The release notes cover the following topics
- What's New in this Release
- Supported Operating Systems and Version Details
- Installation
- Log Files
- Reconcile User-modifiable Files
- Uninstallation
About VMware IP Certification Patch
A patch provides one or more fixes to a VMware Smart Assurance product. A patch can only be applied to the specific major or minor release and Service Pack of the particular product for which it is intended, this is called the product’s baseline.
What's New in this Release
The VMware Smart Assurance 10.1.2.9 introduces the following enhancement:
- Following System OIDs are certified in this release:
Certified Devices
This section describes the devices certified and the certification impact in this patch.
Simple Certification
Simple certification involves only in configure file changes and the qualification of new OID in the currently existing driver. This section describes the devices certified in this patch.
Simple devices certified in the patch:
| SR/TASC Number | Vendor Name | Description |
| SASS-15309/306031 | F5NETWORKS | Certified the following components for the BIG-IP-I4600 LOADBALANCER (System OID:.1.3.6.1.4.1.3375.2.1.3.4.106): AggregatePort, Disk, Fan, FileSystem, Interface, Memory, Port, PowerSupply, Processor, TemperatureSensor, and Vlan. |
| SASS-15300/305962 | CISCO | Certified the following components for the ciscoC11138P ROUTER (System OID:.1.3.6.1.4.1.9.1.2534): Card, Interface, Memory, Port, PowerSupply, Processor,TemperatureSensor, and Vlan. |
| SASS-15299/305931 | CISCO | Certified the following components for the ciscoFpr4115SM24 FIREWALL (System OID:.1.3.6.1.4.1.9.1.2774): Interface, Memory, and Processor. |
| SASS-15314/305988 | FORTINET | Certified the following components for the fgtVM64AWSONDEMAND FIREWALL (System OID:.1.3.6.1.4.1.12356.101.1.46): Disk, Interface, Memory, and Processor. |
| SASS-15317/306001 | FORTINET | Certified the following components for the FortiGate 600E FIREWALL (System OID:.1.3.6.1.4.1.12356.101.1.6005): Disk, Fan, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor. |
| SASS-15322/306012 | CISCO | Certified the following components for the ciscoIE32008P2S SWITCH (System OID:.1.3.6.1.4.1.9.1.2684): Card, Fan, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and Vlan. |
| SASS-15307/305968 | CISCO | Certified the following components for the ciscoC11188P ROUTER (System OID:.1.3.6.1.4.1.9.1.2552): Interface, Memory, Port, PowerSupply, Processor, TemperatureSensor, and Vlan. |
| SASS-15344/306077 | ARISTA | Certified the following components for the DCS-7808-CH SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7808.2749): Interface, Memory, Port, Processor, and Vlan. |
| SASS-15348/306078 | ARISTA | Certified the following components for the DCS-7280PR3-24 SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7280.3232.3.24): Interface, Memory, Port, Processor, and Vlan. |
| SASS-15350/306036 | INFOBLOX | Certified the following components for the ND-1405 HOST (System OID:.1.3.6.1.4.1.7779.1.1542): Disk, Fan, FileSystem, Interface, Memory, MemoryGroup, PowerSupply, Processor, ProcessorGroup, and TemperatureSensor. |
| SASS-15333/306013 | CISCO | Certified the following components for the AP1040 WIRELESSACCESSPOINT (System OID:.1.3.6.1.4.1.9.1.1269): Interface, Memory, and Processor. |
| SASS-15349/306087 | MENLOSECURITY | Certified the following components for the Menlo Security Isolation Platform HOST (System OID:.1.3.6.1.4.1.44734): Disk, Interface, Memory, and MemoryGroup. |
| SASS-15381/306079 | ARISTA | Certified the following components for the DCS-7280CR3-32P4 SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7280.2727.3.32.2129.4): Interface, Memory, Port, Processor, and Vlan. |
| SASS-15380/306060 | CISCO | Certified the following components for the ciscoCDB8U SWITCH (System OID:.1.3.6.1.4.1.9.1.2398): Fan, Interface, Memory, Port, PowerSupply, Processor, TemperatureSensor, and Vlan. |
| SASS-15373/306048 | CISCO | Certified the following components for the cevChassisN9KC9332C SWITCH (System OID:.1.3.6.1.4.1.9.12.3.1.3.2076): Card, Fan, Memory, Port, PowerSupply, Processor, and TemperatureSensor. |
| SASS-15382/306080 | ARISTA | Certified the following components for the DCS-7050TX3-48C8 SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7050.1958.3.48.2878.8): Interface, Memory, Port, Processor, and Vlan. |
| SASS-15409/306082 | CHECKPOINT | Certified the following components for the Maestro1-sg1 FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.94): Fan, FileSystem, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor. |
