The release notes cover the following topics

About VMware IP Certification Patch

A patch provides one or more fixes to a VMware Smart Assurance product. A patch can only be applied to the specific major or minor release and Service Pack of the particular product for which it is intended, this is called the product’s baseline.

What's New in this Release

The VMware Smart Assurance 10.1.2.9 introduces the following enhancement:

  • Following System OIDs are certified in this release: 

Certified Devices

This section describes the devices certified and the certification impact in this patch.

Simple Certification

Simple certification involves only in configure file changes and the qualification of new OID in the currently existing driver. This section describes the devices certified in this patch.

Simple devices certified in the patch:

SR/TASC Number Vendor Name                                                                                   Description
SASS-15309/306031 F5NETWORKS Certified the following components for the BIG-IP-I4600 LOADBALANCER (System OID:.1.3.6.1.4.1.3375.2.1.3.4.106):
AggregatePort, Disk, Fan, FileSystem, Interface, Memory, Port, PowerSupply, Processor, TemperatureSensor, and Vlan.
SASS-15300/305962 CISCO Certified the following components for the ciscoC11138P ROUTER (System OID:.1.3.6.1.4.1.9.1.2534):
Card, Interface, Memory, Port, PowerSupply, Processor,TemperatureSensor, and Vlan.
SASS-15299/305931 CISCO Certified the following components for the ciscoFpr4115SM24 FIREWALL (System OID:.1.3.6.1.4.1.9.1.2774):
Interface, Memory, and Processor.
SASS-15314/305988 FORTINET Certified the following components for the fgtVM64AWSONDEMAND FIREWALL (System OID:.1.3.6.1.4.1.12356.101.1.46):
Disk, Interface, Memory, and Processor.
SASS-15317/306001 FORTINET Certified the following components for the FortiGate 600E FIREWALL (System OID:.1.3.6.1.4.1.12356.101.1.6005):
Disk, Fan, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor.
SASS-15322/306012 CISCO Certified the following components for the ciscoIE32008P2S SWITCH (System OID:.1.3.6.1.4.1.9.1.2684):
Card, Fan, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and Vlan.
SASS-15307/305968 CISCO Certified the following components for the ciscoC11188P ROUTER (System OID:.1.3.6.1.4.1.9.1.2552):
Interface, Memory, Port, PowerSupply, Processor, TemperatureSensor, and Vlan.
SASS-15344/306077 ARISTA Certified the following components for the DCS-7808-CH SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7808.2749):
Interface, Memory, Port, Processor, and Vlan.
SASS-15348/306078 ARISTA Certified the following components for the DCS-7280PR3-24 SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7280.3232.3.24):
Interface, Memory, Port, Processor, and Vlan.
SASS-15350/306036 INFOBLOX Certified the following components for the ND-1405 HOST (System OID:.1.3.6.1.4.1.7779.1.1542):
Disk, Fan, FileSystem, Interface, Memory, MemoryGroup, PowerSupply, Processor, ProcessorGroup, and TemperatureSensor.
SASS-15333/306013 CISCO Certified the following components for the AP1040 WIRELESSACCESSPOINT (System OID:.1.3.6.1.4.1.9.1.1269):
Interface, Memory, and Processor.
SASS-15349/306087 MENLOSECURITY Certified the following components for the Menlo Security Isolation Platform HOST (System OID:.1.3.6.1.4.1.44734):
Disk, Interface, Memory, and MemoryGroup.
SASS-15381/306079 ARISTA Certified the following components for the DCS-7280CR3-32P4 SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7280.2727.3.32.2129.4):
Interface, Memory, Port, Processor, and Vlan.
SASS-15380/306060 CISCO Certified the following components for the ciscoCDB8U SWITCH (System OID:.1.3.6.1.4.1.9.1.2398):
Fan, Interface, Memory, Port, PowerSupply, Processor, TemperatureSensor, and Vlan.
SASS-15373/306048 CISCO Certified the following components for the cevChassisN9KC9332C SWITCH (System OID:.1.3.6.1.4.1.9.12.3.1.3.2076):
Card, Fan, Memory, Port, PowerSupply, Processor, and TemperatureSensor.
SASS-15382/306080 ARISTA Certified the following components for the  DCS-7050TX3-48C8 SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7050.1958.3.48.2878.8):
Interface, Memory, Port, Processor, and Vlan.
