Dell™ PowerVault™ ML6000 Tape Library 690G.GS002 Firmware Release Notes - DRAFT

June 2017

These release notes document the 690G.GS002 release of the Dell PowerVault ML6000 Tape Library firmware. These release notes provide information on new functionality, tape drive compatibility, problems resolved, and the current known issues.

This release fixes firmware issues. These are described in Problems Resolved, below.

This document is organized into following sections:

• Supported Browsers
• New Functionality
• Component Firmware
• General Usage Notes
• Problems Resolved
• Known Issues
• Firmware Versions
• Documentation
• Contacting Dell

Supported Web Browsers

This version of library firmware supports the following Web browsers (for using the remote Web client):

• Microsoft® Internet Explorer 10 and above.
• Mozilla Firefox™16 and later versions

New Functionality

• The time zone database has been updated.
• The Dell Service password has been changed.
• Customers can now load their own signed SSL certificates.
• Security Updates
  • The OpenSSL 1.0.2 branch has been upgraded for long-term support.
  • The use of SHA1 certificates for https connections is now disallowed.
  • Removed the weka/medium cipher support for https connections.
  • The Remote User Interface has been updated to correct security issues.

Component Firmware

The following component firmware has been qualified with the 690G.GS002 firmware. This information is current as of the publication date of these release notes. For the most recent firmware versions, check www.dell.com/support.

• Tape Drives: Updated/Confirmed on 10/28/15
  • IBM LTO-3 (SCSI): 93GM
  • IBM LTO-3 (Fibre): 93GM
  • IBM LTO-4 (Fibre): C7QH*
  • IBM LTO-4 (SAS): C7QH*
  • IBM LTO-5 (Fibre): G9N4
  • IBM LTO-5 (SAS): G9N4
  • IBM LTO-6 (Fibre): G9P4
  • IBM LTO-6 (SAS): G9P4
  • IBM LTO-7 (Fibre): G9Q4

* Note: Due to security features, you cannot downgrade the IBM LTO-4 drive firmware to versions prior to 82FB without following specific instructions. If you must downgrade, contact Dell Technical Support for assistance.

General Usage Notes

The following are important items that you may notice that are not covered in the Known Issues section of this document.

• Heartbleed Security Update — 51564 and 51637 added in 8.2.2The 8.2.0.2 (641G.GS103) firmware release addresses the National Institute of Standards and Technology’s (NIST) National Vulnerability Database Vulnerability Summary for CVE-2014-0160 (see web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0160) with an updated, non-vulnerable OpenSSL software component. Any library configuration that uses web client access in Hypertext Transfer Protocol Secure (HTTPS) mode, or has enabled SMI-S support, could have been vulnerable to the “Heartbleed” bug if the library actually encountered a malicious attack. Since secure library communication certificates may have been retrieved during such an attack, new communication certificates have been provided with this version of library firmware. As a result of such change, any security exceptions that may have been set up using the web client do not apply anymore; an “untrusted site” warning message will be encountered after the firmware installation is complete, requiring the security exception to be configured again.

• Tenable Network Security® Nessus® — Version 5.2.7 security scanner was run against the library firmware and found no critical issues.

• Browser Security Message — When the SSL feature is enabled on the library, the browser may display an informational SSL security message stating that the certificate issued by the library is not from a trusted source. This is normal behavior and does not affect library function. The library issues certificates based on local network data and is not a typical Web site that would be issued a certificate by a trusted source for public access via SSL. Accept the warning and continue.

• Internet Browser "Back" Button — (STANDING ISSUE) The library Web client does not support using the Internet browser "back" buttons. Instead, use the Back and Cancel buttons provided in the user interface.

• Library Configuration Changes Upon Downgrade — (STANDING ISSUE) After a firmware downgrade, library configuration (partition names, slot counts, I/E station slot count, etc.) may change. With each successive firmware release, new features are supported and represented in the current configuration file that may not be backward-compatible to previous releases. A necessary part of firmware downgrade is to automatically reset the unit to default configuration. The library must be reconfigured to the user-defined settings when the firmware downgrade is complete.

• Firmware Upgrade/Downgrade Sequence — (Bug 41388) When planning to upgrade library firmware, upgrade drive firmware first before upgrading the library firmware. If you are planning to downgrade both the library and drive firmware, downgrade the library firmware before downgrading the drive firmware..