| SASS-15410/306083 | CHECKPOINT | Certified the following components for the 6700 FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.95): Fan, FileSystem, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor. |
| SASS-15411/306084 | CHECKPOINT | Certified the following components for the 7000 FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.96): Disk, Fan, FileSystem, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor. |
| SASS-15363/306002 | INFOBLOX | Certified the following components for the IB-810 HOST (System OID:.1.3.6.1.4.1.7779.1.1401): Disk, Fan, FileSystem, Interface, Memory, MemoryGroup, PowerSupply, Processor, ProcessorGroup, and TemperatureSensor. |
| SASS-15400/305976 | CISCO | Certified the following components for the UCSC-C480-M5 HOST (System OID:.1.3.6.1.4.1.9.1.2424): Card, Disk, Fan, Interface, Memory, MemoryGroup, PowerSupply, TemperatureSensor, and VoltageSensor. |
| SASS-15358/305924 | A10NETWORKS | Certified the following components for the TH3230 LOADBALANCER (System OID:.1.3.6.1.4.1.22610.1.3.42): Disk, Fan, Interface, Memory, PowerSupply, Processor, TemperatureSensor, VoltageSensor, and Vlan. |
| SASS-15347/306039 | CISCO | Certified the following components for the cevChassisDSC9148TK9 FIBRECHANNELSWITCH(System OID:.1.3.6.1.4.1.9.12.3.1.3.2054): Card, Fan, FibreChannelSitchPort, Interface, Memory, PowerSupply, Processor, and TemperatureSensor. |
| SASS-15421/306085 | CHECKPOINT | Certified the following components for the 16200 FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.97): Disk, Fan, FileSystem, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor. |
| SASS-15422/306086 | CHECKPOINT | Certified the following components for the 28000 FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.98): Disk, Fan, FileSystem, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor. |
| SASS-15423/306092 | ARISTA | Certified the following components for the DCS-7804-CH SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7804.2749): Interface, Memory, Port, Processor, and Vlan. |
| SASS-15424/306101 | CISCO | Certified the following components for the SG250-10P SWITCH (System OID:.1.3.6.1.4.1.9.6.1.97.10.5): Interface, Port, Processor, TemperatureSensor, and Vlan. |
| SASS-15361/305969 | RAD | Certified the following components for the ETX-2I-10G SWITCH (System OID:.1.3.6.1.4.1.164.6.1.6.51): Interface, Port, PowerSupply, and Processor. |
| SASS-15356/306103 | CISCO | Certified the following components for the SG250-08 SWITCH (System OID:.1.3.6.1.4.1.9.6.1.97.8.3): Interface, Port, Processor, and Vlan. |
| SASS-15313/305971 | CISCO | Certified the following components for the C9800-CL-K9 WIRELESSCONTROLLER (System OID:.1.3.6.1.4.1.9.1.2391): Card, Interface, Memory, Port, Processor, and Vlan. |
| SASS-15388/306089 | CISCO | Certified the following components for the AP3700 WIRELESSACCESSPOINT (System OID:.1.3.6.1.4.1.9.1.1873): Interface, Memory, Processor, and Vlan. |
| SASS-15364/306033 | JUNIPER | Certified the following components for the SRX4600 FIREWALL (System OID:.1.3.6.1.4.1.2636.1.1.1.2.140): Card, Disk, Fan, Interface, Memory, PowerSupply, Processor, TemperatureSensor, and VoltageSensor. |
| SASS-15308/306109 | RADWARE | Certified the following components for the Alteon 6024S SWITCH (System OID:.1.3.6.1.4.1.1872.1.13.3.12.1): Fan, Memory, Port, Processor, TemperatureSensor, and Vlan. |
| SASS-15293/306068 | JUNIPER | Certified the following components for the NFX250S2SCJcp ROUTER (System OID:.1.3.6.1.4.1.2636.1.1.1.4.138.5.3): AggregatePort, Interface, Port, and Vlan. |
| SASS-15367/306069 | NOKIA | Certified the following components for the 7750 SR ROUTER (System OID:.1.3.6.1.4.1.6527.1.3.13): Card, CardRedendancyGroup, Fan, Memory, Port, PowerSupply, Processor, and TemperatureSensor. |
| SASS-15336/306030 | DELL | Certified the following components for the PowerSwitch MX9116N SWITCH (System OID:.1.3.6.1.4.1.674.11000.5000.100.2.1.1): Card, Disk, FileSystem, Interface, Memory, Port, Processor, TemperatureSensor, and Vlan. |
| SASS-15355/306106 | RARITAN | Certified the following components for the DSX2-32-3 HOST (System OID:.1.3.6.1.4.1.13742.3.2.10): Interface. |
Complex Certifications
Complex certifications involve re-certification, new device certifications, and involve new driver creations or multiple file changes. This section describes the devices certified in this patch.