SASS-15409/306082 CHECKPOINT Certified the following components for the Maestro1-sg1 FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.94):
Fan, FileSystem, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor.
SASS-15410/306083 CHECKPOINT Certified the following components for the 6700 FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.95):
Fan, FileSystem, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor.
SASS-15411/306084 CHECKPOINT Certified the following components for the 7000 FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.96):
Disk, Fan, FileSystem, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor.
SASS-15363/306002 INFOBLOX Certified the following components for the IB-810 HOST (System OID:.1.3.6.1.4.1.7779.1.1401):
Disk, Fan, FileSystem, Interface, Memory, MemoryGroup, PowerSupply, Processor, ProcessorGroup, and TemperatureSensor.
SASS-15400/305976 CISCO Certified the following components for the UCSC-C480-M5 HOST (System OID:.1.3.6.1.4.1.9.1.2424):
Card, Disk, Fan, Interface, Memory, MemoryGroup, PowerSupply, TemperatureSensor, and VoltageSensor.
SASS-15358/305924 A10NETWORKS Certified the following components for the TH3230 LOADBALANCER (System OID:.1.3.6.1.4.1.22610.1.3.42):
Disk, Fan, Interface, Memory, PowerSupply, Processor, TemperatureSensor, VoltageSensor, and Vlan.
SASS-15347/306039 CISCO Certified the following components for the cevChassisDSC9148TK9 FIBRECHANNELSWITCH(System OID:.1.3.6.1.4.1.9.12.3.1.3.2054):
Card, Fan, FibreChannelSitchPort, Interface, Memory, PowerSupply, Processor, and TemperatureSensor.
SASS-15421/306085 CHECKPOINT Certified the following components for the 16200 FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.97):
Disk, Fan, FileSystem, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor.
SASS-15422/306086 CHECKPOINT Certified the following components for the 28000 FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.98):
Disk, Fan, FileSystem, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor.
SASS-15423/306092 ARISTA Certified the following components for the DCS-7804-CH SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7804.2749):
Interface, Memory, Port, Processor, and Vlan.
SASS-15424/306101 CISCO Certified the following components for the SG250-10P SWITCH (System OID:.1.3.6.1.4.1.9.6.1.97.10.5):
Interface, Port, Processor, TemperatureSensor, and Vlan.
SASS-15361/305969 RAD Certified the following components for the ETX-2I-10G SWITCH (System OID:.1.3.6.1.4.1.164.6.1.6.51):
Interface, Port, PowerSupply, and Processor.
SASS-15356/306103 CISCO Certified the following components for the SG250-08 SWITCH (System OID:.1.3.6.1.4.1.9.6.1.97.8.3):
Interface, Port, Processor, and Vlan.
SASS-15313/305971 CISCO Certified the following components for the C9800-CL-K9 WIRELESSCONTROLLER (System OID:.1.3.6.1.4.1.9.1.2391):
Card, Interface, Memory, Port, Processor, and Vlan.
SASS-15388/306089 CISCO Certified the following components for the AP3700 WIRELESSACCESSPOINT (System OID:.1.3.6.1.4.1.9.1.1873):
Interface, Memory, Processor, and Vlan.
SASS-15364/306033 JUNIPER Certified the following components for the SRX4600  FIREWALL (System OID:.1.3.6.1.4.1.2636.1.1.1.2.140):
Card, Disk, Fan, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor.
SASS-15308/306109 RADWARE Certified the following components for the Alteon 6024S SWITCH (System OID:.1.3.6.1.4.1.1872.1.13.3.12.1):
Fan, Memory, Port, Processor, TemperatureSensor, and Vlan.
SASS-15293/306068 JUNIPER Certified the following components for the NFX250S2SCJcp ROUTER (System OID:.1.3.6.1.4.1.2636.1.1.1.4.138.5.3):
AggregatePort, Interface, Port, and Vlan.
SASS-15367/306069 NOKIA Certified the following components for the 7750 SR ROUTER (System OID:.1.3.6.1.4.1.6527.1.3.13):
Card, CardRedendancyGroup, Fan, Memory, Port, PowerSupply, Processor, and TemperatureSensor.
SASS-15336/306030 DELL Certified the following components for the  PowerSwitch MX9116N SWITCH (System OID:.1.3.6.1.4.1.674.11000.5000.100.2.1.1):
Card, Disk, FileSystem, Interface, Memory, Port, Processor, TemperatureSensor, and Vlan.
SASS-15355/306106 RARITAN Certified the following components for the DSX2-32-3  HOST (System OID:.1.3.6.1.4.1.13742.3.2.10):
Interface.

