.2 The clustered Data ONTAP 8.2.2 release includes support for software enhancements and bug fixes. New and changed features This release includes the following new and changed features: Manageability enhancements on page 21 v Audit log for the nodeshell now included in AutoSupport messages on page 21 v Changes to core dump management on page 21 v Changes to management of the autosupport role and account on page 22 Networking and security protocol enhancements on page 35 v Cluster peer job functionality no longer supported on page 36 v Support for HTTPS service on intercluster LIFs on page 36 File access protocol enhancements on page 45 v Support for managing how UNIX security-style data is presented to SMB clients on page 49 v Support for restricting access for anonymous users on page 49 v LDAP client configurations now support multiple DNs on page 49 Data protection enhancements on page 64 v Support for KMIP 1.1 on page 66 6 IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

New cautions The following caution is new in this release: File access and protocols cautions on page 79 v Changes in failure handling when processing export policy rules on page 81 New known problems and limitations There are new known issues in this release: Manageability issues on page 91 v Multiple takeover cycles with the flexscale.lopri_blocks option enabled might result in controller failure on page 92 SVM issues on page 97 v Root volumes without SVMs might be created during high I/O operations on page 97 File access and protocols issues on page 103 v Changes to the way the active audit log is viewed using Event Viewer on page 105 v Changes to support for duplicate CIFS super user accounts on page 106 Data protection issues on page 113 v Failure of SnapVault transfer in a SnapMirror to SnapVault cascade can halt SnapMirror transfers on page 113 Removed problems and limitations The following known problems and limitations have been removed in this release: SVM issues v Some SnapMirror operations fail due to incorrect or missing SVM peer relationship entries File access and protocols issues v Renaming a network interface disables Kerberos for that interface v LDAP name mapping fails due to incorrect schema attribute v Directory queries over SMB that contain consecutive '>' or '?' wildcards provide incorrect results Changes introduced since Data ONTAP 8.2 7

v Position value of name mapping entry not honored Storage resource management issue v Long disk list for aggregate creation could cause disruption Antivirus issues v Scanning fails after CIFS server is deleted and recreated v Request timeout error causes corresponding scanning operations to fail Documentation changes The following new or changed information supplements the documentation available for this release: Changes to the File Access Management Guide for CIFS on page 120 v Managing how file security is presented to SMB clients for UNIX security-style data on page 125 Enabling or disabling the presentation of NTFS ACLs for UNIX security-style data on page 125 v Configuring access restrictions for anonymous users on page 126 Changes to the System Administration Guide on page 127 v Changes to information about saving core dump files on page 127 Changes to the Clustered Data ONTAP Physical Storage Management Guide on page 128 v Unnecessary step listed in disk sanitization procedure on page 128 Changes to the Network Management Guide on page 129 v Removal of LIF addressing restriction on page 129 Changes to the SAN Administration Guide on page 132 v Title of the Status field in the unified-connect show command output has been renamed on page 132 Changes to the Data Protection Tape Backup and Recovery Guide on page 133 v Changes to the error message Too many active dumps/restores currently in progress on page 133 For more information about other important documentation updates, see Changes to published documentation on page 119. 8 IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

Changes in clustered Data ONTAP 8.2.1 The clustered Data ONTAP 8.2.1 release includes support for new hardware, software enhancements, and bug fixes. New platform and hardware support This release includes support for the following new platform hardware: v Support for 800-GB SSDs on page 19 v Support for 400-GB SSDs on page 20 v Support for 1.6-TB SSDs on page 20 v Support for SAS optical cables on page 20 v Support for shelf hot-remove on page 20 For more information, see New platform and hardware support on page 19. New and changed features This release includes the following new and changed features. Manageability enhancements on page 21 v Histogram-based predictions in RAVE on page 22 v Enhancements for managing SSH security configurations on page 22 v Support for installing the root certificate of an SSL server on the cluster or SVM on page 23 v HTTP access to log, core dump, and MIB files now enabled by default on page 23 v The system node service-processor commands now support the RLM on page 24 v The system node systemshell command will be removed from the advanced privilege level in an upcoming release on page 24 v Enhancement for monitoring system performance on page 24 SVM enhancements on page 34 v Replacement of Vserver name with Storage Virtual Machine name on page 34 Storage resource management enhancements on page 38 v Aggregates can be expanded to 64-bit format without adding storage on page 38 v Increased maximum Flash Pool cache sizes for N3150, N3220, and N3240 on page 38 Changes introduced since Data ONTAP 8.2 9

