BjSrn Rodén (ioden@ae ibm.com) works for IBM System Lab Services and member of IBM WW Executive Advisory Practice, and as SME also part of IAM WW PowerCare Teams fr Availabiliy, Performance, and Securty. Bjom holds MSc, BSc and DipISSc in informatics and BCSc and DipiCSc in Computer Science, is a IBM Redbooks Platinum Author, IBM Certified Specialist ete, and has worked in different roles with architecing, designing, planning, leading, implementing programming, and assessing high availabilty, resibent, secure, and high performance systems and solutions since 1990, Automation with Network Install Manager (NIM) in 1-2-3 easy steps 3n15 IBM Power Systems & System Storage Technical University 26.90 October | Cannes, France Technical Univesity/Symposia materials may not be reproduced in whole or in part without the prior writen permission of IBM.Session Objectives + This session focus on how to deploy and use Network Install Manager (NIM) to simplify update management procedures and operations — How to automate checking for fix availability and update recommendations using FLRT — How to automate fix download using SUMA. — How to automate Software level consistency check with niminv — Also + We will also touch on using VIOS virtual repository images + And of course Bare-Metal install — But not + BigFix Lifecycle with AIX Enterprise Edition 7.2 + PowerSC Trusted Network Connect and Patch Management (TNCPM) objective (© Copyright iM Corporation 2015What is Network Install Manager (NIM) + Network Installation Manager (NIM) provides an effective way to perform various software installation, maintenance and configuration tasks over a network. + ANIM environment consists of at least one NIM server and at least one NIM client — ANIM server provides resources — ANIM client use resources provided by a NIM server NIM Chiebts Ni Server (© Copyright iM Corporation 2015 3Network Install Manager server (quick version) Pen The NIM server has control over resources and their usage for network installation and configuration of NIM clients. — The NIM server allow other NIM servers or clients to be keepers of specific resources, these systems then become NIM resource servers — The NIM server can work in push-mode where the NIM server initiates the actions to be performed on the NIM client, but also in a pull-mode, where the actions are initiated from the NIM client — ANIM database represents resources, machines, and other items as objects and use the AIX Object Data Manager (ODM) to store information about these objects + The NIM database structure is divided into four classes: — Machines, — Networks, — Resources and — Groups. — Bootstrap installation protocol used by NIM server to install a new NIM client + BOOTP > TFTP > NFS (© Copyright iM Corporation 2015 4Basic principles of setting up a NIM Server 1. Design and Plan Which subnets to serve and initial and storage requirements + Single master server model or cascaded resource server model + LPPs, SPOTs, MKSYSBs, staging areas AIX version required Filesystem hierarchy for the NIM server storage Naming convention for NIM objects Backup/Archiving and Restore/Recovery/Availability of NIM server 2. Install and Configure Create and mount the NIM server filesystems Install the NIM server filesets — Configure the NIM server basic setup 3. Test, Verify and Document (© Copyright iM Corporation 2015 5Design and Plan + Single master server or cascaded resource server model — Master + The NIM server where you set up and maintain NIM environment + Can initiate installations, updates, and other operations (push mode) + Object type: master — Client + Can be target for operations initiated from master * Can initiate its own installations or updates (pull mode) + Object type: standalone (other types are: diskless, dataless, wpar) — Resource server + Amachine that holds NIM resources + By default the master is the only resource server + Astandalone client can also serve as a resource server (© Copyright iM Corporation 2015 6Design and Plan + AIX level for the NIM server — The NIM master must not be at a lower level than any client Filesystem hierarchy for the NIM server storage — Start with + [tftpboot + /export/Ipp_source + lexport/spot + Jexport/images Valid NIM