Complex Certifications

Complex certifications involve re-certification, new device certifications, and involve new driver creations or multiple file changes. This section describes the devices certified in this patch.

Complex devices certified in the patch:

SR /TASC Number Vendor Name Description
SASS-15325/306105 EXTREME  Certified the following components for the Summit X440G2-12p-10G4 SWITCH (System OID:.1.3.6.1.4.1.1916.2.227):
Card, Fan, Interface, Memory, Port, PowerSupply, Processor, and TemperatureSensor.
SASS-15326/306104 EXTREME  Certified the following components for the Summit X440G2-24p-10G4 SWITCH (System OID:.1.3.6.1.4.1.1916.2.223):
Card, Fan, Interface, Memory, Port, PowerSupply, Processor, and TemperatureSensor.
SASS-15370/306041 CISCO Certified the following components for the ciscoVG4006FXS6FXO MEDIAGATEWAY (System OID:.1.3.6.1.4.1.9.1.2769):
Card, Fan, Interface, Memory, Port, PowerSupply, Processor, TemperatureSensor, VoltageSensor, and Vlan.

Certification impact

This section lists the impacted drivers and SysOIDs as a result of certification changes.

TASC Number Impacted Drivers Impacted SysOIDs
306041 HEALTH = Cisco-Router-ASR-EntSensor

.1.3.6.1.4.1.9.1.923
.1.3.6.1.4.1.9.1.924
.1.3.6.1.4.1.9.1.1525
.1.3.6.1.4.1.9.1.2252
.1.3.6.1.4.1.9.1.2348
.1.3.6.1.4.1.9.1.2449
.1.3.6.1.4.1.9.1.2443
.1.3.6.1.4.1.9.1.2444
.1.3.6.1.4.1.9.1.2769
306105 HEALTH = Extreme-Alpine
CPU/Memory = Extreme:DeviceID

.1.3.6.1.4.1.1916.2.227
.1.3.6.1.4.1.1916.2.11
.1.3.6.1.4.1.1916.2.16
.1.3.6.1.4.1.1916.2.28
.1.3.6.1.4.1.1916.2.20
.1.3.6.1.4.1.1916.2.62
.1.3.6.1.4.1.1916.2.66
.1.3.6.1.4.1.1916.2.56
.1.3.6.1.4.1.1916.2.54
.1.3.6.1.4.1.1916.2.71
.1.3.6.1.4.1.1916.2.22
.1.3.6.1.4.1.1916.2.76
.1.3.6.1.4.1.1916.2.80
.1.3.6.1.4.1.1916.2.58
.1.3.6.1.4.1.1916.2.93
.1.3.6.1.4.1.1916.2.77
.1.3.6.1.4.1.1916.2.82
.1.3.6.1.4.1.1916.2.129
.1.3.6.1.4.1.1916.2.72
.1.3.6.1.4.1.1916.2.155
.1.3.6.1.4.1.1916.2.154
.1.3.6.1.4.1.1916.2.168
.1.3.6.1.4.1.1916.2.198
.1.3.6.1.4.1.1916.2.220
.1.3.6.1.4.1.1916.2.223
306104 HEALTH = Extreme-Alpine
CPU/Memory = Extreme:DeviceID