v Automated Workload Analyzer for Flash Pool cache sizing on page 38 v Multi-disk carrier and single-disk carrier disk shelves can be combined in the same stack on page 39 FlexArray Virtualization (Gateway) enhancements on page 43 v Gateway functionality renamed as FlexArray Virtualization on page 43 v Licensing requirement for Data ONTAP systems to use array LUNs on page 44 v Support added for FC direct-attached configurations with Entry and Midrange Disks back-end storage arrays on page 43 v Licensing enhancement in Gateway systems on page 44 File access protocol enhancements on page 45 v Support for SQL Server over SMB solutions on page 50 v Support for LDAP over SSL/TLS on page 51 v Support for multidomain name mapping searches on page 51 v Support for creating Active Directory computer accounts for SVMs on page 52 v Support for the default c$ administrative share on page 52 v Enhancements for NAS multiprotocol auditing on page 52 v Support for the KDC Resource SID Compression feature on page 52 v New parameter to specify Kerberos SPN in a different OU on page 53 v Support for VMware vstorage over IPv6 on page 53 v Support for qtree exports on page 53 Networking and security protocol enhancements on page 35 v SNMPv3 creates unique default engine IDs for each SNMPv3 agent in the cluster on page 36 Data protection enhancements on page 64 v Scalability limits for NDMP and dump backup and restore sessions on page 65 v Protection of data at rest through Storage Encryption on page 66 v Increased number of cluster peers on page 67 v SnapMirror transfer speed control within a cluster on page 67 Antivirus enhancements on page 68 v Support for offbox antivirus on page 68 v Support for Antivirus Connector on page 68 v Command mapping for Vscan command on page 68 10 IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

New cautions The following cautions are new in this release: Upgrade cautions on page 73 v Incomplete upgrades must be restarted on the correct node on page 73 v Upgrade to Data ONTAP 8.2.1 or later is required to enable offbox antivirus on page 74 v Change in how Data ONTAP handles file names containing UTF-16 supplementary characters on page 74 File access and protocols cautions on page 79 v Requirements for NFSv4.1 and pnfs on page 80 v DNS timeouts might lead to access issues for NFS IPv6 clients on page 81 v Exceeding recommended maximums on CIFS servers might result in disruption of service on page 82 Revert and downgrade cautions on page 84 v Offbox antivirus must be disabled before reverting to an earlier release of Data ONTAP on page 84 v Requirement to reset SSH security configurations when downgrading or reverting to a release earlier than Data ONTAP 8.2.1 on page 84 v Downgrade or revert operation fails when qtree exports are enabled on page 85 Cautions removed in Data ONTAP 8.2.1 The following cautions that were included in the Data ONTAP 8.2 Release Notes have been removed in this release: Upgrade cautions v SAS optical cables not supported v Windows clients cannot access Virtual Hard Drive (VHD) files after upgrading to clustered Data ONTAP 8.2 v System disruption occurs if invalid values exist for file-umask or dir-umask fields after upgrading Data protection cautions v NDMP default password must be changed File access and protocols cautions Changes introduced since Data ONTAP 8.2 11

