The release notes cover the following topics

About VMware Smart Assurance GA Patch

A patch provides one or more fixes to a VMware Smart Assurance product. A patch can only be applied to the specific major or minor release and Service Pack of the particular product for which it is intended, this is called the product’s baseline.

What's New in this Release

Following System OIDs are certified in this release: 

Certified Devices

This section describes the devices certified and the certification impact in this patch.

Simple Certification

Simple certification involves only in configure file changes and the qualification of new OID in the currently existing driver. This section describes the devices certified in this patch.

Simple devices certified in the patch:

SR/TASC Number Vendor Name                                                                                   Description
SASS-16178/306590 ARISTA Certified the following components for the DCS-7060SX2-48YC6 SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7060.3741.2.48.1654.6):
Interface,Memory,Port,Processor,and Vlan.
SASS-16176/306572 ARISTA Certified the following components for the DCS-7010TX-48 SWITCH (System OID:.1.3.6.1.4.1.30065.1.3011.7010.1958.48):
Interface,Memory,Port,Processor,and Vlan.
SASS-16170/306611 CISCO Certified the following components for the ciscoC887VaK9 ROUTER (System OID:.1.3.6.1.4.1.9.1.1855):
Card,Interface,Memory,Processor,TemperatureSensor,and Vlan.
SASS-16183/306603 FORTINET Certified the following components for the Fortinet FMG-200G FIREWALL (System OID:.1.3.6.1.4.1.12356.103.1.2007):
Disk,Interface,Memory,and Processor.
SASS-16198/306599 CISCO Certified the following components for the ciscoC83001N1S6T ROUTER (System OID:.1.3.6.1.4.1.9.1.2989):
Card,Fan,Interface,Memory,Port,PowerSupply,Processor,TemperatureSensor,VoltageSensor,and Vlan.
SASS-16204/306571 PAN Certified the following components for the PA-5450 FIREWALL (System OID:.1.3.6.1.4.1.25461.2.3.57):
Disk,Interface,Memory,and Processor.
SASS-16202/306573 CHECKPOINT Certified the following components for the Smart-1-600-S FIREWALL (System OID:.1.3.6.1.4.1.2620.1.6.123.1.103):
Fan,FileSystem,Interface,Memory,Processor,TemperatureSensor,and VoltageSensor.
SASS-16220/306598 PAN Certified the following components for the PA-3220 FIREWALL (System OID:.1.3.6.1.4.1.25461.2.3.43):
Disk,Interface,Memory,and Processor.
SASS-16214/306602 FORTINET Certified the following components for the Fortinet FG-1101E FIREWALL (System OID:.1.3.6.1.4.1.12356.101.1.10007):
Disk,Fan,Interface,Memory,Processor,PowerSupply,TemperatureSensor,and VoltageSensor.
SASS-16218/306600 HP Certified the following components for the hpeFF59402Slot SWITCH (System OID:.1.3.6.1.4.1.25506.11.1.269):
AggregatePort,Fan,Interface,Memory,Port,Processor,PowerSupply,TemperatureSensor,VoltageSensor,and Vlan.
SASS-16225/306595 HP Certified the following components for the hpSwitchJ9627A SWITCH (System OID:.1.3.6.1.4.1.11.2.3.7.11.133):
Fan,Interface,Memory,Port,Processor,PowerSupply,TemperatureSensor,VoltageSensor,and Vlan.
SASS-16239/306356 CISCO Certified the following components for the ciscoC9410R SWITCH (System OID:.1.3.6.1.4.1.9.1.2501):
Card,CardRedendancyGroup,Fan,Interface,Memory,Port,Processor,PowerSupply,TemperatureSensor,VoltageSensor,and Vlan.
SASS-16230/306594  CISCO Certified the following components for the Catalyst 8500L-8S4X SWITCH (System OID:.1.3.6.1.4.1.9.1.3069):
Card,Fan,Interface,Memory,Port,Processor,PowerSupply,TemperatureSensor,and VoltageSensor.
SASS-16232/306593 CISCO Certified the following components for the Catalyst 8200-1N-4T SWITCH (System OID:.1.3.6.1.4.1.9.1.2961):
Card,Fan,Interface,Memory,Port,Processor,PowerSupply,TemperatureSensor,VoltageSensor,and Vlan.
SASS-16210/306565 FORTINET Certified the following components for the FG-2601F FIREWALL (System OID:.1.3.6.1.4.1.12356.101.1.26001):
Disk,Fan,Interface,Memory,Processor,PowerSupply,TemperatureSensor,and VoltageSensor.
SASS-16222/306567 OPENGEAR Certified the following components for the OM2248-L TERMINALSERVER (System OID:.1.3.6.1.4.1.25049.1.101):
Fan,FileSystem,Interface,Memory,Processor,TemperatureSensor,and VoltageSensor.
SASS-16252/306569 CISCO Certified the following components for the N9K-C93180YC-FX-24 SWITCH (System OID:.1.3.6.1.4.1.9.12.3.1.3.2353):
AggregatePort,Card,Fan,Interface,Memory,Port,Processor,PowerSupply,TemperatureSensor,VoltageSensor,and Vlan.
SASS-16250/306570 CORVILPROBE Certified the following components for the CNE-7750 HOST (System OID:.1.3.6.1.4.1.11829.2.3.30):
Disk,Interface,Memory,MemoryGroup,Processor,and ProcessorGroup.
SASS-16268/306623 ARISTA Certified the following components for the aristaCCS720XP48ZC2 SWITCH (System OID:.1.3.6.1.4.1.30065.1.2546.720.858.48.207.2):
Interface,Memory,Port,Processor,and Vlan.
SASS-16258/306589 ALCATEL Certified the following components for the Alcatel-Lucent Advanced Communications Server HOST (System OID:.1.3.6.1.4.1.19631.1.2.1):
FileSystem,Interface,Memory,MemoryGroup,Processor,ProcessorGroup,and VoltageSensor.
SASS-16266/306637 CISCO Certified the following components for the cat4xxxVirtualSwitch VIRTUALSWITCHSYSTEM (System OID:.1.3.6.1.4.1.9.1.1732):
AggregatePort,Card,Fan,Interface,Memory,Port,Processor,PowerSupply,TemperatureSensor,Vlan,and VSSChassis.
SASS-16287/306643 CISCO Certified the following components for the ciscoIE32008T2S SWITCH (System OID:.1.3.6.1.4.1.9.1.2683):
Card,Fan,Interface,Memory,Port,Processor,PowerSupply,TemperatureSensor,and Vlan.