.1.3.6.1.4.1.1916.2.227
.1.3.6.1.4.1.1916.2.11
.1.3.6.1.4.1.1916.2.16
.1.3.6.1.4.1.1916.2.28
.1.3.6.1.4.1.1916.2.20
.1.3.6.1.4.1.1916.2.62
.1.3.6.1.4.1.1916.2.66
.1.3.6.1.4.1.1916.2.56
.1.3.6.1.4.1.1916.2.54
.1.3.6.1.4.1.1916.2.71
.1.3.6.1.4.1.1916.2.22
.1.3.6.1.4.1.1916.2.76
.1.3.6.1.4.1.1916.2.80
.1.3.6.1.4.1.1916.2.58
.1.3.6.1.4.1.1916.2.93
.1.3.6.1.4.1.1916.2.77
.1.3.6.1.4.1.1916.2.82
.1.3.6.1.4.1.1916.2.129
.1.3.6.1.4.1.1916.2.72
.1.3.6.1.4.1.1916.2.155
.1.3.6.1.4.1.1916.2.154
.1.3.6.1.4.1.1916.2.168
.1.3.6.1.4.1.1916.2.198
.1.3.6.1.4.1.1916.2.220
.1.3.6.1.4.1.1916.2.223

 

Supported Operating Systems and Version Details

Product Supported Operating System Version Number Details
IP Red Hat Enterprise Linux 6.8, 6.9 and 6.10– 64 bit
Red Hat Enterprise Linux 7.4, 7.5 and 7.6– 64 bit
VMware® ESX Version 5.x,6.x

From <BASEDIR>/smarts/bin/, type the following command:
./sm_server --version (Linux)
The following output is displayed:
sm_server:
linux_rhAS50-x86-64/301032700
IP_NETWORK_SUITE: V10.1.2.9(193899), 15-Apr-2021 16:28:13 Copyright 2021, VMware Inc - Build 59
Foundation V10.1.2.1(188976), 22-Sep-2020 12:37:12 Copyright 2020, VMware Inc - Build 1

Installation

A patch installs files to the <BASEDIR>/smarts/local directory of the product. The Installation software performs the following actions:

  • Backs up all files that are being replaced or merged.
  • Merges changes from your current, user-modifiable configuration files into the new versions of the files from the patch.
  • Displays complete summary at the end of patch installation.
  • Displays the location of a log file that lists the results of merging the files.

Note: If the original product was installed on one computer and then was copied to another computer, the patch cannot be applied to the copied installation. You must apply the patch to the computer with the original installation, and then the results can be copied to another computer.

Patch Installation File

You can install the patch on the host where the IP product is running. 

Binary detail for IP-10.1.2.9 release is:

IP:setup-IP-linux-10_1_2_9-20210415-64BIT.bin

Note: You can download the binary from https://support.vmware.com.

Installation directory

In this document, the term <BASEDIR> represents the location where Smarts software is installed.

For UNIX, the default location is:/opt/InCharge/<productsuite>.

The <productsuite>; represents the Smarts product suite to which the product belongs.

Optionally, you can specify the root of <BASEDIR> to be something other than /opt/InCharge (on UNIX) but you cannot change the name of the <productsuite> that is part of the <BASEDIR>.

Install a new patch over an older patch

Patches are cumulative each successive patch includes all of the fixes from any previous patches. As a result, a newer patch can be installed on top of an older patch. The patch number, which increments itself for each successive patch, indicates the version. A patch with higher version number can be installed over a patch with a lower version number.

The Installation software checks the version of the installed product and the version to be installed at the beginning of its process. It will not allow an older version to be installed on top of a newer version.

Apply patch using CLI mode

CLI mode provides a text-based method for invoking the Installation software. This mode is intended for UNIX platforms with non-graphic (text-only) consoles. The CLI mode installation follows the same process as the wizard mode but displays text on the terminal screen and requires user responses on the keyboard.