name characters, less than 40 char length, include the uppercase and lowercase letters of the alphabet, the numbers 0-9, hyphen (-), exclamation mark (!), and the underscore character (_) — Names for Ipp_source and spot objects should indicate the code level, such as: ~ Ipp- => Ipp7100-01 or Ipp6100-08 — spot- spot7100-01 or spot6100-08 — net___ => net_10_1_1__24 bttp://publib. boulder. ibm. com/infocenter/aixiv7+/topicicom.ibm.aix installidoc/insgdrf/add|_name_reqmnts.htm (© Copyright i Corporation 2015 7Design and Plan + Backup/Archiving and Restore/Recovery of NIM server content — Archive NIM client MKSYSB resources (IBM Tivoli Storage Manager) — Archive or save copy to secondary server of primary LPPs and SPOTs — Create ISO from NIM servers mksysb and archive or save of to VIOS + Availability requirements of NIM server functionality — Ifthe NIM server is used as integral part of daily operations + Design and plan how to handle unplanned outage (RTO, RPO, MTTR) + Determine which operations are critical and alternative methods to perform + Not only for basic NIM functionality, but for recovering servicing existing environment + Usually enough to verify ahead of critical service windows when needed (© Copyright iM Corporation 2015 eInstall and Configure * Create and mount the NIM server filesystems — SMIT: smitty storage - CLI: * crfs -v jfs2-g -a size=64M -m /tftpboot -A yes -p rw -a logname=INLINE + erfs -v jfs2 -g -a size=4G -m /export/Ipp_source -A yes -p rw —a logname=INLINE. + erfs -v jfs2 -g -a size=1G -m /export/spot -A yes -p rw -a logname=INLINE + erfs -v jfs2 -g -a size=6G -m /export/images -A yes -p rw —a logname=INLINE + Install the NIM server filesets — Filesets for server + bos.sysmgt.nim.master + bos.sysmgt.nim.spot — Filesets for clients * bos.sysmgt.nim.client — SMIT: smitty install - CLI: + installp -acgXd bos.sysmgt.nim.master bos.sysmgt.nim.spot (© Copyright iM Corporation 2015 °Install and Configure PE + Configure the NIM server basic setup — SMIT: smitty nimconfig = CLI: 4. nimconfig -a netnam: =master_net -a pif_name=en0 -a netboot_kernel=mp ~a + Ipp_source -a server=master -a location=/export/lpp_source/lpp7100- mnt Ipp7100-01 fe -t spot -a server=master -a location=/export/spot ~a source=Ipp7100-01 - a installp_flags=-aQg spot7100-01 — The first NIM client = nim -o define +t standalone -a if1="master_net Ipar2client 0 ent0" Ipar2client http://publib.boulder.ibm.comiinfocenter/aixiv7r1 topicicom.bm.aix.emds/doclaixemds4/nim.htm. (© Copyright 18M Corporation 2015 10Managing and Installing NIM clientsManaging and Installing NIM clients (AIX) Server initiated operations, such as: — Installing a NIM client from LPP_SOURCE — Installing a NIM client from SPOT — Installing a NIM client from MKSYSB. — Running customizing scripts on the NIM client — Create a NIM machine group resource Client initiated operations, such as: — Listing all available resources for the client — Allocating an Ipp_source to the client — Deallocate previoiusly allocated resources for the client — Performing an update_all (cust) operation from the client — Resetting the NIM client state — Deallocate a resource from the client — Rebuild and recover a NIM client /etc/niminfo file (© Copyright iM Corporation 2015 2Installing a NIM client + Installing a NIM client from LPP_SOURCE (push) — Allocate resources and execute the NIM installation + Allocate resources: — nim -0 allocate -a spot=spot7 100-01 -a Ipp_source=Ipp7100-01 Ipar2client + Execute installation: — nim -0 bos_inst -a source=rte -a installp_flags=agX —a accept_licenses=yes Ipar2client — Activate the partition from the HMC and start the install + Open a console window to the partition from the HMC, and step through the SMS menues, or use the Ipar_netboot command — Ipar_netboot -t ent -s auto -d auto -S -G -C * Activate the partition if using SMS menues manually — chsysstate -m -r Ipar -f -o on -n You can also use the Ipar_netboot command to start LPARs and acquire the 48-bit Ethernet Media Access Control (MAC) address through Open Firmware (after completion the LPAR will be shutdown): Ipar_netboot -M -n -t ent "" "" "“" (© Copyright iM Corporation 2015 8Installing a NIM client + Installing a NIM client from SPOT (push) — Allocate