• Upgrading Library Drive Firmware — (Bug 41494) Due to space limitations, starting with LTO6 library firmware, and applicable when an I/O blade is installed in the library: When upgrading the library firmware, downgrading the library firmware, or saving or restoring the library configuration, all uploaded tape drive auto-level images will be automatically removed.

• Downgrading Library Firmware (CR 67813 and CR 67919) — If you are running firmware code level 400G or later and your library has Fibre Channel (FC) I/O blades installed, you cannot downgrade to level 320G or earlier version of code, because the earlier versions do not support FC I/O blades.

• SAS Host Bus Adapter and Host Bus Adapter Drivers — SAS host bus adapter and drivers (combined) must support SAS standard 1.1 or higher.

• Library Service Utility — You must run the Library Service Utility prior to upgrading firmware if you are currently running firmware version 320G.GS004 or 400G.GS006.

• Kerberos Limitation Issue — (STANDING ISSUE) When setting up the library to use Kerberos remote authentication, an error is generated if you try to use the IPv6 address for the KDC (AD Server) field. Instead of using the IPv6 address, use the fully qualified domain name (FQDN).

• SNMP MIB walks on large library configurations Bug57600 (like a 41U) may time out at 5 seconds, but will likely pass at 10 seconds. Make sure when performing an SNMP MIB walk that your utility retrieves MIB information using a timeout of at least 10 seconds.

• Running the Installation & Verification Test (IVT) — (STANDING ISSUE) IVT is optimized for library firmware versions 520G and above and libraries built after July 1, 2008 (serial numbers with last four digits 8602 and above).
  

  • If your library was built on or before July 1, 2008, and you are running firmware version 520G or above, you will not be able to run the IVT test, even though the selection is available.
  • If your library was built on or before July 1, 2008, and you are running firmware version 500G or below, you can run the test, but it is not recommended because it may produce erroneous results.

• Internet Explorer Support — This is the last library firmware release that will support Internet Explorer 7.0.

• Planning a Drive Firmware UpgradeBug 48200— When updating IBM LTO-6 drive firmware, the update process can take at least 2 hours to complete. Do not stop or interrupt the firmware upgrade process; plan your firmware upgrade accordingly.

• Cookie Placement for LoginBug 41762 — The library Web client places a cookie on the user’s computer to provide the last user’s credentials upon login. The cookie only collects the user’s credentials to facilitate login, and does not collect any other user data.

• Pop-Up Blocker and/or Ad Block Plus Add-OnBug 57958— The library Web client displays Online Help topics in separate windows and needs to have the pop-up blocker disabled, or have an an exception set, to allow such pop-ups to display properly. Additionally, various functionality displays confirmation windows which confirm or cancel an operation, and Ad Block Plus add-ons which suppress the display of advertisement can interfere and suppress such message windows. Disable Pop-Up Blockers and Ad Block Plus for proper Web client operation.

• SNMP Session IntervalsCR 47816 SR1516962 — Monitoring of SNMP sessions in intervals of 30 seconds or less may cause degradation in library performance. Set SNMP monitoring sessions to intervals of 3 minutes or more.
  

Problems Resolved

The following problem has been resolved with the Dell PowerVault ML6000 Tape Library 690G.GS002 firmware:

Resolved Issue 1 53296

• Description
  An update to the Service password was requested.
• Solution
  Resolved.

Known Issues

Dell PowerVault ML6000 Tape Library 690G.GS002 firmware has the following known issues:

Known Issue 1 — CR 25651

• Description
  If a tape drive firmware update fails when using a firmware update method other than autoleveling, the library may incorrectly generate RAS ticket T112 - Invalid Tape Drive Firmware Image in addition to correctly generating RAS ticket T109 - Tape Drive Firmware Update Failure.
• Workaround
  Ignore T112, and follow the resolution steps for T109.

Known Issue 2 — CR 25964, SR1070246

• Description
  If a library is upgraded and fails to initialize upon reboot, the snapshot name will be incorrect.
• Workaround
  Snapshot information is correct other than the name. Correct the hardware issue that is causing library not to initialize.