Complex devices certified in the patch:
| SR /TASC Number | Vendor Name | Description |
|---|---|---|
| SASS-15325/306105 | EXTREME | Certified the following components for the Summit X440G2-12p-10G4 SWITCH (System OID:.1.3.6.1.4.1.1916.2.227): Card, Fan, Interface, Memory, Port, PowerSupply, Processor, and TemperatureSensor. |
| SASS-15326/306104 | EXTREME | Certified the following components for the Summit X440G2-24p-10G4 SWITCH (System OID:.1.3.6.1.4.1.1916.2.223): Card, Fan, Interface, Memory, Port, PowerSupply, Processor, and TemperatureSensor. |
| SASS-15370/306041 | CISCO | Certified the following components for the ciscoVG4006FXS6FXO MEDIAGATEWAY (System OID:.1.3.6.1.4.1.9.1.2769): Card, Fan, Interface, Memory, Port, PowerSupply, Processor, TemperatureSensor, VoltageSensor, and Vlan. |
Certification impact
This section lists the impacted drivers and SysOIDs as a result of certification changes.
| TASC Number | Impacted Drivers | Impacted SysOIDs |
| 306041 | HEALTH = Cisco-Router-ASR-EntSensor | .1.3.6.1.4.1.9.1.923 |
| 306105 | HEALTH = Extreme-Alpine CPU/Memory = Extreme:DeviceID |
.1.3.6.1.4.1.1916.2.227 |
| 306104 | HEALTH = Extreme-Alpine CPU/Memory = Extreme:DeviceID |
.1.3.6.1.4.1.1916.2.227 |
Supported Operating Systems and Version Details
| Product | Supported Operating System | Version Number Details |
|---|---|---|
| IP | Red Hat Enterprise Linux 6.8, 6.9 and 6.10– 64 bit Red Hat Enterprise Linux 7.4, 7.5 and 7.6– 64 bit VMware® ESX Version 5.x,6.x |
From <BASEDIR>/smarts/bin/, type the following command: |
Installation
A patch installs files to the <BASEDIR>/smarts/local directory of the product. The Installation software performs the following actions:
- Backs up all files that are being replaced or merged.
- Merges changes from your current, user-modifiable configuration files into the new versions of the files from the patch.
- Displays complete summary at the end of patch installation.
- Displays the location of a log file that lists the results of merging the files.
Note: If the original product was installed on one computer and then was copied to another computer, the patch cannot be applied to the copied installation. You must apply the patch to the computer with the original installation, and then the results can be copied to another computer.
Patch Installation File
You can install the patch on the host where the IP product is running.
Binary detail for IP-10.1.2.9 release is:
IP:setup-IP-linux-10_1_2_9-20210415-64BIT.bin
Note: You can download the binary from https://support.vmware.com.
Installation directory
In this document, the term <BASEDIR> represents the location where Smarts software is installed.
For UNIX, the default location is:/opt/InCharge/<productsuite>.
The <productsuite>; represents the Smarts product suite to which the product belongs.
