how to manage your HP-UX software updates September 2004 HP-UX 11i v2 for hp9000 workstations and servers Dear Customer, We are pleased to present to you our latest HP-UX software updates brochure. This brochure contains all the information you need about HP-UX products - applications, patches, technical support availability dates and more. This invaluable tool provides assistance and advice to help you manage your application and operating system updates effectively. We thank you for your confidence in us and hope you enjoy reading our brochure Best Regards, HP TABLE OF CONTENTS HP-UX 11i v1 Operating Environment – September 2004 . . . . . . . . . . . .7 Discontinuance information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8 A note for HP Integrity server support customers . . . . . . . . . . . . . . . . .8 What’s updated in the HP-UX 11i v2 September 2004 release? . . . . . .9 Newly released or updated products for September 2004 . . . . . . . . .12 Newly released or updated products summary . . . . . . . . . . . . . . . . .18 HP-UX 11i v2 Operating Environment September 2004 HP-UX 11i v2 Operating Environment September 2004 Important Discontinuance Information: HP has discontinued the HP Itanium Workstation family as of Sept 1, 2004. Shipments shall be completed by the end of October. Product support for Itanium workstations (zx2000, zx6000) running HP-UX or Linux will be continued for 5 years from the product discontinuance. In conjunction with the obsolescence of workstation hardware we are also discontinuing the workstation software products: B9000AA Minimal Technical Computing OE. B9001AA Technical Computing OE. 8 A note for HP Integrity server support customers HP has upgraded our support processes to better serve our customers and to be more responsive to your support needs for both Integrity server hardware and software. HP has upgraded our processes so as to improve response times for all of our customers, particularly those with mission-critical level services. As an Integrity server customer, you will find HP support to be knowledgeable, timely, efficient and ready to serve your needs at any hour of the day or night. What’s updated in the HP-UX 11i v2 September 2004 release? The September 2004 release of UPUX 11i v2 is a joint release of HP-UX 11i for both the HP9000 and Integrity server families. This release offers a full range of HP-UX Operating Environments and capabilities including 128-way scaling, systems management, security, and high-availability software products. This release of HP-UX 11i v2 is delivered on a common DVD media which means that the same media can be used for installation on either HP 9000 or Integrity servers. Itanium-based systems offer significantly better price/performance and performance scalability than systems based on current architectures, and HP-UX 11i v2 provides the best way to preserve your investment through the transition from Precision-Architecture Reduced Instruction Set Computing (PA-RISC) HP-9000 servers to Itanium based Integrity servers. Hewlett-Packard’s enterprise computing business has carefully planned the transition to Itanium-based systems, placing a premium on customer and partner investment protection. HP-UX 11i v2 maintains compatibility between HP 9000 and Integrity servers through: • Common “look and feel” • Application Build Environment compatibility (source code compatibility) • Data compatibility • Binary compatibility With this release of HP-UX 11i v2 for both HP 9000 and Integrity server families, HP has successfully introduced a transition bridge between the PA-RISC architecture and Itanium architecture and provided a smooth transition path for its customers and partners onto the Itanium next-generation architecture. There are many other improvements and upgrades in all the functional areas of HP-UX which include: • management utilities • disk and file management • high availability with Serviceguard • networking • security • commands and system calls • programming languages and • utilities 9 HP-UX 11i version 2 is supported on all current HP Integrity servers. The following HP 9000 PA-RISC servers (11iv1) are fully supported: • Class/rp2400 series except A180 and A180C, which had 32-bit processors • L-Class/rp5400 series • rp3400 series • rp4400 series • All N-Class/rp7400 series • All rp8400 series • All HP 9000 Superdome HP encourages you to look for more detailed information on the changes in the September 2004 HP-UX 11i v2 Operating Environments at the following url: http://docs.hp.com/hpux/os/11iv2 /index.html, click on the “Release Notes” link to go to the HP-UX 11i v2 September 2004 Release Notes, Chapter 3, "What's New at a Glance". 