Complex Certifications

Complex certifications involve re-certification, new device certifications, and involve new driver creations or multiple file changes. This section describes the devices certified in this patch.

Complex devices certified in the patch:

SR /TASC Number Vendor Name Description
SASS-16180/306604 HUAWEI Certified the following components for the S5732-H48UM2CC SWITCH (System OID:.1.3.6.1.4.1.2011.2.23.776):
AggregatePort,Card,Fan,Interface,Port,Memory,PowerSupply,Processor,TemperatureSensor,and Vlan.
SASS-16206/306596 HP Certified the following components for the hpSwitchJ9625A SWITCH (System OID:.1.3.6.1.4.1.11.2.3.7.11.131):
AggregatePort,Fan,Interface,Memory,Port,PowerSupply,Processor,TemperatureSensor,VoltageSensor,and Vlan.
SASS-16247/306514 CISCO Certified the following components for the ciscoFpr4110K9 FIREWALL (System OID:.1.3.6.1.4.1.9.1.2295):
AggregateInterface,Card,Fan,Interface,Memory,Processor,PowerSupply,TemperatureSensor,VoltageSensor,and Vlan.
SASS-16280/306618 BROCADE Certified the following components for the Connectrix ED-DCX7-8B FIBRECHANNELSWITCH (System OID:.1.3.6.1.4.1.1588.2.1.1.180):
Card,Fan,Interface,Memory,Port,Processor,PowerSupply,TemperatureSensor,and VoltageSensor.
SASS-16276/306645 CISCO   Certified the following components for the NCS-5508 ROUTER (System OID:.1.3.6.1.4.1.9.1.2349):
AggregateInterface,Card,CardRedundancyGroup,Fan,Interface,Memory,Processor,PowerSupply,TemperatureSensor,and VoltageSensor.
SASS-16298/306632 BLUE-COAT Certified the following components for the sgkvm HOST (System OID:.1.3.6.1.4.1.3417.1.1.44):
Interface,Processor,and ProcessorGroup.
SASS-16073/306442 SONUS Certified the following components for the SBC5400 HOST (System OID:.1.3.6.1.4.1.2879.1.9.8):
Disk,Memory,MemoryGroup,PowerSupply,Processor,ProcessorGroup,and VoltageSensor.
 

Certification impact

This section lists the impacted drivers and SysOIDs as a result of certification changes.