resources and execute the NIM installation + Allocate resources: — nim -0 allocate -a spot=spot7 100-01 -a Ipp_source=Ipp7100-01 Ipar2client + Execute installation: — nim -0 bos_inst -a source=spot -a installp_flags=agX Ipar2client — Activate the partition from the HMC and start the install + Open a console window to the partition from the HMC, and step through the SMS menues, or use the Ipar_netboot command — Ipar_netboot -t ent -s auto -d auto -S -G -C + Activate the partition — chsysstate -m -r Ipar -f -o on -n (© Copyright iM Corporation 2015 “Customizing a NIM client + Running customizing scripts on the NIM client (push) — Create the script object and save it on the NIM server — Define the script to the NIM server + nim -o define -t script -a server=master -a location=/export/scripts/node_cust node_cust — Allocate the script to the NIM client + nim -0 allocate -a script=node_cust Ipar2client — Execute the script on the NIM client from the NIM server: * nim -o cust Ipar2client (© Copyright iM Corporation 2015 6Grouping NIM clients + Create a NIM machine group resource — Define the group, in this case with one member + nim -0 define -t mac_group -a add_member=Ipar2client Ipar7100group + Perform NIM operations on the machine group — Use the group name instead of the machine name (most operations) (© Copyright iM Corporation 2015 16Managing AIX clients (LPARs) PE Client initiated operations — Listing all available resources for the client (pull) + nimelient -| -L Ipar2client — Allocating an Ipp_source to the client (pull) + nimelient -o allocate -a Ipp_source=Ipp7100-01 — Deallocate previoiusly allocated resources for the client (pull) + nimelient -o deallocate -a Ipp_source=Ipp7100-01 — Performing an update_all (cust) operation from the client (pull) + nimelient -o cust -a Ipp_source=Ipp7100-01 -a fixes=update_all — Resetting the NIM client state (pull) + nimelient -Fo reset — Deallocate a resource from the client (pull) + nimelient -o deallocate -a Ipp_source=Ipp7100-01 — Rebuild and recover a NIM client /etc/niminfo file (pull) + niminit -a master=Ipar1 -a name=Ipar2client (© Copyright iM Corporation 2015NIM server and client logfiles + NIM creates log files with information and output from client installations and operations — Warladm/rasinimlog + Analog format file stored on the NIM master used to log console output sent to stderr by NIM operations — alog -0 -f /var/adm/ras/nimiog | tall Ivarladm/rasinim installp * Plain text format log file stored on a NIM client containing output from NIM installp operations ivarladm/ras/bosinstlog * An alogformat file used to log output from the BOS install program (stored on a client) — alog -o -f /varladm/ras/bosinstlog | tail Ivarladmlras/nimsh.log + Plain text log file on a NIM client containing output from the nimsh daemon (if running) nim -o showlog + Example CLI: nim -o showlog -a log_type= -a verbose=<1-5> + LogType can be: boot, bosinst, devinst, Ippchk, nimerr, niminst, and script hitp:/publib. boulder bm. convinfocenter/pseries/vSr3/topic/com ibm aix installdoctinsgdrtinim_op_showog.him (© Copyright iM Corporation 2015 8Clone AIX system imagesClone AIX system images + Backing up and cloning a system to NIM server by mksysb — Make sure that the receiving filesystem can store the mksysb image and that the ulimit is also set large enough (default 2GB) — Determine the backup image storage space requirement using the size_preview option to the mksysb operation: + nim -0 define -t mksysb -a server=master -a source=Ipar2client -a size_preview=yes -a mk_image=yes -a mksysb_flags=-! -a location=/exportimages/mksysb.lpar2client mksysb_Ipar2client — Use the NIM server to create and manage a NIM clients mksysb's: + nim -o define -t mksysb -a source=Ipar2client -a server=master -a location=/exportimages/mksysb.Ipar2client mksysb_Ipar2client — The NIM alternate disk migration (nimadm) utility requires that the bos.alt_disk_install are installed on the NIM client, then you can use alt_disk_install from the NIM server: + nimadm -j rootvg2 -c Ipar2client -s spot7100-01 -1|pp7100-01 -d "hdisk1" -Y http://publib. boulder.ibm.com/infocenter/aix/v7r1/topic/com. ibm.aix.cmds/doc/aixcmds4/nimadm.htm (© Copyright iM Corporation 2015 20Clone AIX system