10 Licensing information for September 2004 Some applications require codeword certificate to unlock the software. The password is supplied with your software shipment or for some products you will receive a “password request form” enclosed with your shipment asking you to: 1. Generate it on line on Software License Manager 2. Generate it on line on Web ware 3. View it on line thru Software Update Manager 4. Contact HP Licensing Services 5. Contact Password Center Your HP US licensing contact: Hewlett-Packard Company HP Licensing Services North America Phone: +1(650) 960-5111 or (800) 538-1733 Fax: +1(650) 960-5670 or (800) 541-2633 E-mail: [email protected] Business hours: Monday to Friday 6:00am - 4:30pm PST Your HP European licensing contact: Hewlett-Packard Ireland HP Licensing Services Ireland Phone: +353 (0)91 75 40 06 Fax: +353 (0)91 70 1002 E-mail: [email protected] Business hours: Monday to Friday 8:30am - 5:30pm GMT Your HP Asia Pacific contact: Hewlett-Packard Japan HP Licensing Services Japan Phone: 0120.42.1231 (Inside Japan) or 0426.48.9310 (Inside Japan) or +81.426.48.9312 (Outside Japan) Fax: 0 120.52.1231 (Inside Japan) or +81 426.39.4983 (Outside Japan) E-mail: [email protected] Business hours: Monday to Friday 9:00am - 5:30pm GMT+9 For some other products it is recommended to: 1. Generate the password on line thru Web Ware web site at the url:www.webware.hp.com, or 2. For additional password assistance you may contact one of the following license centers Hewlett-Packard Password Center for U.S.A: Phone: (801) 431-1597 or (800) 326-0411 Fax: (801) 431-3654 Hours of operation: 6:00 am to 6:00 pm MST [email protected] Hewlett-Packard Password Center for Europe/Africa: Phone: (+31-55-543-4642) Fax: (+31-55-543-4645) Hours of operation: 9:00 to 18:00 CET [email protected] Hewlett-Packard Password Center for Asia Pacific: Phone: (outside Japan) +81-33227-5672 Phone: (within Japan) 03-3227-5264 Fax: (+81-3-3227-5238) Hours of operation: 9:00 am to 5:00 pm JST [email protected] 11 Newly released or updated products for September 2004 Workstation Platform Base 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 12 Category NETWORKING NETWORKING MULTIMEDIA NETWORKING CASE CASE CASE CASE LANGUAGE OTHER NETWORKING OTHER NETWORKING NETWORKING LANGUAGE CASE OTHER NETWORKING NETWORKING OTHER OTHER OTHER OTHER OTHER OTHER OTHER LANGUAGE LANGUAGE NETWORKING NETWORKING Description Product Number ACC/X.25 SW bnd ATM PCI Audio Clients Auto Port Aggreg C SB LTU -Eng C SB LTU -Jpn C++ SB LTU -Eng C++ SB LTU -Jpn C/ANSI C Dev LTU Device Manager Dual Gbe S/W EMS Framework FCD PCI-X Adaptr FDDI Univ PCI Fortran90 LTU GNU Src for SB GTK+ LIbraries GbE PCI 1000B-T GbE PCI 1000BT Glance + M/M Glance + Pak GraphicsTechCom HP CIFS Client HP CIFS Server HP MPI HP VxVM - Base HP aC++ LTU HP-UX Apache HP-UX IPFilter HP-UX IPSec Z7344A ATM-00 AudioClient J4240AA B6449EB B6450EB B6451EB B6452EB B3899BA PeriphDev IEther-00 B7609BA FibrChanl-01 FDDI-00 B3907DB SBGNU B6848BA GigEther-01 GigEther-00 B3691AA B3699AA Graphics B8724AA B8725AA B6060BA Base-VXVM B3911DB hpuxwsApache B9901AA J4256AA Version B.03.40.02 M.11.23.10 B.11.23.02 B.11.23.05 E.11.23.01 E.11.23.01 E.11.23.01 E.11.23.01 C.11.23.01 B.11.23.02 B.11.23.05 A.04.10 B.11.23.02 B.11.23.01 B.11.23.08 E.11.23.01 1.4.gm.46.9 B.11.23.05 B.11.23.05 C.03.85.00 C.03.85.00 B.11.23.03. A.01.09.02 A.01.11.02 B.11.23.06 B.03.50.IA. C.11.23.01 B.2.0.50.01 A.03.05.10. A.02.00.01 Update/New New Update New New Update Update Update Update Update Update Update Update New Update Update Update Update Update Update Update Update New Update Update Update Update Update Update Update Update Workstation Platform Base 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 Category LANGUAGE LANGUAGE LANGUAGE OTHER OTHER NETWORKING OTHER OTHER OTHER NETWORKING OTHER LANGUAGE LANGUAGE LANGUAGE LANGUAGE LANGUAGE LANGUAGE LANGUAGE LANGUAGE LANGUAGE LANGUAGE OTHER OTHER OTHER OTHER OTHER NETWORKING OTHER OTHER OTHER OTHER NETWORKING NETWORKING OTHER OTHER NETWORKING OTHER Description Product Number HP-UX Tomcat HP-UX Tools HP-UX Webmin HPUXOpenSSL HW Par Provider HyperFabric drvr IDS/9000 ISEEPlatform Ignite-UX InfiniBand-Core Java Out-of-Box Java2 JDK 1.4 Java2 JPI 1.3 Java2 JPI 1.4 Java2 JRE 1.3 Java2 JRE 1.4 Java2 RTE Addon Java2 SDK 1.3 Java2 SDK Addon Java3D for 1.3 Java3D for 1.4 Kerberos Server Kernel Config LDAP-UX Integ MLIB Math Lib MWA Wk M/M MobileIPv6 HA/CN Mozilla Mozilla Source MySQL NetscapeDirSvrV6 PCI Mux 8/64Port PCI Token Ring PRM Sw Libs PRM sw/lic Pam Kerberos ParMgr hpuxwsTomcat hpuxwsXml hpuxwsWebmin OpenSSL NPar HyprFabrc-00 HPUX-HIDS ISEEPlatform B5725AA IB4X-00 JAVAOOB T1456AA T1455AA T1458AA B9789AA T1457AA T1457AAaddon B9788AA T1456AAaddon T1868AA T1869AA T1417AA Casey J4269AA B6061AA B4965AA HPUXMOBILEIP MOZILLA MOZILLAsrc MySQL J4258CA TermIO-00 TokenRing-00 B7697BA B3835DA J5849AA ParMgr Version B.4.1.29.03 A.2.00 A.1.070.01 A.00.09.07B.11.23.01. B.11.23.01. D.02.02.26 A.03.50.861 C.6.0.109 B.11.23.02 2.03.01 1.4.2.03.04 1.3.1.13.01 1.4.2.03.04 1.3.1.13.01 1.4.2.03.04 1.4.2.03.04 1.3.1.13.01 1.4.2.03.04 1.3.0.01.11 1.3.0.01.11 C.03.02 B.11.23.10 B.03.20.02 B.08.06.02 C.03.85.00 A.01.01 1.4.0.01.04 1.4.0.01.04 3.23.54a.01 B.06.11.20 B.11.23.1.1 B.11.23.01 C.02.03.03 C.02.03.03 C.01.23 B.11.23.02. Update/New Update Update Update New Update Update New New Update New Update Update Update Update Update Update New Update New Update Update New Update Update Update Update New Update Update Update New Update Update Update Update Update Update 13 Workstation Platform Base 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 14 Category OTHER NETWORKING NETWORKING NETWORKING NETWORKING NETWORKING NETWORKING NETWORKING OTHER OTHER OTHER OTHER OTHER OTHER NETWORKING NETWORKING OTHER NETWORKING OTHER OTHER NETWORKING OTHER MULTIMEDIA NETWORKING OTHER OTHER NETWORKING LANGUAGE Description Product Number Pay Per Use RAID SA software