TASC Number Impacted Drivers Impacted SysOIDs
306645 HEALTH = Cisco-IOSXR-EntSensor .1.3.6.1.4.1.9.1.2349
.1.3.6.1.4.1.9.1.590
.1.3.6.1.4.1.9.1.2400
.1.3.6.1.4.1.9.1.2351
.1.3.6.1.4.1.9.1.2429
.1.3.6.1.4.1.9.1.2264
.1.3.6.1.4.1.9.1.2432
.1.3.6.1.4.1.9.1.2350
.1.3.6.1.4.1.9.1.2430
.1.3.6.1.4.1.9.1.2867
.1.3.6.1.4.1.9.1.2649
.1.3.6.1.4.1.9.1.2866
.1.3.6.1.4.1.9.1.2522
306604 HEALTH = Huawei-Entity-Health .1.3.6.1.4.1.2011.2.23.776
306596 HEALTH = HP-Aruba-Switch .1.3.6.1.4.1.11.2.3.7.11.174.3
.1.3.6.1.4.1.11.2.3.7.8.5.7
.1.3.6.1.4.1.11.2.3.7.11.160
.1.3.6.1.4.1.11.2.3.7.8.5.4
.1.3.6.1.4.1.11.2.3.7.11.181.3
.1.3.6.1.4.1.11.2.3.7.8.5.3
.1.3.6.1.4.1.11.2.3.7.11.161
.1.3.6.1.4.1.11.2.3.7.11.133
.1.3.6.1.4.1.11.2.3.7.11.131
306514 Environment = FirePowerEnvMon:DeviceID .1.3.6.1.4.1.9.1.2294
.1.3.6.1.4.1.9.1.2295
306442 HEALTH = Sonus-SBC5400-Health .1.3.6.1.4.1.2879.1.9.8
306618 CONT = Brocade-Switch .1.3.6.1.4.1.1588.2.1.1.180
306632 HOSTRESRCS  = BLUECOAT .1.3.6.1.4.1.3417.1.1.22
.1.3.6.1.4.1.3417.1.1.23
.1.3.6.1.4.1.3417.1.2.0
.1.3.6.1.4.1.3417.1.1.25
.1.3.6.1.4.1.3417.1.1.28
.1.3.6.1.4.1.3417.1.1.27
.1.3.6.1.4.1.3417.1.1.26
.1.3.6.1.4.1.3417.1.3.3
.1.3.6.1.4.1.3417.1.1.20
.1.3.6.1.4.1.3417.1.1.29
.1.3.6.1.4.1.3417.1.3.4
.1.3.6.1.4.1.3417.1.2.2
.1.3.6.1.4.1.3417.1.1.32
.1.3.6.1.4.1.3417.1.1.34
.1.3.6.1.4.1.3417.1.1.31
.1.3.6.1.4.1.3417.1.3.7
.1.3.6.1.4.1.3417.1.1.24
.1.3.6.1.4.1.3417.1.1.36
.1.3.6.1.4.1.3417.1.1.37
.1.3.6.1.4.1.3417.1.1.38
.1.3.6.1.4.1.3417.1.4.2
.1.3.6.1.4.1.3417.1.4.1
.1.3.6.1.4.1.3417.1.1.43
.1.3.6.1.4.1.3417.1.1.30
.1.3.6.1.4.1.3417.1.1.44

Product and Version Details

Product Version Number Details
IP

From <BASEDIR>/smarts/bin/, type the following command:
./sm_server --version (Linux)
The following output is displayed:
sm_server:
linux_rhAS50-x86-64/301095700
IP_NETWORK_SUITE: V10.1.7.1(202484), 08-Apr-2022 08:33:31 Copyright 2022, VMware Inc - Build 7
Foundation V10.1.7.1(201624), 03-Mar-2022 11:59:24 Copyright 2022, VMware Inc - Build 1

Installation

A patch installs files to the <BASEDIR>/smarts/local directory of the product. The Installation software performs the following actions:

  • Backs up all files that are being replaced or merged.
  • Merges changes from your current, user-modifiable configuration files into the new versions of the files from the patch.
  • Displays complete summary at the end of patch installation.
  • Displays the location of a log file that lists the results of merging the files.

Note: If the original product was installed on one computer and then was copied to another computer, the patch cannot be applied to the copied installation. You must apply the patch to the computer with the original installation, and then the results can be copied to another computer.

Patch Installation File

You can install the patch on the host where the IP product is running. 

Binary details for 10.1.5.5 release are:

IP:setup-IP-linux-10_1_7_1-20220409-64BIT.bin

Note: You can download the binary from https://support.vmware.com.