images — alt_ disk_copy (1/2) + The alt_disk_copy is a built-in AIX utility that allows cloning of a running rootvg — Typical uses are + upgrades that effect the running of AIX * cloning of disks for migration * online backups of rootvg To clone non-mirrored rootvg running 7100-00 rootvg to hdisk3, then apply updates from /updates to bring the cloned rootvg to a 7100-01 level: — alt_disk_copy -d hdisk3 -F 7100-01_AIX_ML -| /updates — The bootlist will be set to boot from hdisk3 at the next reboot/IPL. To clone non-mirored rootvg running a lower technology level to hdisk1 and update that clone with the latest maintenance level that is on cdO, run the following command: — alt_disk_copy -b update_all -I /dev/cd0 -d hdisk1 To clone the running mirrored rootvg to hdisk3 and hdisk4, and execute update_all on all updates from /updates: — alt_disk_copy -d "hdisk3 hdisk4" -b update_all -| Jupdates — The bootlst will be set to boot from hdisk3 at the next reboot. To clone mirrored rootvg to hdisk3 and hdisk4 for cloning for migration — alt_disk_copy -d hdisk3 hdisk4 (© Copyright iM Corporation 2015 aClone AIX system images — alt_ disk_copy (2/2) * Once the copy has completed, you will be presented with two rootvg volume groups: — rootvg ~ altinst_rootvg + Where altinst_rootvg is the cloned non-activelvaried off rootvg. The cloned rootvg has all its logical volumes prefixed with the name ‘alt’. The boot list is also changed to boot off altinst_rootvg. If the system is now rebooted and when the system comes back up, the original rootvg will become: — old_rootvg The original altinst_rootvg becomes: — rootvg If you decide to reboot off the old_rootvg, when the system comes back up, the old_rootvg becomes: — rootvg The rootvg becomes: — altinst_rootvg Destroy the newly cloned disk (we rebooted off old_rootvg; it now becomes altinst_rootvg) — alt_rootvg_op -X altinst_rootvg (© Copyright iM Corporation 2015 2Clone AIX system images — alt_disk_mksysb + Allows the users to install a mksysb system backup to a separate disk without taking the machine down for an extended period, thus mitigating outage risk. — alt_disk_mksysb is the only method available to restore a backup containing multibos Base Operating System (BOS) instances. — To install a mksysb image on hdisk3 and hdisk4 , then run a customized script (/tmp/script) to copy some user files over to the alternate rootvg file systems before reboot: + alt_disk_mksysb -m /mksysb_images/my_mksysb -d "hdisk3 hdisk4” -s /tmp/script — Once the copy has completed, you will be presented with two rootvg volume groups: + rootvg + altinst_rootvg + Where altinst_rootvg is the cloned non-active/varied off rootvg. — The cloned rootvg has all its logical volumes prefixed with the name ‘alt’ The boot list is also changed to boot off altinst_rootvg, If the system is now rebooted and when the system comes back up, the original rootvg will become: + old_rootvg — The original altinst_rootvg becomes: + rootvg (© Copyright iM Corporation 2015 aManaging a Software repositoryManaging a Software repository using SUMA (1/3) PE + The Service Update Management Assistant (SUMA) allows you to set up the capability of automating the download of maintenance fixes on a system Prior to running the suma command to download updates, any authentication should be performed to ensure the system has internet access (SUMA can be configured to use proxy) Notes: — Install the bos.suma fileset — Use either the suma command or the SMIT suma fastpath — Use the NIM master for SUMA operations — To verify the system is connected to the intemet, enter the following command (performs a ‘Preview’ download with no files being downloaded): + suma -x -a Action=Preview -a RqType=Latest — Ifthe following message is returned, the system do not have access to IBM servers over internet. * 0500-013 Failed to retrieve list from fix server. http: //publib. boulder. bm.com/infocenter/aix/v7+1t/topic/com ibm. aix.cmds/doc/aixemdsS/suma.htm (© Copyright iM Corporation 2015 2sManaging a Software repository using SUMA (2/3) + Create a task which will send an email notification when a specific TL are available, checking once a month: — suma -s “30 0 4 * *" -a Actior FilterML=7100-01 -a Repeat