Run CLI mode

  1. Change directory to the directory where you typically store patches, for example, ./opt.
  2. Run following setup command and then press Enter. Replace xx with the relevant product name, for example: ESM. For exact name, see the Patch Installation File section:

           Setup command syntax for CLI mode (Linux): ./setup-IP-linux-10_1_2_9-20210415-64BIT.bin.

           A welcome message with information about the installation appears.

Note: Stop all VMware Smart Assurance services and processes that use programs or libraries from the product being upgraded or installed before performing the installation.

User selections and navigation in CLI mode

  • During the patch installation process, at the end of each screen of text, you are prompted with a set of options. For example:

           type 'back' - to go to the previous step

           type 'quit' - to cancel anytime

  • Select a choice by typing the text and press Enter.
  • Accept the default choice, and press Enter.
  • Other screens have different choices. For example when the license agreement is displayed, the following prompt appears:

           Press any key to continue to read license agreement or press '0' to advance to end.

  • At the end of the license agreement, the installation process displays the first of several menus.

           Choose from the following (Y/N) options:

           Y - to accept the terms of the license agreement.

           N - not to accept the terms of the license agreement.

  • Type the desired selection and press Enter. In the case of the license agreement, you must accept the agreement by typing Y and pressing Enter.

           The screen is displayed with an Get User Input. Choose the base location by entering the correct number.

            For example, type 1 to choose the default location for installation and press Enter.

      Get User Input

      1) /opt/InCharge 10.1.2.*

           For example, if the product name is ESM and default install folder is /opt/InCharge, the installer displays:

           VMware Smart Assurance Server Manager Suite will be installed in the following location:

           Product Name: ESM

           Install Folder: /opt/InCharge

  • Press Enter to continue the installation.
  • Press Enter to exit the installer.

           When the patch installation is complete, reconcile the configuration files as described in Reconcile user-modifiable files.

Apply patch using Unattended (Silent) mode

Unattended mode installs the patch without user input or a response file. When invoking the install program, specify the location of the product suite to be patched.

In order to invoke an unattended installation of the patch, type the appropriate setup command from below table and then press Enter. Replace “xx” with the relevant product name, for example, ESM. For exact name, see the Patch Installation File section:

Setup command syntax for unattended mode (Linux):setup-IP-linux-10_1_2_9-20210415-64BIT.bin -i silent -DrpProduct.installLocation=/opt/InCharge.

Where xx represents the product name.

Note: You must provide the correct base installation location. For example: base10.1 build is installed inside /opt/InCharge.

Once the installation is completed inside /tmp ** log file will be created with the summary. When the patch installation is complete, reconcile the configuration files as described in Reconcile user-modifiable files.

Log Files

Patch report and log file locations, lists the files that the Installation software creates during the install process.

Patch report and log file locations:

Name Path File Name
Install log <BASEDIR>/smarts/setup/logs Install.<product>_SUITE. <patchversion>.log
Merged files log <BASEDIR>/smarts/setup/logs merge-summary-<patch version>.log

Install log

The installer creates an Install log file listing all actions performed by the installation. You need not read this file unless you suspect an installation failure.

If the installation process fails, the log files are located in a temporary directory, for example /tmp or C:\temp. A non-zero status indicates a failure.

Merged files Log

This log lists the files in the BASEDIR/smarts/local directory structure that were merged. For each merged file, the log lists the location and name of the file. If any file cannot be merged due to conflicts, this is also noted. In addition, the log lists the name and location for unmerged versions of all user-modifiable files that are included in the patch.

For example, in case of ESM: 

  • Summary of merge operation can be found at location: /opt/InCharge/ESM/smarts/setup/logs/merge-summary-10.x.x.x.log
  • For more detail logs: /opt/InCharge/ESM/smarts/setup/logs/detail-merge-10.1.0.5.log

If there were any conflict during the merge operation, the old local backup file will be saved as "File_Name.bkp" in its same location. These conflict files needs to be merged manually before starting the server.