Optionally, you can specify the root of <BASEDIR> to be something other than /opt/InCharge (on UNIX) but you cannot change the name of the <productsuite> that is part of the <BASEDIR>.
Install a new patch over an older patch
Patches are cumulative each successive patch includes all of the fixes from any previous patches. As a result, a newer patch can be installed on top of an older patch. The patch number, which increments itself for each successive patch, indicates the version. A patch with higher version number can be installed over a patch with a lower version number.
The Installation software checks the version of the installed product and the version to be installed at the beginning of its process. It will not allow an older version to be installed on top of a newer version.
Apply patch using CLI mode
CLI mode provides a text-based method for invoking the Installation software. This mode is intended for UNIX platforms with non-graphic (text-only) consoles. The CLI mode installation follows the same process as the wizard mode but displays text on the terminal screen and requires user responses on the keyboard.
Run CLI mode
- Change directory to the directory where you typically store patches, for example,
./opt. - Run following setup command and then press Enter. Replace
xxwith the relevant product name, for example: ESM. For exact name, see the Patch Installation File section:
Setup command syntax for CLI mode (Linux): ./setup-IP-linux-10_1_2_9-20210415-64BIT.bin.
A welcome message with information about the installation appears.
Note: Stop all VMware Smart Assurance services and processes that use programs or libraries from the product being upgraded or installed before performing the installation.
User selections and navigation in CLI mode
- During the patch installation process, at the end of each screen of text, you are prompted with a set of options. For example:
type 'back' - to go to the previous step
type 'quit' - to cancel anytime
- Select a choice by typing the text and press Enter.
- Accept the default choice, and press Enter.
- Other screens have different choices. For example when the license agreement is displayed, the following prompt appears:
Press any key to continue to read license agreement or press '0' to advance to end.
- At the end of the license agreement, the installation process displays the first of several menus.
Choose from the following (Y/N) options:
Y - to accept the terms of the license agreement.
N - not to accept the terms of the license agreement.
- Type the desired selection and press Enter. In the case of the license agreement, you must accept the agreement by typing Y and pressing Enter.
The screen is displayed with an Get User Input. Choose the base location by entering the correct number.
For example, type 1 to choose the default location for installation and press Enter.
Get User Input
1) /opt/InCharge 10.1.2.*
For example, if the product name is ESM and default install folder is /opt/InCharge, the installer displays:
VMware Smart Assurance Server Manager Suite will be installed in the following location:
Product Name: ESM
Install Folder: /opt/InCharge
- Press Enter to continue the installation.
- Press Enter to exit the installer.
When the patch installation is complete, reconcile the configuration files as described in Reconcile user-modifiable files.
Apply patch using Unattended (Silent) mode
Unattended mode installs the patch without user input or a response file. When invoking the install program, specify the location of the product suite to be patched.
In order to invoke an unattended installation of the patch, type the appropriate setup command from below table and then press Enter. Replace “xx” with the relevant product name, for example, ESM. For exact name, see the Patch Installation File section:
Setup command syntax for unattended mode (Linux):setup-IP-linux-10_1_2_9-20210415-64BIT.bin -i silent -DrpProduct.installLocation=/opt/InCharge.
Where xx represents the product name.
Note: You must provide the correct base installation location. For example: base10.1 build is installed inside /opt/InCharge.
Once the installation is completed inside /tmp ** log file will be created with the summary. When the patch installation is complete, reconcile the configuration files as described in Reconcile user-modifiable files.
Log Files
Patch report and log file locations, lists the files that the Installation software creates during the install process.
Patch report and log file locations:
| Name | Path | File Name |
| Install log | <BASEDIR>/smarts/setup/logs |
Install.<product>_SUITE. <patchversion>.log |
| Merged files log | <BASEDIR>/smarts/setup/logs |
merge-summary-<patch version>.log |
Install log
The installer creates an Install log file listing all actions performed by the installation. You need not read this file unless you suspect an installation failure.
If the installation process fails, the log files are located in a temporary directory, for example /tmp or C:\temp. A non-zero status indicates a failure.
Merged files Log
This log lists the files in the BASEDIR/smarts/local directory structure that were merged. For each merged file, the log lists the location and name of the file. If any file cannot be merged due to conflicts, this is also noted. In addition, the log lists the name and location for unmerged versions of all user-modifiable files that are included in the patch.