NotifyEmail="root@localhost” Execute the download when the TL is available: — suma -x -a RqType=ML -a RqName=7100-02 -a FilterML=7100-01 -a DLTarget="/export/lpp_source/7100-02 ' View defined SUMA tasks: — suma-| Unschedule defined SUMA tasks (in this case #1) — suma-u1 Delete a defined SUMA task (in this case #1): — suma-d1 review -a RqType=ML -a RqName=7100-02 -a -a DLTarget="/export/ipp_suma/7101-02' -a (© Copyright iM Corporation 2015 6Managing a Software repository using SUMA (3/3) + To download a specific TL, type: — suma -x -a RqType=TL -a RqaName=6100-06-00-1036 -a FilterML=6100-05 To download a specific SP, type: — suma -x -a RqType=SP -a RqaName=6100-06-03-1048 -a FilterML=6100-05 — Specifying FilterML=6100-05 in the above command indicates the system is at the 6100-05 level, such that TL6 (6100-06-00-1036) will be downloaded in addition to TL6 SP3 (6100-06- 03-1048). Had FilterML=6100-06 been specified, only TL6 SP3 would have been downloaded. To download a specific PTF: — suma -x —a RqType=PTF —a FilterML=6100-06 —a RaName=U836082 Note: This example will utilize SUMA task defaults, as displayed by suma -D, for any Field=Value pair not specified on the command line. If the PTF is not available for individual download, the following message will be returned: — 0500-058 The update can not be downloaded individually. A TL or SP must be requested (© Copyright iM Corporation 2015 aHTTP GET Fix Level Recommendation Tool (FLRT) * You can use WGET with a search string using the FLRT QUERY URL: http://www! 4.sofiware.ibm.com/webapp/set2/firiquery + Examples with one item per command (can be combined) — OSLEVEL 1. wget "http:/ww14.software.ibm.com/webapp/set2/fitiquery format=text&sseqSu=5300-1 1-01-0944" -O OSLEVEL.txt 2, cat OSLEVEL Dt aix~5300-11-01~release~2009.11.04~eosps~2011.11.03 aix~8300-11-01~update~5300-11-08~release~2011.10.21~eosps~201 1.11.03 aix~5300-11-01~upgrade~5300-12-08-release~2013.05.31~eosps~2012.04.23 aix~5300-11-01~note~18M no longer provides new Service Packs for this Technology Level. IBM recommends that you upgrade to a newer Technology Level at your earliest convenience. = IOSLEVEL 1, wget "http://www14, software. ibm.com/webapp/set2/firt/query 7format=text&sgsB8jy=2.2.3.10" -O IOSLEVEL. txt 2, cat JOSLEVEL tet Vios~2.1.3.10-release~2010.05,04~eosps~2012.09.30 vios~2.1.3.10-upgrade~2.2.2.2-release~2013,02.20-e0sps~2015.10.01 (© Copyright iM Corporation 2015 cySoftware level consistency checkSoftware level consistency check — niminv (1/2) + The NIM niminv operations allows system administrators to gather, conglomerate, compare, and download fixes based on installation inventory of NIM objects, providing an easy way to ensure their systems are at an expected level. — Gather installation inventory of several NIM objects. — Conglomerate installation inventory of several NIM objects. — Compare installation inventory of several NIM objects. — Download fixes base on the installation inventory of several NIM objects. The niminv command can use any NIM object that contains installation information. Examples of such objects include standalone client objects, SPOT objects, Ipp_source objects and mksysb objects. Using the niminv command has the following advantages: — Hardware installation inventory is gathered alongside the software installation inventory. — Data files are saved with a naming convention that is easily recognizable. — All NIM objects that have installation inventory can be used. To compare installation inventory: — niminy -o invemp -a targets=object ,object2... [-a base=object | any ] [-a location=path ] (© Copyright iM Corporation 2015 0Software level consistency check — niminv (2/2) + Software level consistency check using niminv — invemp option: Compare installation inventory of several NIM objects # /usz/sbin/aiminy -o invemp ~a targeten’aix13,aix19' jen! aixi3' -2 locations! /tmp/123" Comparison of aixl3 to aixl3:aix19 saved to /tmp/123/comparison.aixl3.aixi3:aix19.120426230401 Return Status = SUCCESS # cat /tmp/123/comparison.aix13.aixl3:aix19.120426230401 nae base Arxerpm-7.1.0 a 1.0.1-1 same sane bos.6ébit 74.0.1 same sane bos acct 71.0.0 same sane bos adt base Talolo same sane bos adt include alot. same sane bos adt.1ib Talolo same sane bos. rte 74.0.1 