v Unable to access existing NFS mounts or create new ones v Storage system disruption when adding incomplete NIS domain configuration and rebooting node Downgrade and revert cautions v Revert from clustered Data ONTAP 8.2 fails if FPolicy policies with privileged data access are enabled New known problems and limitations There are new known issues in this release: Manageability issues on page 91 v False alert seen in cluster switch configurations on page 92 v The maximum number of attempted retries value fails to update on page 95 Networking issues on page 96 v The first VLAN configured over a port might bring the port down temporarily on page 96 SVM issues on page 97 v Creating a user account with vsadmin-backup role fails when upgraded to clustered Data ONTAP 8.2.x on page 97 FlexArray Virtualization (Gateway) issues on page 101 v Too many storage devices presented to the Data ONTAP system on page 101 v Incorrect default behavior for failover of cluster management LIFs on page 130 v Some Hitachi or HP XP array LUNs might not be visible on page 101 Infinite Volume issues on page 102 v Example workflows for Infinite Volumes removed from the OnCommand community site on page 102 File access and protocols issues on page 103 v Data ONTAP LDAP client does not support revoked certificates on page 106 v CIFS ACLs not updated as expected when using the CLI to modify volumes on page 105 v Change to the maximum number of audit-enabled SVMs supported in the cluster on page 107 12 IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

v Change in behavior of -allow-suid parameter for export policy rules on page 107 Data protection issues on page 113 Removed problems and limitations The following known problems and limitations have been removed in this release: Manageability issues v Required delay between password changes is ignored when passwords are set to expire immediately v OpenSSH SSH daemon automatically disconnects unresponsive sessions Networking issues v Exiting the Cluster Setup wizard may cause VLANs to be created incorrectly Storage resource management issues v Splitting or deleting FlexClone child volumes before reverting v Configuring ACP to use a different port on a N3240 system disables ACP for the local SAS expander Issues with Gateway working with LUNs from storage arrays v Some HP 3PAR array LUNs might be reported as unknown devices if zoning is configured before setting the host persona v LUNs from a host group with fewer than 16 array LUNs are not visible on some Hitachi and HP storage arrays Infinite Volume issues v Infinite Volumes in Data ONTAP 8.2 not supported by System Manager v SMB client cannot add new UNIX principal to NTFS file permissions File access and protocols issues v Internal CIFS operations might cause performance degradation v Performance might be impacted when deleting SVMs with CIFS servers v Data ONTAP does not support the KDC Resource SID Compression feature v Non-CIFS data LIFs can prevent operation of the CIFS Witness protocol v Mac clients do not support CIFS automatic node referral v BranchCache hash cleanup fails if hash path contains blanks or special characters Changes introduced since Data ONTAP 8.2 13

SAN administration issues v The fcp topology show command with the verbose or zoned option fails on very large fabrics Antivirus issues v Vscan server may fail to access the same files as the client in a load-sharing mirror volume Documentation changes The following new or changed information supplements the documentation available for this release: Changes to the Logical Storage Management Guide on page 128 v Incomplete information in "Creating a FlexClone volume" on page 129 Changes to the Data Protection Guide on page 130 v Incorrect column title in the table listing SMTape scalability limits on page 134 Changes to the Network Management Guide on page 129 v Incorrect default behavior for failover of cluster management LIFs on page 130 Changes to the SAN Configuration Guide on page 132 v Incorrect PVR requirements listed for shared SAN configurations on page 132 v Missing parameter descriptions in the command-line interface on page 134 v Incorrect reference to a Gateway guide on page 137 For more information about other important documentation updates, see Changes to published documentation on page 119. 14 IBM System Storage N series: Clustered Data ONTAP 8.2.3 Release Notes

Unsupported features Support for some Data ONTAP functionality is discontinued in this release family. NDMP v3 Starting with Data ONTAP 8.2.0, NDMP v3 is not supported. On-board Antivirus On-board Antivirus support is discontinued beginning with Data ONTAP 8.1.3. Some references to Antivirus are present in the clustered documentation, in man pages, and in user interfaces. All such references should be ignored. Antivirus commands are not supported and should not be used. For more information, see Support for on-board antivirus is discontinued from Data ONTAP 8.1.3 and later on page 79. Volume copy Support for volume copy functionality is discontinued beginning in clustered Data ONTAP 8.2. For more information, see Volume copy functionality no longer supported on page 41. Copyright IBM Corp. 2015 15