Installation directory

In this document, the term <BASEDIR> represents the location where Smarts software is installed.

For UNIX, the default location is:/opt/InCharge/<productsuite>.

The <productsuite>; represents the Smarts product suite to which the product belongs.

Optionally, you can specify the root of <BASEDIR> to be something other than /opt/InCharge (on UNIX) but you cannot change the name of the <productsuite> that is part of the <BASEDIR>.

Install a new patch over an older patch

Patches are cumulative each successive patch includes all of the fixes from any previous patches. As a result, a newer patch can be installed on top of an older patch. The patch number, which increments itself for each successive patch, indicates the version. A patch with higher version number can be installed over a patch with a lower version number.

The Installation software checks the version of the installed product and the version to be installed at the beginning of its process. It will not allow an older version to be installed on top of a newer version.

Apply patch using CLI mode

CLI mode provides a text-based method for invoking the Installation software. This mode is intended for UNIX platforms with non-graphic (text-only) consoles. The CLI mode installation follows the same process as the wizard mode but displays text on the terminal screen and requires user responses on the keyboard.

Run CLI mode

  1. Change directory to the directory where you typically store patches, for example, ./opt.
  2. Run following setup command and then press Enter. Replace xx with the relevant product name, for example: ESM. For exact name, see the Patch Installation File section:

           Setup command syntax for CLI mode (Linux): ./setup-IP-linux-10_1_7_1-20220409-64BIT.bin.

           A welcome message with information about the installation appears.

Note: Stop all VMware Smart Assurance services and processes that use programs or libraries from the product being upgraded or installed before performing the installation.

User selections and navigation in CLI mode

  • During the patch installation process, at the end of each screen of text, you are prompted with a set of options. For example:

           type 'back' - to go to the previous step

           type 'quit' - to cancel anytime

  • Select a choice by typing the text and press Enter.
  • Accept the default choice, and press Enter.
  • Other screens have different choices. For example when the license agreement is displayed, the following prompt appears:

           Press any key to continue to read license agreement or press '0' to advance to end.

  • At the end of the license agreement, the installation process displays the first of several menus.

           Choose from the following (Y/N) options:

           Y - to accept the terms of the license agreement.

           N - not to accept the terms of the license agreement.

  • Type the desired selection and press Enter. In the case of the license agreement, you must accept the agreement by typing Y and pressing Enter.

           The screen is displayed with an Get User Input. Choose the base location by entering the correct number.

            For example, type 1 to choose the default location for installation and press Enter.

      Get User Input

      1) /opt/InCharge 10.1.7.*

           For example, if the product name is ESM and default install folder is /opt/InCharge, the installer displays:

           VMware Smart Assurance Server Manager Suite will be installed in the following location:

           Product Name: ESM

           Install Folder: /opt/InCharge

  • Press Enter to continue the installation.
  • Press Enter to exit the installer.

           When the patch installation is complete, reconcile the configuration files as described in Reconcile user-modifiable files.

Apply patch using Unattended (Silent) mode

Unattended mode installs the patch without user input or a response file. When invoking the install program, specify the location of the product suite to be patched.

In order to invoke an unattended installation of the patch, type the appropriate setup command from below table and then press Enter. Replace “xx” with the relevant product name, for example, ESM. For exact name, see the Patch Installation File section:

Setup command syntax for unattended mode (Linux):setup-IP-linux-10_1_7_1-20220409-64BIT.bin -i silent -DrpProduct.installLocation=/opt/InCharge.

Where xx represents the product name.

Note: You must provide the correct base installation location. For example: base10.1 build is installed inside /opt/InCharge.

Once the installation is completed inside /tmp ** log file will be created with the summary. When the patch installation is complete, reconcile the configuration files as described in Reconcile user-modifiable files.

Log Files

Patch report and log file locations, lists the files that the Installation software creates during the install process.

Patch report and log file locations:

Name Path File Name
Install log <BASEDIR>/smarts/setup/logs Install.<product>_SUITE. <patchversion>.log
Merged files log <BASEDIR>/smarts/setup/logs merge-summary-<patch version>.log

Install log

The installer creates an Install log file listing all actions performed by the installation. You need not read this file unless you suspect an installation failure.

If the installation process fails, the log files are located in a temporary directory, for example /tmp or C:\temp. A non-zero status indicates a failure.

Merged files Log

This log lists the files in the BASEDIR/smarts/local directory structure that were merged. For each merged file, the log lists the location and name of the file. If any file cannot be merged due to conflicts, this is also noted. In addition, the log lists the name and location for unmerged versions of all user-modifiable files that are included in the patch.