same sane comparison base = aix13 aixld aia name not in system or resource sane = name at sane level in system or resource http://publib. boulder.ibm.com/infocenter/aix/v7r /topicicom .ibm.aix.cmds/doc/aixcmds4/niminy.htm, (© Copyright iM Corporation 2015 “Installing from VIOS Virtual Media RespositoryInstalling from VIOS Virtual Media Respository * On Virtual /O Server — Create a Virtual Media Repository large enough to hold install images + mkrep -sp vmrepyg -size 106 — Create a Virtual Optical image * mkvopt -file /mnt/aix6100-08-01-1245.iso -name aix6100-08-01-1245 -ro — Add a virtual device to AIX partition over a VSCSI adapter + mkvdev -fbo -vadapter vhost0 — Connect repository image with the the virtual device + loadopt -disk aix6100-08-01-1245 -vtd vtopto + On HMC activate the partition and start the install — Open a console window to the partition from the HMC, and step through the SMS menus ‘One way to create ISO from MKSYSB: 1. mksysb $PWD/aix5300-12-02-1036.mksysb 2. mkdvd -SRI $PWD -m $PWDiaix5300-12-02-1036.mksysb 3.__mv ed_image_* $PWD/aix5300-12-02-1036.iso http://pic. dhe. ibm. com/infocenter/powersys/v3r1mS/topic/ipheg/iphegprintthis. htm. (© Copyright iM Corporation 2015 aAdding an AIX partition as NIM client to NIM server * On NIM server — Verify the NIM server is configured with client_reg=yes, if not enable: + nim -o change -a client_reg=yes master = On AIX partition — Verify bos.sysmgt.nim.client is installed + Islpp -I bos.sysmgt.nim.* — Verify AIX partition can communicate with the NIM server * ping or ssh etc — Configure the NIM client package using the nimint command, in this example using the Partition name as reported by the uname command (assuming interface en0 is the appropriate network): + niminit -a name=(uname -L|cut -f2 -d" ") -a pif_name=en0 -a master= http://publib. boulder.ibm.com/infocenter/aix/v7r 1 /topic/com .ibm.aix.cmds/doc/aixemds4/niminit. htm, (© Copyright iM Corporation 2015 “System Q Software & FirmwareIBM Electronic Support IBM Electronic Support SS _.. Easy, Fast, Smart. Your customized support experience. overview Preventprobiems Findinfo. DMCS Treuplesnoot Work with Support _Leammore sun What is IBM Electronic Silliee, Support? ¥ % pares oat emivo aur § flesapd engegfiratiet ity = + “ The Year's Ten Best 1M electronic support can help you: Web Support Sites rein slams mppert Se Fit imation IBM Electronic Support: Voted one of "Ten Best heifiern Web Suppor Sits" tis your Read mote, “Troubleshoot ables Complete, customized support Wot wth 8M Spat negenaL ie Visi the 10M Support Portal m.com/supportlelectronicsupport! (© Copyright iM Corporation 2015 6IBM Support Portal Support Portal ey : Sy Product finder im Browse fore product w= My products @ Share your list of recently viewed pri aye Search support Tips a My support programs Common support links @Signinto access @Signin Aocoldrated Vee Program @Service requests for hardware and IBM Call Home Web beta softwere (PMs) Maintenance end technical supp Sars My contracts ee MWVinvertory. “ ‘arenas ©suppot notiications @suppot resistrations — se | @directory otwerice contacts i Learn more about my suppe um Site assistance Deurent site availabilty http: /Awww-947..ibm.com/supportientry/portal (© Copyright iM Corporation 2015 aIBM Support Portal > Fix Central Related links For addtional information, click onthe fllowing link Torin entral mobie «Getting started wth Fix Central, tay product history Find product Select product > 9117-¥MD AMT80, A > s17oMHO Select the product below. > s19FHE ‘When using the Keyboard te navigate the page, use the Alt and dawn arrow keys to navigate > Power Hardware the selection lists, Management Console (eRe 30,4) Product Group™ > Power Hardware Management Console ¥ (ere 20, aN) ty dowmload history hitip:/wwew-933.ibm.com/support/ixcentral/ (© Copyright iM Corporation 2015 EyService Strategy Details and Best Practices ‘April 2015 IBM AK Operating System Senice Strategy Details and Best Practices February 2015 POWER? Performance Best Practices January 2015 POWERS Perormance Best Practices ‘August 2014 Transitioning to POWERS: Migration Paths for AK systems to POWERS: Upgrading AK rom 5307.1 Fy 2011 Managing AK Updates using SUMA, NIM, and ADK Senice