For use with HMC Version 11 Release 1 M1110

Contents

The information in this Readme contains the fix list and other package information about the Hardware Management Console.

• PTF MF71740
• PTF MF71741
• Package information
• Fixes included
• Known issues and limitations
  
• Best Practices
• Installation

General fixes

• Fixed an issue that allowed an Exchange FRU of an SR-IOV adapter that was in use by IBM i partitions to proceed concurrently.
  
• Fixed an issue that always causes the Close event task on the Service management -> Serviceable events GUI to fail with the following message when the HMC language is set to other than English: "Cannot invoke "com.ibm.xmlns.powervm.serviceableeventmanager.v2013_3.ServiceableEvent.getPostAction0" because "event" is null".
  
• Fixed an issue that can cause SR-IOV adapters to be changed to dedicated mode in a NovaLink co-managed environment after the HMC is set or released as the co-management controller for the managed system.
  
• Fixed an issue that prevents scheduled operations from being successfully scheduled using the Schedule management GUI when the HMC language is other than English and the HMC timezone is other than UTC.
  
• Fixed an issue where all SR-IOV adapters in a managed system may not be shown on the Update SR-IOV firmware or View SR-IOV firmware levels GUI.  This issue occurs for managed systems with more than 5 and less than 10 SR-IOV adapters.
  
• Fixed an issue which incorrectly returned an error that a repair FRU operation was non-concurrent.
  
• Fixed pedbg to disable debug tracing that could cause cimserver logs to roll faster after pedbg collection finishes.
  
• Fixed an issue with the Update system, VIOS, adapter levels GUI wizard where the wizard attempted to import VIOS and I/O updates even though the user selected "Do not update" for those resources.
  
• Fixed the Refresh selection drop down on the Performance dashboard GUI.
  
• Fixed an issue where the HMC IP address did not get updated in the RMC information after the HMC IP address was changed.  This prevented the HMC from being able to establish RMC sessions with partitions.

Security fixes

• Addressed libxml2 vulnerability: CVE-2025-32415.
  
• Addressed httpd vulnerabilities: CVE-2024-47252, CVE-2025-23048, CVE-2025-49630.
  
• Addressed Apache Tomcat vulnerabilities: CVE-2025-52434, CVE-2025-48989, CVE-2025-52520, CVE-2025-53506, CVE-2025-55668, CVE-2025-49125, CVE-2025-48988, CVE-2025-46701, CVE-2025-31651, CVE-2025-31650.
  
• Addressed pam vulnerabilities: CVE-2025-6020, CVE-2025-8941.
  
• Addressed CWE-548: Directory Listing exposure.

Known Issues and Limitations

• Dates, times, and numbers on the GUI Performance dashboard are shown in the format based on the HMC language instead of the browser language.
• Occasionally a Kerberos user login may fail even when the credentials are valid. As a workaround, try logging in again with the same credentials after a short delay of 15 to 30 seconds.
• Using the search function on the Partitions table on the new GUI takes several seconds to update the table when the HMC is managing many partitions.
• The Update system, VIOS, adapter levels task shows in the Task log with a status of Completed but the progress bar on the task’s GUI page may still show it is applying updates.  Refer to this document https://www.ibm.com/support/pages/node/7240073 for more information.
• Several dconf related warning messages are displayed when running the asmmenu command.  Those messages can be ignored.
• For the optimal video resolution configuration for HMCs connected to the "IBM Rack-Mounted Flat-Panel Console Kit with Keyboard (ETF6)" see the article - https://www.ibm.com/support/pages/node/7239295
• Create Serviceable Event fails with REST0192 Invalid argument class when entering a description that is not a simple one line sentence (i.e. if it contains a CR/LF, the action will fail). Refer to this document https://www.ibm.com/support/pages/node/7243098 for more information/remediation.
  
  

Best Practices

• User sessions - The following best practices helps avoid performance degradations gradually over a period of time due to increased login sessions as well as security vulnerabilities such as unauthorized access to the active HMC sessions.
• It is a best practice to logoff from HMC UI and then close the browser tab instead of directly closing the tab
• Set Idle session timeout for all the users and not leave the timeout as '0' which leaves it as no timeout.
• Call home - It is recommended to enable call home on the HMC to allow error reporting for faster problem resolution, inventory collection, and sending other periodic data. For more information review the IBM Call Home brochure and how to enable Call Home on V10.

Updating, upgrading, and migrating your HMC machine code

Update(s)for HMC V11R1M1110