SCSI U320 SNA+2 3270 SNA+2 API SNA+2 APPN EN SNA+2 Link SNA+2 RJE Sec Patch Check Secure Shell Security Tools SwPkgBuilder SysMgmtAgent SysMgmtBASE TL pCI/HSC Adapt TN3270 Tech Sys Config USB driver WBEM SDK WBEM Services WBEMProvider-LAN WLM Monitor GUI WTSharedX X.25/9000 Link Zeus Web Server iCOD SW iSCSI-00 perl-non CPL T2351AA RAID-01 scsiU320-00 J2722BA J2724BA J2721BA J2720BA J2723BA SecPatchCk T1471AA Sec00Tools SwPkgBuilder B8339BA SysMgmtBASE FibrChanl-00 J2636BA TechSysConf USB-00 T1434BA B8465BA WBEMP-LAN-00 WLMUtilities SharedX J2793B ZWST41_TRY B9073BA iSCSI-00 perl Version B.11.23.07. B.11.23.02 B.11.23.01 R6.11.23.00 R6.11.23.00 R6.11.23.00 R6.11.23.00 R6.11.23.00 B.02.02 A.03.71.007 B.01.02.00 A.02.00.02 B.03.00.09 B.00.01 B.11.23.03 R6.11.23.00 B.11.23.01. B.11.23.02 A.02.00.04 A.02.00.04 B.11.23.01 A.02.03.03 B.11.23.05 B.11.23.02 B.04.02.04. B.11.23.06. B.11.23.03c D.5.8.0.D Update/New Update New Update Update Update Update Update Update New Update Update Update Update New Update Update Update Update Update Update New New Update Update Update Update New Update Server Platform Base 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 Category NETWORKING NETWORKING NETWORKING CASE CASE CASE CASE LANGUAGE OTHER OTHER OTHER NETWORKING OTHER OTHER NETWORKING NETWORKING LANGUAGE CASE OTHER NETWORKING NETWORKING OTHER OTHER OTHER OTHER OTHER OTHER OTHER OTHER LANGUAGE LANGUAGE OTHER NETWORKING NETWORKING LANGUAGE LANGUAGE Description Product Number ACC/X.25 SW bnd ATM PCI Auto Port Aggreg C SB LTU -Eng C SB LTU -Jpn C++ SB LTU -Eng C++ SB LTU -Jpn C/ANSI C Dev LTU Cluster Obj Mgr ContCluster Device Manager Dual Gbe S/W ECM Toolkit EMS Framework FCD PCI-X Adaptr FDDI Univ PCI Fortran90 LTU GNU Src for SB GTK+ LIbraries GbE PCI 1000B-T GbE PCI 1000BT Glance + M/M Glance + Pak HA Monitors HP CIFS Client HP CIFS Server HP MPI HP Online JFS HP VxVM - Base HP aC++ LTU HP-UX Apache HP-UX Dev Kit HP-UX IPFilter HP-UX IPSec HP-UX Tomcat HP-UX Tools Z7344A ATM-00 J4240AA B6445EB B6446EB B6447EB B6448EB B3901BA B8324BA T2346BA PeriphDev IEther-00 T1909BA B7609BA FibrChanl-01 FDDI-00 B3909DB SBGNU B6848BA GigEther-01 GigEther-00 B3693AA B3701AA B5736DA B8724AA B8725AA B6060BA B3929DA Base-VXVM B3913DB hpuxwsApache HPDesktopDev B9901AA J4256AA hpuxwsTomcat hpuxwsXml Version B.03.40.02 M.11.23.10 B.11.23.05 E.11.23.01 E.11.23.01 E.11.23.01 E.11.23.01 C.11.23.01 B.03.00.01 A.04.02 B.11.23.02 B.11.23.05 B.02.11 A.04.10 B.11.23.02 B.11.23.01 B.11.23.08 E.11.23.01 1.4.gm.46.9 B.11.23.05 B.11.23.05 C.03.85.00 C.03.85.00 A.04.10 A.01.09.02 A.01.11.02 B.11.23.06 B.11.23.05 B.03.50.IA. C.11.23.01 B.2.0.50.01 B.11.23.07 A.03.05.10. A.02.00.01 B.4.1.29.03 A.2.00 Update/New New Update New Update Update Update Update Update Update New Update Update Update Update New Update Update Update Update Update Update Update Update Update Update Update Update Update Update Update Update New Update Update Update Update 15 Server Platform Base 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 16 Category LANGUAGE OTHER OTHER NETWORKING OTHER OTHER OTHER NETWORKING OTHER LANGUAGE LANGUAGE LANGUAGE LANGUAGE LANGUAGE LANGUAGE LANGUAGE LANGUAGE OTHER OTHER OTHER OTHER OTHER OTHER OTHER NETWORKING OTHER OTHER OTHER OTHER NETWORKING NETWORKING OTHER OTHER NETWORKING OTHER OTHER NETWORKING Description Product Number HP-UX Webmin HPUXOpenSSL HW Par Provider HyperFabric drvr IDS/9000 ISEEPlatform Ignite-UX InfiniBand-Core Java Out-of-Box Java2 JDK 1.4 Java2 JPI 1.3 Java2 JPI 1.4 Java2 JRE 1.3 Java2 JRE 1.4 Java2 RTE Addon Java2 SDK 1.3 Java2 SDK Addon Kerberos Server Kernel Config LDAP-UX Integ MLIB Math Lib MWA Svr M/M Metro Clstr SRDF MetroClstr XP256 MobileIPv6 HA/CN Mozilla Mozilla Source MySQL NetscapeDirSvrV6 PCI Mux 8/64Port PCI Token Ring PRM Sw Libs PRM sw/lic Pam Kerberos ParMgr Pay Per Use RAID SA software hpuxwsWebmin OpenSSL NPar HyprFabrc-00 HPUX-HIDS ISEEPlatform B5725AA IB4X-00 JAVAOOB T1456AA T1455AA T1458AA B9789AA T1457AA T1457AAaddon B9788AA T1456AAaddon T1417AA Casey J4269AA B6061AA B4967AA B6264BA B8109BA HPUXMOBILEIP MOZILLA MOZILLAsrc MySQL J4258CA TermIO-00 TokenRing-00 B7697BA B3835DA J5849AA ParMgr T2351AA RAID-01 Version A.1.070.01 A.00.09.07B.11.23.01. B.11.23.01. D.02.02.26 A.03.50.861 C.6.0.109 B.11.23.02 2.03.01 1.4.2.03.04 1.3.1.13.01 1.4.2.03.04 1.3.1.13.01 1.4.2.03.04 1.4.2.03.04 1.3.1.13.01 1.4.2.03.04 C.03.02 B.11.23.10 B.03.20.02 B.08.06.02 C.03.85.00 A.04.13 A.04.22 A.01.01 1.4.0.01.04 1.4.0.01.04 3.23.54a.01 B.06.11.20 B.11.23.1.1 B.11.23.01 C.02.03.03 C.02.03.03 C.01.23 B.11.23.02. B.11.23.07. B.11.23.02 Update/New Update New Update Update New New Update New Update Update Update Update Update Update New Update New New Update Update Update Update New New New Update Update Update New Update Update Update Update Update Update Update New Server Platform Base 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 Category NETWORKING OTHER OTHER OTHER NETWORKING NETWORKING NETWORKING NETWORKING NETWORKING OTHER OTHER OTHER OTHER OTHER OTHER OTHER NETWORKING NETWORKING NETWORKING OTHER OTHER NETWORKING OTHER OTHER OTHER NETWORKING OTHER OTHER NETWORKING LANGUAGE Description Product Number SCSI U320 SG Ext for SAP SGeFF SW SGeRAC SNA+2 3270 SNA+2 API SNA+2 APPN EN SNA+2 Link SNA+2 RJE Sec Patch Check Secure Shell Security Tools Serviceguard