Tools Hardware and firmware May 2011 18M Power 770/780 and 795 Servers CEC Hot Add & Repair Maintenance Technical Oveniew' For more information on Service Strategy Details and Best Practices: http:/www 4. software ibm. com/webapp/set2/sasit/besthome. html (© Copyright iM Corporation 2015 EyFix Level Recommendation Tool (FLRT) Power systems PurePower uve Panition Mobiity Other systems Load saved FLAT Vulnerability Checker ine Feedback The Fix Lavel Recommendation Tol (FLRT) provides cross product ficracommendalions for IBM products. Use FLRT to plan upgrades of key co vorty the Curent heath ofa system. Enter your curent levels of frivare and so 2 recommendation. When planning upgrades, ener the I to use, so you can vty levels and compatibility a Power systems © Power © PureFiex Sewer Machine-Type-Model + Expand all — Collapse all \vmat's naw ia FLAT sing FLAT Detorining tools Seristng help Vutnoratity hecker Suppotes prosucts 08 Secunty Tables 0S HIPER Tables > HIPERYSecuny COV fle See Fix Level Recommendation Too! (FLRT) web site for cross-product compatibility information and latest fix recommendations: http:/Awww14.software.ibm.comwebapp/set2/firy (© Copyright iM Corporation 2015Fix Level Recommendation Tool — FLRT Lite PEI PTT FLRT Lite Please choose ® product > Power, Purlex and Power Blak PowerHA Systembi uster Systems Managemen eneral Parallel Fil General Paral Fl General Para Fil eneral Parallel Fil ALeveler PParalel Engineering and Scientific Subrouti Parale Ervironment Developer Eton for AD Pralel Environment Runtime Edition for AD PoweiVP Standard Edtion od Hat Entercge Linux SUSE Linux Enterprise Sewer Hardware Management Console Recommended Update versio sP1 VZBT90 SP1 none venr vr R7s0 SPI Recommended Update Zioo.03.08 Recommended Update 2233 sone (© Copyright iM Corporation 2015 Recommended Uparade vB Re10 SP ya Rein SP ve Renn spt Recommended Upgrade. 7100-03-93 Recommended Upgrade. Release Date 2ata.i4.48 20140908 2nia06 10 2ni40a 43 20140625 Release _EoSPS Dato Date aoiaaiit 20161119 mooe3 20161119 aoigo41a 20161119 2131119 2016.11.19 Release EaSPS Date Date goat 20161001 20140812 20161001 20140418 20161001 “Minimum NIM master levels for VIOS clients FLAT resources Wats nowin FLAT Using FLT Determining Meets Seaisteg ein Yunecaitty Checker Supported pros Other resources > System Sonate Map: 3 MOS to NM Master mapping > AOVIO8 Seeunty Tables ‘Minimum NIM master levels for VIOS clients HFusing NIM to backup instal or update @ VIOS partion, the NIM master must be greater or equalto the levels shown below ‘VIOS Release Vi0S Level ‘Minimum NIM master level ios 22 p08 22350 51000805 71000305 s1o003.04 7100.03.04 s10009.0 7100.03.03, 1000802 nioo93c2 100.0801 7100930) 4610009 710093 (© Copyright iM Corporation 2015 aSubscribe to IBM bulletins and notifications + Regularly review IBM bulletins for software update advisories, High Impact and security issues — My notifications > Power server bulletins = My notifications > Subscribe FLASHES TECHNOTES — _APAR update subscription (© Copyright 2M Corporation 2015 “aMy notifications > Power server bulletins Information Tae Heading Power server bulletins Terie s Moth 4 Information Heading _Selectone, Butiesins Topic security advisories EL Version 5.3 015.1021 Vunerablites in OnenSSH aflct ADS HMC updetes ‘Cluster on POWER, 2016.10.16 UPDATE Vulnerability in netstat aflects ADs jain on POWER, Month Microcode upd 12 y in netstat af LUnoe on Power Installation, Service end Productvily Tools . Blue Gene. There are no bulletin for this heading, topic and month, Expansion Pack 205.1018 SSH 6 Opt 10 a 201) now aval ‘Support Center Announcements month See My notifications web site for information bulletins: http:/hwww14 software bm.com/webapp/set2/subscriptions/onvdg (© Copyright iM Corporation 2015My notifications > Subscribe STS a APAR subscriptions My notifications = Productnotificatins _APARS ponent 1D 57 smponent 10 576544000 talus for APAR IV25682 Subscribe to notifications Product lookup: eee # Browse for a product #9119. MHE ystems Product subscriptions 4.29728 resus in eney ore duct Notifications RSS/Atom feed Document types > ro (© Unsubscribe . (© Unsubscribe AKG! + Vide (© Unsubserive aKrt > view © Unsubscit See My notifications