Known Issue 3 — CR 27092

• Description
  Occasionally the FC I/O blade serial number is reported incorrectly on the Tools - I/O Blade Information screen (Tools > I/O Blade Info).
• Workaround
  If the serial number ends with invalid characters, ignore the invalid characters. The rest of the serial number is correct.

Known Issue 4 — CR 28408

• Description
  IBM LTO-5 drives failed firmware upgrade on a library that had an FC I/O blade installed. Some of the drives that failed the upgrade were connected to the FC I/O blade.
• Workaround
  Try the firmware upgrade operation again.

Known Issue 5 — CR 29140

• Description
  E-mailing Advanced Reports via the Web client fails to complete.
  This only happens when you first “save” the report and then immediately try to “e-mail” the report using the Save and E-mail buttons in the report viewer.
• Workaround
  There are two workarounds. Either:
  • E-mail the report before saving it.
    or
  • Once you save the report, leave the report viewer page and go to another page in the Web client. Return to the report viewer page and then click the E-mail button to e-mail the report.

Known Issue 6 —CR 29297 SR1148738

• Description
  Picker issues cause the operator panel to remain in the “working” state.
• Workaround
  Log on to the Web client, capture a snapshot, and contact Quantum Support for assistance.

Known Issue 7 - CR 37926

• Description
  After restoring to a previous release version and then upgrading to i8, the following RAS messages were generated:
  • T084 - Missing Cleaning Tape
  • T085 - Unknown Cartridge In Cleaning Slot
• Workaround
  The workaround is to export all cleaning tapes and re-import them back into configured cleaning slots.

Known Issue 8 — 41384

• Description
  On library firmware upgrades it is possible to see ticket T074 – Drive Sled Auto-Leveling Failure.
• Workaround
  Close RAS ticket T074 – Drive Sled Auto-Leveling Failure. Power cycle the library.

Known Issue 9 — 41389

• Description
  Cannot change drive topology setting after disabling data path failover.
• Workaround
  Refresh the web browser page before attempting to change topology.

Known Issue 10 — 41384

• Description
  EKM Path Diagnostics fails when you change the DNS host name of a primary or secondary EKM server (
  Setup > Encryption > System Configuration).
• Workaround
  After you change the host name, restart the library.

Known Issue 11 — 41381

• Description
  If both FC I/O blades and Ethernet Expansion blades are in the library, when you perform an operation that reboots all installed FC I/O blades, it will also reset all installed Ethernet Expansion blades.
• Workaround
  Close the EEB RAS ticket. Verify that no other related RAS tickets were generated.

Known Issue 12 — 41384

• Description
  Changing the library’s internal IP address in the midst of a host-initiated backup/restore operation may cause the backup to fail.
• Workaround
  Do not change the library’s internal IP address during backup/restore operations. It is recommended practice to reboot the library after changing the internal IP address. Additionally, you may receive RAS tickets for loss of drive communication if you change the internal IP address. If this occurs, resolve any related RAS tickets, and then reboot the library.

Known Issue 13 — 41384

• Description
  After upgrading the library from version i8.1.1 to i8.2, the library may display an error when accessing pages from the Web client menu.
• Workaround
  Reboot the library.

Known Issue 14 — 41384

• Description
  Using an invalid cleaning tape for Automatic Cleaning does not generate errors on the library.
• Workaround
  Verify that only valid cleaning tapes are used for cleaning operations.

Known Issue 15 — 41385

• Description
  After viewing one RAS Ticket Resolve window, a dialog box appears that states "A RAS Ticket Resolve is already open" for all subsequent RAS Ticket Resolve windows.
• Workaround
  Do not close a RAS Ticket Resolve window by clicking the "x" button in the console. Use the Close Ticket button.

Firmware Versions

Documentation

The Dell PowerVault ML6000 Tape Library Getting Started Guide is shipped with your library. For detailed installation information see the Dell PowerVault ML6000 Tape Library User’s Guide (www.dell.com/support). Please also refer to Tech Sheets for this product available on www.dell.com/support.

Contacting Dell

To contact Dell electronically, you can access the following Web sites:

• http://www.dell.com
• www.dell.com/support (technical support)

For specific Web addresses and telephone numbers for your country, see the Contacting Dell chapter in the Dell PowerVault ML6000 Tape Library User’s Guide (www.dell.com/support).