SwPkgBuilder SysMgmtAgent SysMgmtBASE TL pCI/HSC Adapt TN3270 USB driver WBEM SDK WBEM Services WBEMProvider-LAN WLM Monitor GUI WLM Toolkits Workload Manager X.25/9000 Link Zeus Web Server iCOD SW iSCSI-00 perl-non CPL scsiU320-00 T2357BA T2389BA T1907BA J2722BA J2724BA J2721BA J2720BA J2723BA SecPatchCk T1471AA Sec00Tools T1905BA SwPkgBuilder B8339BA SysMgmtBASE FibrChanl-00 J2636BA USB-00 T1434BA B8465BA WBEMP-LAN-00 WLMUtilities T1302AA B8843CA J2793B ZWST41_TRY B9073BA iSCSI-00 perl Version B.11.23.01 B.03.11 A.01.00.00 A.11.16.00 R6.11.23.00 R6.11.23.00 R6.11.23.00 R6.11.23.00 R6.11.23.00 B.02.02 A.03.71.007 B.01.02.00 A.11.16.00 A.02.00.02 B.03.00.09 B.00.01 B.11.23.03 R6.11.23.00 B.11.23.02 A.02.00.04 A.02.00.04 B.11.23.01 A.02.03.03 A.01.07.03 A.02.03.03 B.11.23.02 B.04.02.04. B.11.23.06. B.11.23.03c D.5.8.0.D Update/New Update Update New Update Update Update Update Update Update New Update Update Update Update Update New Update Update Update Update Update New New Update Update Update Update Update New Update 17 Newly released or updated products summary ACC- new product Customers updating to HP-UX 11i v.2 on PA-RISC and/or customers migrating to IA 64 platform would benefit from this release. Product Z7344A Description ACC/X.25 SW bnd Platform 700,800 Version 11.23 Platform 700,800 Version 11.23 Platform 700,800 Version 11.23 Casey on 11.23- product updated The top three things that are occurring with the product that would make the customer want to request the update. a) Availability on PA platform b) Support for Terminal User Interface (TUI). This update applies to System Admin managing UNIX patch updates and/or planning UNIX hardware updates. Product Casey Description Kernel Config CIFS Client (B8724AA) - product updated The release contains defect fixes and PAM-NTLM 64-bit support Product B8724AA 18 Description HP CIFS Client Gigabit Ethernet; Fast Ethernet product updated Gigabit Ethernet and Fast Ethernet networking cards and their always installed drivers. Gigabit drivers are in all version B.11.23.05. IMPACT TCP Segmentation Offload (TSO) is a performance enhancement that reduces a system's service demand. New or changed APIs: • New option added to both the iether and igelan drivers to get and set a new tunable called "vmtu". The syntax of the new option is described below. • lanadmin -x vmtu <ppa> • lanadmin -X vmtu new_vmtu_value <ppa> SUMMARY Changes since the June 04 release of 11i v 1.0 include: TCP Segmentation Offload (TSO) support for the iether and igelan Gigabit Ethernet drivers. TSO offloads portions of a system CPU's outbound TCP packet processing to COMPATIBILITY a network interface card thereby Gigabit Ethernet and Fast Ethernet reducing system service demand. cards are supported on the September 2004 HP-UX 11.23 64-bit management information base release. For further information (MIB) statistics support. Directs the access the following url: DLS provider to return 64 bit statistics. http://docs.hp.com/hpux/os/11iv2 /index.html and click on release HP-UX LAN provider support: you notes. can use WBEM-based clients to access the LAN Provider and collect TCP Segmentation Offload (TSO) information about the Ethernet links works only with network cards that on your system. use the iether and igelan Gigabit Ethernet drivers. If you have a version Virtual LAN (VLAN) support for HP- of HP-UX 11i v 1.0 or v 2.0 prior to UX 11i v2 release of September the September 2004 release, you 2004: for further information access can download the TSO enhancement the following url: http://docs.hp.com/ at http://software.hp.com under hpux/os/11iv2/index.html and click enhancement releases and patch on release notes. bundles. TSO requires that the TOUR 2.0 transport software be installed the TOUR 2.0 transport software is part of this September 2004 HP-UX 11i v2 release. 19 PERFORMANCE TSO performance information is available via the following url: http://docs.hp.com/hpux/os/11iv2 /index.html Click on release notes. DOCUMENTS 64-bit MIB statistics comply with the RFC2863 (standard for 64 bit statistics interpretation). See lanadmin man page for details. LAN Provider information is available in this document in the Internet and Networking chapter in the section titled "HP-UX LAN Provider". OBSOLESCENCE At the time of this writing, only the Gigabit Ethernet and Fast Ethernet cards shown on page 21 are supported on the September 2004 20 HP-UX 11i v2 OE release. Gigabit cards released since the publication of this document will likely be supported but not shown in this brochure. Some older Fast Ethernet and Gigabit Ethernet cards that worked on HP-UX 11i v 1.0 version or even the March 2004 11i v 2.0 will no longer work on this September 2004 HP-UX 11.23 release. Among the GigE cards that are not supported on this release are: A3738A, A5172A, A6792A, and A8685A PCI GigE cards. Among the Fast Ethernet cards that are not supported on this release are: A3658AA, A4308B, J2780BA, A3495A, A3495B, and J2459BA Fast Ethernet cards. Additional LAN cards that are not supported on this September 2004 HP-UX 11.23 release are EISA, HPPB, and HSC types. MACHINES-AFFECTED LAN cards of the types mentioned in the OBSOLESCENCE section will not operate on the September 2004 HPUX 11i v2 OE release. GigabitEthernet Product(s) Product A4926A A4929A GigEthe Description GbE PCI 1000SX GbE PCI 1000BT GbE PCI 1000BT Platform 700,800 700,800 700,800 Version 11.23 11.23 11.23 Platform 700,800 700,800 700,800 700,800 Version 11.23 11.23 11.23 11.23 Platform 700,800 700,800 700,800 700,800 700,800 700,800 700,800 Version 11.23 11.23 11.23 11.23 11.23 11.23 11.23 GigabitIgelan Product(s) Product A7011A A7012A AB352A IEther- Description Dual GbE Fiber Dual Gbe Copper Dual Gbe Core Dual Gbe S/W Gigabitiether Product(s) Product A6794A A6825A A6847A A7109A A9782A A9784A GigEthe Description GBE PCI 1000BT GBE PCI 1000BT GBE PCI 1000SX GBE PCI 1000BT GBE PCI 1000SX GBE PCI 1000BT GbE PCI 1000B-T 21 iCOD - product updated • fix for upgrading to any 6.