web site for information bulletins: hittpssiwww-947. bm, com/systems/supportimyview/subscription/css. ws /folders?methodName=listMyFolders (© Copyright iM Corporation 2015APAR update subscription How to subscribe to APAR updates The following options can be used to subscribe for APAR update notification through My Support 1. Troubleshooting or APAR category option + This option provides notification of new APARS only. + When you create a subscription for a product, select Troubleshooting or APAR (Authorized Program Analysis Reports) on the Subscribe tab "Document types’. Ifthe APAR option is not available for your product, you can subscribe by using the APAR or Component ID option. 2. APAR or Component ID option + After you find a specific APAR document, you can select a subscription option from the Subscribe to this APAR section atthe top of the APAR page. + Subscription options can include one or both ofthese selections: — Notify me when this APAR changes Notifications are based on a specific APAR. Tis opion's only avaiable the APAR is “open or “closed” wath atx pending, You ae neifled as the APAR progresses throughs ifecyce. Notify mo whan an APAR fortis component changes Notiication Is based on a component iD and includes all APARS associated with the selected ‘Component. customer need track changes to every APAR forthe produ. use his option. YoU are noted as each APAR progresses through is Hecyie including ven a PTF becomes avaiable, (© Copyright iM Corporation 2015 aMoreMaintain configuration compliance with ARTEX + AIX Runtime Expert (ARTEX) checklist profiles in XML + artexdiff can check and compare with the expected checklist profile values + attexset can set the tunable attribute to the checklst profile values Expected Wj Actual Bjorn Rodén © Copyright aM Corpration 2018 “aAIX 7.2 Live Update for iFixes using NIM DOME + Using NIM master to perform AIX 7.2 Live Update for iFixes + Using NIM live_update_data resource lvup — nim-o cust-a live_update=yes -a live_update_data=Ivup-a Ipp_source=Ipp7200 -a fileset=1Z12345.140806.epkg.Z client1 + Using the client's /var/adm/ras/liveupdate/Ivupdate.datafile — nim-o cust-a live_update=yes -a fileset=1Z12345.140806.epkg.2Z client Usage ‘Same method af applying Naw "live update” option recy teens command (© Copyright iM Corporation 2015 49PowerVM Provisioning Toolkit + Accelerate deployment of AIX partitions and Virtual I/O Servers for Power Systems through seamless integration with PowerVM and IBM virtualization PowerVM Provisioning interfaces Wont + Integrated with NIM master server this VO a fi Rc Syme http /www-01ibm, com/common/ssi/cai-bin/ssialias?infotype=PM&subtype=SP&ntmifid=QLS12349USEN (© Copyright 18M Corporation 2015References and further reading + Knowledge Center = hitpv/wi.01 ibm, com/supportknowledgecenter/ssw_aix 71/co tani intro.htm — htp:/immw-01 ibm com/supporthknowledgecenter/ssw_aix 71/com bmaixinstalVinsadrt whatsnew.him + NIM from A to Z Redbook (oldie but goldie) —tp:itw.redbooks ibm convabstracts/sg247296 html * YouTube — http: youtube. com/user/IBMSLST — http:wnw.youtube.comwatch?v=6md1g050CNQ + DeveloperWorks — http:w.ibm.convdeveloperworks/aixibrary! 1M ibm.aix NIM from A to Z in AIX 5L (© Copyight IBM Corporation 2015 osThank you — Tack ! Bjorn Rodén roden@ae.ibm.com http:/Awww.linkedin.com/in/roden (© Copyright 2M Corporation 2015 aContinue growing your IBM skills ibm.com raining provides a ‘comprehensive portfolio of skills and career , accelerators that are designed to meet all your training needs. + Training in cities local to you - where and when you need it, and in the format you want ~ Use IBM Traiping Search to locate pubic raring classes near to you with our hve Global Training Providers = Private training is also available with our Global Training Providers Global Knowledge. + Demanding a high standard of quality — view the paths to success IN¢RAM: = Browse Training Paths and Certifications to find the ‘course that is right for you + Ifyou can'tfind the training that is right for you with Lear Quest our Global Training Providers, we can help. = Contact IBM Training at dommc@usibm.com ® ©Copyright aM Corporation 2015,IBM Systems Lab Services and Training (© Copyright 2M Corporation 2015