Review the results of the reconciliation process

The results of the reconciliation analysis performed during the installation and all actions taken are included in the merged files log located in <BASEDIR>/smarts/setup/logs. The name of the log file is: install.merge.<patch version>.log

Reconcile User-modifiable Files

The Installation software is designed to preserve your changes to user-modifiable files when installing new versions of these files. Existing changes to user-modifiable files are always automatically merged. All files are merged by default.

The Installation software also creates a backup of all the versions of the user-modifiable files to ensure that you will not lose any configuration data.

Review the results of the reconciliation process

The results of the reconciliation analysis performed during the installation and all actions taken are included in the merged files log located in <BASEDIR>/smarts/setup/logs. The name of the log file is: install.merge.<patch version>.log.

Determine which files require action by reviewing the merged files log generated by the install process:

  1. Using any editor, open and review the log:

    <BASEDIR>/smarts/setup/log/Install.Merge.10.x.x.x.log.

  2. Review the log:

    1. Resolve conflicts in files manually. See Resolve the issue in conflict files.
    2. During the installation, the entries that indicate file merges without conflicts that resulted in automerge files.

Resolve issues in conflict files

If a conflict occurs for any file in the same local directory of the file location, you can find the below files:

  • One is the conflict file. For example, <filename>
  • Another file is .bak.001. For example, <filename>.bak.001

Review the conflict files and resolve issues using the following procedure:

  1. Open the user-modifiable file where the conflict occurs using sm_edit.

    For example, the conflict file for esm.param.conf is named esm-param.conf.

  2. Review and resolve the conflict manually.
  3. Save and close the file.

To use patch introduced file (for example, esm-param.conf):

  1. Rename the original conflict file. (For example, if the conflict file name is esm-param.conf, rename the file esm-param.conf to esm-param.conf_old).
  2. Rename the <filename>.bak.001 file to the original file name <filename> by removing .bak.001 extension.

    For example, if the patch file name is esm-param.conf.bak.001, rename it to the esm-param.conf to use the original file.

  3. Save and close the file.

Note: All the user-modifiable unmerged files before patch installation, are backed up in "<BASEDIR>/<Product Name>/smarts" location. By default, the backup directory is hidden.

Uninstallation

Uninstalling a patch removes all previously applied patches and returns the software to the baseline product version.

Note:Root privileges are required to uninstall a patch. Use either the uninstaller program to uninstall a patch. Failure to use one of these methods can result in an unstable system and/or inconsistent product directories.

Before uninstallation

You must complete the following task before uninstalling the patch:

  • Stop all VMware Smart Assurance services and processes that use programs or libraries from the product.

Roll back to a previous patch

If you want to revert to a previous patch, you must:

  • Uninstall the currently installed patch to return to the baseline version.

  • Reinstall the previous patch.

For example, to revert from Patch 2 to Patch 1, uninstall Patch 2, and then reinstall Patch 1.

Uninstall Patch Using the Uninstaller Program

Use the uninstaller program to uninstall a patch:

Note: Do not to use the uninstaller program in the _uninst directory because it will remove the entire product.

  1. Change the directory or use the file navigator to find the _rpuninst directory.

    For Example: /opt/InCharge/<Product>/_rpuninst on UNIX systems.

  2. Invoke the uninstaller program.

    For example: ./uninstaller on UNIX systems.

  3. Press Enter to continue the uninstallation.

Uninstall Patch Using Unattended (Silent) Mode

Use the uninstaller program to uninstall a patch.

Note: Do not to use the uninstaller program in the _uninst directory because it will remove the entire product.

  1. Change the directory or use the file navigator to find the _rpuninst directory.

    For Example: /opt/InCharge/<Product>/_rpuninst on UNIX systems.

  2. Execute the uninstaller program.

    ./uninstaller -i silent on UNIX systems.

  3. Press Enter to continue the uninstallation.
check-circle-line exclamation-circle-line close-line
Scroll to top icon