* version of iCOD, from versions prior to 6.0 • fix for system hang during shutdown when using the shutdown command • fix for more accurate iCOD resource reporting Product B9073BA T2351AA Description iCOD SW Pay Per Use IPFilter A.03.05.10 - product updated • Defect repairs, primarily in the DCA and NAT features • Support for DCA and NAT on HPUX 11i v2 (previously these were only supported on HP-UX 11i v1). Product B9901AA Description HP-UX IPFilter IPSecurity A.02.00.01 - product updated • Dynamic configuration update • MIPv6 support • Manual keying support • Command Line Interface method for configuration • Defect repairs Product J4256AA 22 Description HP-UX IPSec PPU - active cpu metric with cpu capping: • WBEM communication to PPU meter • more accurate reporting through report caching These changes apply to both System Admins managing UNIX patch update and those planning for hardware upgrades. Platform 700,800 700,800 Version 11.23 11.23 Note that the version supplied on the September application/operating environment is planned to be identical to the web release that is coming out in the next couple weeks (same version number, same code). Platform 700,800 Version 11.23 Note that the version supplied on the September 2004 applications will have the same functionality as the upcoming web release (A.02.00), but it will have some minor code differences and therefore will have a different version number (A.02.00.01). Platform 700,800 Version 11.23 IUX - Update • create custom install configurations, The Ignite-UX (Ignite-UX) product is or golden images, for use in an HP-UX administration toolset that multiple installations on clients; helps you do the following: • recover HP-UX clients remotely; • create custom recovery media • install HP-UX 11.0 and 11i v1 including tape, CD-ROM and DVD; (B.11.11), v1.6 (B.11.22), v2 • manage and monitor multiple (B.11.23) on multiple PA-RISC client installation sessions. and/or Intel ® Itanium ®-based clients on your network; Product B5725AA Description Ignite-UX Kerberos Products -PAM Kerberos Update PAM Kerberos v 1.11 provides Kerberos authentication as per the Pluggable Authentication Module (PAM) architecture that is specified in Open group RFC 86.0. PAM allows multiple authentication technologies to coexist. A configuration file /etc/pam.conf determines which authentication module to use, in a manner transparent to the applications that use the PAM library. PAM Kerberos has the support for four PAM modules namely Authentication module, Account management module, Session management module and Password management module. PAM Kerberos Library is one of the many authentication modules that PAM can invoke based on what is defined under the PAM configuration file: /etc/pam.conf. If PAM's Platform 700,800 Version 11.23 authentication-management is pointed to the shared, dynamically loadable PAM Kerberos library ( Eg : /usr/lib/ security/libpam_krb5.1), PAM Kerberos is invoked for user authentication. The PAM-Kerberos depot on HP-UX 11.11 also contains the Kerberos Support v1.1 product as part of the software bundle. Kerberos Support v1.1 (KRBS-Support) has a dependency on the Kerberos Support product (KRB-Support). Additionally, PAM-Kerberos is available on HP-UX 11.00, HP-UX 11.22, and HP-UX 11.23. The HP-UX 11.00 PAM-Kerberos depot contains Kerberos-Client, KRB5-Client and GSSAPI products, GSS-API, as part of the bundle. However these two products are part of the core operating system on HP-UX 11.11, HP-UX 11.22 and HP-UX 11.23. PAM Kerberos has dependency on 23 Kerberos-Client fileset KRB5Client.IA32SLIB both on 11.22 and 11.23. Features and Benefits: Following are the top three features of PAM-Kerberos on HP-UX 11.11 and on HP-UX 11.00: • PAM Kerberos validation tool : This tool will validate the PAM Kerberos configuration. It validates the PAM Kerberos related entries in the configuration files /etc/pam.conf, /etc/pam_user.conf, /etc/krb5.conf and /etc/krb5.keytab and also checks for the presence of the authentication server (KDC). • Session Management: The credentials created by PAM Kerberos for the user while logging-in will not be deleted from the system when the user closes the session, which might result in unnesessary usage of disk space. Hence the session management is now enhanced to provide this facility through pam_sm_close_ session(), which will delete the credentials that are created by the pam_sm_setcred(). Product J5849AA 24 Description Pam Kerberos • Configurable Password prompt: The password for PAM-Kerberos is now configurable by specifying the krb_prompt flag to the corresponding entry in the PAM configuration