For example, in case of ESM:
- Summary of merge operation can be found at location:
/opt/InCharge/ESM/smarts/setup/logs/merge-summary-10.x.x.x.log - For more detail logs:
/opt/InCharge/ESM/smarts/setup/logs/detail-merge-10.1.0.5.log
If there were any conflict during the merge operation, the old local backup file will be saved as "File_Name.bkp" in its same location. These conflict files needs to be merged manually before starting the server.
Review the results of the reconciliation process
The results of the reconciliation analysis performed during the installation and all actions taken are included in the merged files log located in <BASEDIR>/smarts/setup/logs. The name of the log file is: install.merge.<patch version>.log
Reconcile User-modifiable Files
The Installation software is designed to preserve your changes to user-modifiable files when installing new versions of these files. Existing changes to user-modifiable files are always automatically merged. All files are merged by default.
The Installation software also creates a backup of all the versions of the user-modifiable files to ensure that you will not lose any configuration data.
Review the results of the reconciliation process
The results of the reconciliation analysis performed during the installation and all actions taken are included in the merged files log located in <BASEDIR>/smarts/setup/logs. The name of the log file is: install.merge.<patch version>.log.
Determine which files require action by reviewing the merged files log generated by the install process:
- Using any editor, open and review the log:
<
BASEDIR>/smarts/setup/log/Install.Merge.10.x.x.x.log. -
Review the log:
- Resolve conflicts in files manually. See Resolve the issue in conflict files.
- During the installation, the entries that indicate file merges without conflicts that resulted in automerge files.
Resolve issues in conflict files
If a conflict occurs for any file in the same local directory of the file location, you can find the below files:
- One is the conflict file. For example, <filename>
- Another file is .bak.001. For example, <filename>.bak.001
Review the conflict files and resolve issues using the following procedure:
- Open the user-modifiable file where the conflict occurs using sm_edit.
For example, the conflict file for esm.param.conf is named esm-param.conf.
- Review and resolve the conflict manually.
- Save and close the file.
To use patch introduced file (for example, esm-param.conf):
- Rename the original conflict file. (For example, if the conflict file name is esm-param.conf, rename the file esm-param.conf to esm-param.conf_old).
- Rename the <filename>.bak.001 file to the original file name <filename> by removing .bak.001 extension.
For example, if the patch file name is esm-param.conf.bak.001, rename it to the esm-param.conf to use the original file.
- Save and close the file.
Note: All the user-modifiable unmerged files before patch installation, are backed up in "<BASEDIR>/<Product Name>/smarts" location. By default, the backup directory is hidden.
Uninstallation
Uninstalling a patch removes all previously applied patches and returns the software to the baseline product version.
Note:Root privileges are required to uninstall a patch. Use either the uninstaller program to uninstall a patch. Failure to use one of these methods can result in an unstable system and/or inconsistent product directories.
Before uninstallation
You must complete the following task before uninstalling the patch:
- Stop all VMware Smart Assurance services and processes that use programs or libraries from the product.
Roll back to a previous patch
If you want to revert to a previous patch, you must:
-
Uninstall the currently installed patch to return to the baseline version.
-
Reinstall the previous patch.
For example, to revert from Patch 2 to Patch 1, uninstall Patch 2, and then reinstall Patch 1.
Uninstall Patch Using the Uninstaller Program
Use the uninstaller program to uninstall a patch:
Note: Do not to use the uninstaller program in the _uninst directory because it will remove the entire product.
- Change the directory or use the file navigator to find the _rpuninst directory.
For Example:
/opt/InCharge/<Product>/_rpuninston UNIX systems. - Invoke the uninstaller program.
For example:
./uninstalleron UNIX systems. - Press Enter to continue the uninstallation.
Uninstall Patch Using Unattended (Silent) Mode
Use the uninstaller program to uninstall a patch.
Note: Do not to use the uninstaller program in the _uninst directory because it will remove the entire product.
- Change the directory or use the file navigator to find the
_rpuninstdirectory.For Example:
/opt/InCharge/<Product>/_rpuninston UNIX systems. - Execute the uninstaller program.
./uninstaller -i silenton UNIX systems. - Press Enter to continue the uninstallation.
