FILE NAME: SIM72_hotfix_2016_Jan_win.exe TITLE: Hotfix Update Kit for HP Systems Insight Manager 7.2- Windows (Jan 2016) LANGUAGE: English OPERATING SYSTEM: All supported Windows operating systems. PREREQUISITES: HP Systems Insight Manager 7.2 - Windows EFFECTIVE DATE: Jan 27, 2016 DESCRIPTION: Hotfix Update Kit for HP Systems Insight Manager 7.2- Windows (Jan 2016) This kit installs hotfixes to HP Systems Insight Manager 7.2. SIM improvements and bug fixes new to this hotfix update kit: - Setting of community string for iLO4 using CRA. - Updates carried out to process EngineID for supporting SNMPv3 traps from CV EVA and EVA PA - Updates carried out for processing stale trap files during SIM startup. - Suppression of "Automatic Discovery of VM Guest(s) is disabled on this system” message when host is licensed and IP is in VM Host exclusion range. - Enhanced to calculate the status of version control similar to VCA. - Added support for Mellanox switch - Fix for logical server node deletion when duplicate system name is discovered. - Better trap xml processing. - Enhanced support for Direct Connect functionality. - Enhanced SIM forwardAlertAsTrap to have a customized community in case of SNMPv3 traps. - Fix for the setting the product number on Enclosure node from OA XML reply. - Exclude ESX Host License check for horizontal discovery of VM Guest(s) - Fix for iLO4 health status component URL - Changes to the Software Status URL - Improved the time taken to assign multiple systems to baseline - Fix for invalid characters being displayed in SF/FW page for component name. - Introduced log messages when a global setting changes. - Added VarbindSeverity mappings for dynamic severity. - EVA mibs submission for inclusion into HP SIM. - HPREPSIM is updated to use LogonUser and ImpersonateUser method to get the remote target premissions for installing hprepsvc service on target. - Enabled mutual authentication in Proxy Authenticator module. - An error while running the legacy reports when there are no events. - SIM Startup hangs, During large GB's of traps backlog in trap storm cases. - Inclusion of partner jar in HPSIM - Support for Decina Switch. - Added logic to maintain subtypes even when wbem communication fails during subsequent reidentification - Collected few attributes to determine the OS type - Display information about multiple partner baldes in BPV tooltip and in system page - Fix for Properties file issues. - Added SNMPv3 INFORMS handling - Enabled Storage Web Service for MSA 2040 - Reduced the severity of comm error to Major. - Fix for management protocol scrub when wrong community is provided during initial system discovery. - IO Module node will not be created if it is set to Unknown in XML reply. EM firmware 1.40 will have fix to return valid UUID in XML reply and IO module node gets created in SIM. - HPSIM changes for HPSUM integration - cpqHoTrapFlags severity utilized for cpq mibs. - cpqHoTrapFlags severity modified based on cpqhost.mib - Hyperlinks to online help in new custom tool page were not opening right pages. - HPSUM pdb files not getting deleted after installation of components through CLI - hpsum downgraded from 6.0 to 5.3.5 - updated spp(B) - smartcomponents and linuxagents - updated smartcomponents and linuxagents. - Rebranding ERS configuration options in SIM - Re-branding changes for result log of ERS and adding link for DC notes section for ERS. - Without web proxy details in registering the HP server, the HPSim is not proceeding - Defined mappings for traps with unknown and Normal severity to be included under globalsettings.tpl - Configure or Repair Agents is failing to install HPSMH in RHEL 6.x targets - spp updated for ams version. - HP SIM forwards WBEM Events as Trap with Community String set as "public" - Updated MIBs Changes. - NAT use case for mapping source to the proxy IP/node. - Configuration support to use secure or un-secure http/https requests from VCA for cpqEvents during upgrade to baseline of components. - Changes for using domain user when sing-in user credntials preference is selected HP SIM Federated Search view - Enhanced assign to baseline. Additional check and handlers added to process assign of baseline gracefully even if selected list of node has a duplicate entry in HP SIM. - Overall sw status for targets from linux cms is coming as unknown - Updated SPP Smart Components and Linux Agents with SMH and VCA components. - HP SUM Upgraded to 5.3.6 - Cygwin in HP SIM is vulnerable to Shellshock. - HP SIM is vulnerable to Click Jacking - fixed XSS for server certificate page. - fixed XSS for diskThreshParameters page. - fixed XSS for AutoDiscoveryList page. - fixed XSS for rpt_TSPwizard page. - fixed XSS for scrubSelections page. - upgraded openssl binaries for POODLE vulnerability - POODLE vulnerability (CVE-2014-3566): Disabling SSLv3 protocol in SIM - HP SIM launch of NonStop OSM Event Viewer should use https - Updated cimclient support. - Vulnerability reported against Openssh 5.9 (version upgraded to 6.9p1-1) - Vulnerability reported against commons_fileupload 1.0 (version upgraded to 1.3.1) - Error while creating host files for discovery, importing certificates in SIM - Vulnerability reported against OpenSSH 6.9 (Upgraded OpenSSH to 7.1p1-1) - SIM is impacted with Vulnerability Note VU#576313 (CVE-2015-7501) [commons-collections.jar versions 2.0, 2.1 & 3.1 is upgraded to 3.2.2] HOW TO USE: 1. Ensure that you are logged in to Windows with a user account that is a member of the "Administrators" group and that the user account also has Systems Insight Manager administrative privileges. 2. Download the kit to a directory on your hard drive (other than the root of the drive) and change to that directory. The file that is downloaded is a self-extracting executable with the name SIM72_hotfix_2016_Jan_win.exe. 3. From that drive and directory, execute the downloaded file and follow the on-screen instructions to unpack the files and install the kit. Note that it will stop and restart the Systems Insight Manager service and other services that use Systems Insight Manager during this process. The entire update should take less than 10 minutes. 4. After a successful installation, you may delete the self-extracting file and the files unpacked in step 3 if you wish. (C) Copyright 2015 Hewlett-Packard Development Group, L.P. Product names mentioned herein may be trademarks and/or registered trademarks of their respective companies