file /etc/pam.conf. The top two features of KerberosSupport on HP-UX 11.11 and Kerberos-Client on HP-UX 11.00 are : • Appdefault support : The Kerberos Client configuration file /etc/krb5.conf supports the [appdefaults] section. Each tag in the [appdefaults] section names a Kerberos V5 application. The value of the tag is a subsection with relations that define the default behaviors for that application. • ADS Multidomain Support: If the user account is present in Windows 2000 multidomain, the Kerberos Client will resolve the Windows 2000 domain a user belongs to. This will make the authentication consistent with nss_ldap (LDAPUX). Platform 700,800 Version 11.23 the backend database. By Kerberos Server - New integrating the Kerberos principals Kerberos Server version 3.1, with the corresponding users in T1417AA, is now available as part the LDAP directory, you store data of the Kerberos Security product for mechanisms, such as UNIX family. Kerberos is a mature network and Kerberos in a common authentication protocol based on the repository. RFC 1510 (The Kerberos Network • HP Kerberos Administrator: The Authentication Service (V5)) HP Kerberos Administrator is a specification of the Internet Engineering graphical user interface that can Task Force (IETF). It is designed to be used to administer the kerberos provide strong authentication for principal database. client or server applications using the • Multithreaded Server: This shared secret key cryptography. capability has been provided for Kerberos server v3.1, optionally, servicing user requests in KDC. allows you to configure your Thus enhancing the performance Kerberos server with LDAP as the of the Kerberos Server. backend database. The previous • High availability: In the event of versions of the Kerberos server the primary server crashing or supported C-tree as the backend going down, the secondary server database. (backup) can immediately be made the primary server. This is Features and Benefits: accomplished by having the Following are top features and parent process always monitor the benefits this product offers, which server daemon, kdcd. If the server would make you update from daemon dies or crashes, the Kerberos Server version 2.0 and 3.0 parent process will automatically to Kerberos server v3.1 on HP-UX spawn a new server daemon. This 11i v2: provides for high availability in the • LDAP database:- This version, case of mission critical optionally, enables you to configure applications. your Kerberos Server with LDAP as Product T1417AA Description Kerberos Server Platform 700,800 Version 11.23 25 Mobile IPv6 - New Mobile IPv6 is the next generation of Mobile IP technology. HP-UX 11i Mobile IPv6 allows mobile nodes to change network attachment points using a single and fixed IPv6 address for extended periods of time. Users with portable handheld devices or laptops are now able to roam throughout the Internet from one domain to another while constantly communicating to a remote application (Correspondent Node) with uninterrupted service. This product actually consists of two Mobile IPv6 components: Home Agent and Correspondent Node. The Home Agent is for those customers who need to provide mobility service to Mobile Nodes that administratively belong to them (e.g. service providers). The Correspondent Node is for any IPv6 box owner who wants to provide MIPv6's route optimization support to Mobile Nodes that will directly communicate to the IPv6 box bypassing the Home Agent. Product HPUXMOB 26 Benefits of HP-UX Mobile IPv6: • It's free-of-charge • It's designed for and supports MP scaling • IPSec is also offered from HP and is also free-of-charge • It has participated in conformance testing and multi-vendor verification at TAHI project forums and numerous Connectathon bakeoffs • HP's nettl tracing tool will support Mobile IPv6 packet tracing • Mobile IPv6 product is bundled with TOUR 2.0 and can be obtained through HP's Software depot at the url: www.software.hp.com • It includes easy to use and friendly administrator tools for configuration and administration. Mobile IPv6 A.01.00 is based on the following IETF Standards: • RFC 3775 - Mobility Support in IPv6 • RFC 3776 - Using IPSec to Protect Mobile IPv6 Signaling Between Mobile Nodes and Home Agents Description MobileIPv6 HA/CN Platform 700,800 Version 11.23 OpenSSL - New OpenSSL A.00.09.07-d is based on the open source product OpenSSL 0.9.7d, which offers a generalpurpose cryptography library and implementation of the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols. OpenSSL A.00.09.07-d is fully tested and supported on the HP-UX operating system. OpenSSL A.00.09.07-d is available as a web upgrade on the HP-UX 11i v1 and v2 operating systems. OpenSSL A.00.09.07-d is also available as a Web upgrade on the HP-UX 11i v1 operating system. Supported Security Features OpenSSL A.00.09.07-d supports the following security features: Ciphers Message Digest Public Key Encryption Certificates Encoding OpenSSL A.00.09.07-d Components OpenSSL A.00.09.07-d contains the following components: • The openssl library • The openssl command-line tool Prior to this release, OpenSSL was part of the Internet Express suite of products and the version shipped with Internet Express was OpenSSL 0.9.7c, which is an open source product. Starting