For example, in case of ESM: 

  • Summary of merge operation can be found at location: /opt/InCharge/ESM/smarts/setup/logs/merge-summary-10.x.x.x.log
  • For more detail logs: /opt/InCharge/ESM/smarts/setup/logs/detail-merge-10.1.5.1.log

If there were any conflict during the merge operation, the old local backup file will be saved as "File_Name.bkp" in its same location. These conflict files needs to be merged manually before starting the server.

Review the results of the reconciliation process

The results of the reconciliation analysis performed during the installation and all actions taken are included in the merged files log located in <BASEDIR>/smarts/setup/logs. The name of the log file is: install.merge.<patch version>.log

Reconcile User-modifiable Files

The Installation software is designed to preserve your changes to user-modifiable files when installing new versions of these files. Existing changes to user-modifiable files are always automatically merged. All files are merged by default.

The Installation software also creates a backup of all the versions of the user-modifiable files to ensure that you will not lose any configuration data.

Review the results of the reconciliation process

The results of the reconciliation analysis performed during the installation and all actions taken are included in the merged files log located in <BASEDIR>/smarts/setup/logs. The name of the log file is: install.merge.<patch version>.log.

Determine which files require action by reviewing the merged files log generated by the install process:

  1. Using any editor, open and review the log:

    <BASEDIR>/smarts/setup/log/Install.Merge.10.x.x.x.log.

  2. Review the log:

    1. Resolve conflicts in files manually. See Resolve the issue in conflict files.
    2. During the installation, the entries that indicate file merges without conflicts that resulted in automerge files.

Resolve issues in conflict files

If a conflict occurs for any file in the same local directory of the file location, you can find the below files:

  • One is the conflict file. For example, <filename>
  • Another file is .bak.001. For example, <filename>.bak.001

Review the conflict files and resolve issues using the following procedure:

  1. Open the user-modifiable file where the conflict occurs using sm_edit.

    For example, the conflict file for esm.param.conf is named esm-param.conf.

  2. Review and resolve the conflict manually.
  3. Save and close the file.

To use patch introduced file (for example, esm-param.conf):

  1. Rename the original conflict file. (For example, if the conflict file name is esm-param.conf, rename the file esm-param.conf to esm-param.conf_old).
  2. Rename the <filename>.bak.001 file to the original file name <filename> by removing .bak.001 extension.

    For example, if the patch file name is esm-param.conf.bak.001, rename it to the esm-param.conf to use the original file.

  3. Save and close the file.

Note: All the user-modifiable unmerged files before patch installation, are backed up in "<BASEDIR>/<Product Name>/smarts" location. By default, the backup directory is hidden.

Uninstallation

Uninstalling a patch removes all previously applied patches and returns the software to the baseline product version.

Note:Root privileges are required to uninstall a patch. Use either the uninstaller program to uninstall a patch. Failure to use one of these methods can result in an unstable system and/or inconsistent product directories.

Before uninstallation

You must complete the following task before uninstalling the patch:

  • Stop all VMware Smart Assurance services and processes that use programs or libraries from the product.

Roll back to a previous patch

If you want to revert to a previous patch, you must:

  • Uninstall the currently installed patch to return to the baseline version.

  • Reinstall the previous patch.

For example, to revert from Patch 2 to Patch 1, uninstall Patch 2, and then reinstall Patch 1.

Uninstall Patch Using the Uninstaller Program

Use the uninstaller program to uninstall a patch:

Note: Do not to use the uninstaller program in the _uninst directory because it will remove the entire product.

  1. Change the directory or use the file navigator to find the _rpuninst directory.

    For Example: /opt/InCharge/<Product>/_rpuninst on UNIX systems.

  2. Invoke the uninstaller program.

    For example: ./uninstaller on UNIX systems.

  3. Press Enter to continue the uninstallation.

Uninstall Patch Using Unattended (Silent) Mode

Use the uninstaller program to uninstall a patch.

Note: Do not to use the uninstaller program in the _uninst directory because it will remove the entire product.

  1. Change the directory or use the file navigator to find the _rpuninst directory.

    For Example: /opt/InCharge/<Product>/_rpuninst on UNIX systems.

  2. Execute the uninstaller program.

    ./uninstaller -i silent on UNIX systems.

  3. Press Enter to continue the uninstallation.
check-circle-line exclamation-circle-line close-line
Scroll to top icon