with this release, OpenSSL will be released as a web upgrade and will also be available in the application and in the HP-UX Operating Environments media. HP has built OpenSSL A.00.09.07-d with the following options: ./Configure no-idea no-rc5 threads shared zlib no-krb5 -openssldir=/opt/openssl hpux-cc 27 The /opt/openssl/prngd/prngd Daemon OpenSSL A.00.09.07-d relies on random numbers for generating cryptographic keys and digital signatures. A strong random number generator is necessary to provide secure and non-reproducible keys and certificates. You can use /dev/urandom, /dev/random, or /opt/openssl/prngd/prngd to generate random numbers. OpenSSL A.00.09.07-d looks for the random number generator in the following order: 1. /dev/urandom 2. /dev/random 3. /opt/openssl/prngd/prngd If none of the three random number generators are available on the system, OpenSSL returns an error while executing cryptographic functions. To prevent this situation, the OpenSSL A.00.09.07-d product for HP-UX 11i v1 includes the /opt/openssl/prngd/prngd random number generator. The HP-UX 11i v2 28 operating system contains /dev/ random by default; therefore, it does not require /opt/openssl/prngd/ prngd for generating random numbers. Random number generation using /dev/urandom or /dev/random is faster compared to /opt/openssl/ prngd/prngd, but prngd is automatically used by the appropriate OpenSSL function when /dev/ urandom or /dev/random is not installed on the system. HP-UX 11i v1 users can download /dev/random, from the following location: http://www.software.hp.com/porta l/swdepot/displayProductInfo.do?Pr oductNumber=KRNG11I The prngd server reads HP-UX commands from the prngd.conf file, computes random numbers based on certain parameters, and writes the computed random numbers to an HPUX socket located at the /var/run/ egd-pool directory. OpenSSL functions can connect to and read random numbers from this socket. Automatically Generated SelfSigned Host Certificate OpenSSL A.00.09.07-d automatically generates a self-signed host certificate compared to Internet Express OpenSSL version 0.9.7c. An SSL-enabled server requires a host certificate that identifies the server. A certificate is a document that contains details such as the network host's identity, the name and ID of the CA, and expiry date of the certificate. Before you can deploy an SSLenabled server for production, it must acquire a certificate signed by a legitimate Certificate Authority (CA). However, for testing purposes the certificate can also be self-signed, that is, the certificate can be signed by the application generating the certificate. Normally, self-signed certificates are used for testing and certification of SSL-enabled servers. Setting up a certificate hierarchy can initially consume lot of time. Product OpenSSL Description HPUXOpenSSL Therefore, if a self-signed certificate is readily available, you can direct your SSL-server to this certificate. Starting with this release, OpenSSL A.00.09.07-d automatically generates a self-signed host certificate and private key. The host certificate is stored as /opt/openssl/certs/host.pem, and the private key of the host certificate as /opt/openssl/private/ hostkey.pem. The subject name of the certificate is as follows: C=US, ST=CA, L=City, O=Company, CN=localhost/emailAddress=www @localhost You can also generate a self-signed host certificate using the following command: openssl req -new -x509 -out /opt/openssl/certs/host.pem -keyout /opt/openssl/private/hostkey.pem nodes -subj /C=US/ST=CA/L=City/ O=Company/CN=localhost/email Address=www@localhost Platform 700,800 Version 11.23 29 The following new features have been added in HP-UX Secure Shell A.03.71.000: • Enhanced ssh_prng_cmds for random number generation • New escape character (~B) for requesting a pseudo terminal • Support for generating KEX-GEX groups (/etc/moduli) in the sshkeygen file • New AddressFamily option in the Secure Shell client • New configuration directive, UsePAM, to enable or disable PAM support • Support for chroot in SSH and SFTP • VerifyReverseMapping directive replaced with the UseDNS HP-UX Secure Shell provides the configuration directive following features and benefits: • SOCKS V5 support for dynamic • Strong encryption forwarding mode in ssh(1) • Secure tunneling capabilities • Automatic rekeying based on • Several authentication schemes quantify of data • Kerberos 5/GSSAPI • Support for /etc/default/security • PAM for password authentication directives • Public key • Recording bad login attempts • IPv6 support • Fully-tested HP product • Support included with HP-UX Support Agreement • Privilege separation • Enhanced ls support for sftp • SSH protocol enhancements Secure Shell - Update HP-UX Secure Shell A.03.71.000, based on OpenSSH 3.7p2, provides a secure channel for remote communication by transparently encrypting network traffic. HP-UX Secure Shell uses hashing to ensure data integrity and supports several authentication methods. HP-UX Secure Shell supports the SSH-1 and SSH-2 protocols and provides stronger security than the traditional ftp, remsh, telnet, and rcp services. HPUX Secure Shell also includes tools for manually creating public and private keys, storing private keys, and gathering public keys. 30 Improved Secure Shell Performance and Security with HP's Strong Random Number Generator HP's Strong Random Number Generator improves the performance and security of HP-UX Secure Shell. The Strong Random Number Generator product provides a secure, non-reproducible source of true random numbers. HP-UX Secure Shell automatically detects and uses the Strong Random Number Generator if it is installed. Using the Strong Random Number Generator with HP-UX Secure Shell will Product T1471AA Description Secure Shell significantly speed-up program initialization time and improve security because it generates a random number that cannot be influenced. Download Strong Random Number Generator In the HP-UX 11i Version 2.0 operating system, the /dev/random patch is part of the core operating system. Therefore, the random number generation feature is readily available after installing the operating system. Platform 700,800 Version 11.23 Security Patch Check B.02.00 - New b) Support for SSL (tamper-resistant) downloads of the security patch The following features are included: catalog, in addition to the a) Reports all recommended actions previously supported FTP to address HP-UX security bulletins. download. Specifically, Security Patch Check analyzes product updates and The tool is useful to HP-UX System manual actions needed to address Administrators responsible for all relevant security bulletins. keeping systems up to date with Previous versions only analyzed respect to HP Security Bulletins. patches. Product SecPatc Description Sec Patch Check Platform 700,800 Version 11.23 31 SoftBench.- product updated HP Softbench is a complete set of tools for application development using C and C++. It combines innovative project-based software development with an easy-to-use graphical user interface (GUI) and a robust set of development tools that go beyond traditional edit-builddebug functionality. HP Softbench's Project Model and the tight integration between tools, results in developers spending less time interacting with the underlying system and more time focusing on writing high-performance, highquality applications. Product B6445EB B6446EB B6447EB B6448EB B6449EB B6450EB B6451EB B6452EB SBGNU Description C SB LTU -Eng C SB LTU -Jpn C++ SB LTU -Eng C++ SB LTU -Jpn C SB LTU -Eng C SB LTU -Jpn C++ SB LTU -Eng C++ SB LTU -Jpn GNU Src for SB For the September 2004 release we will provide the latest versions of both IPSec (A.02.00) and IPFilter (A.03.05.10) on the HP-UX 11i v2 32 Here are the top changes that are occurring with 11.23 SoftBench that would make you request the update: Softbench is being delivered on 11.23 PA systems for the first time. The permissions on writeable directories in softbench are modified, to allow for sticky bit. This will enhance the security features of the product. The product update applies to System Admin managing UNIX patch updates. Platform 800 800 800 800 700 700 700 700 700,800 Version 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 11.23 OS base. As you know, the key point here is that this release will support both IA and PA hardware platforms. WBEM Services Product - product updated Major features added to the HP WBEM Services 2.0 release include: • WBEM Indication (Event) Support. This release of HP WBEM Services delivers DMTF compliant infrastructure components required for Indication subscription, creation, delivery and reception. • Enhanced Security Features. This release of HP WBEM Services includes a set of security enhancements that increase Product B8465BA T1434BA Description WBEM Services WBEM SDK Miscellaneous The products listed below are supporting this release of HP-UX 11i v2 Update 2. Customers wanting this new version of the OS, will now be able to run it on HP 9000 systems. From a Serviceguard perspective, we will be providing support for mixed supportability and configurability of the CIM Server. • Enhanced Platform Support. This release of HP WBEM Services is now available and supported on a wide variety of HP-UX and Linux Platforms at the url: www.hp.com/go/wbem This update applies to System Admin managing UNIX patch updates and/or planning UNIX hardware updates. Platform 700,800 700,800 Version 11.23 11.23 clusters meaning customers will be able to have HP 9000 and HP Integrity systems running in a single Serviceguard cluster. Specific configuration requirements are available via a white paper at http://docs.hp.com/ 33 ContClusters - New product Product B7660BA T2346BA Description ContCluster Doc ContCluster Platform 800 800 Version 11.23 11.23 Platform 800 700,800 Version 11.23 11.23 Platform 800 Version 11.23 Description SGeRAC SGeRAC Docs Platform 800 800 Version 11.23 11.23 Description Cluster Obj Mgr Platform 800 Version 11.23 Description Serviceguard Servguard Docs Platform 800 800 Version 11.23 11.23 Description Metro Clstr SRDF MetroClstr XP256 ECM Toolkit SG Ext for SAP Platform 800 800 800 800 Version 11.23 11.23 11.23 11.23 EMS- product updated Product B5736DA B7609BA Description HA Monitors EMS Framework SGeFF – New product Product T2389BA Description SGeFF SW SGeRAC – product updated Product T1907BA T1908BA ServGuardAPI Product B8324BA ServiceGuard Product T1905BA T1906BA Toolkits Product B6264BA B8109BA T1909BA T2357BA 34 © Copyright 2004 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Printed in Europe September 2004
© Copyright 2024