IBM AIX 7.2 with Technology Level 5 Release Notes

The latest installation hints and tips are available at the IBM® Power® server bulletins website.

There are instances where the software license agreements (SLA) might not be displayed correctly. In this event, the license agreements can be viewed for all languages at the Software license agreements website.

In AIX® 7 with 7200-05, a separate Software Maintenance Agreement (SWMA) acceptance window displays during installation immediately after the license acceptance window. The response to the SWMA acceptance (accept or decline) is stored on the system, and either response allows the installation to proceed, unlike license acceptance, which requires an acceptance to proceed.

The SWMA acceptance window is displayed during a New Overwrite or Preservation installation from base CD media.

For base CD media New Overwrite or Preservation installations, if a nonprompted installation is wanted, the ACCEPT_SWMA field in the control_flow stanza of the bosinst.data file must be set to yes (to accept the SMWA terms) or no (to decline the SWMA terms). The ACCEPT_SWMA field is set to blank by default.

For NIM installations, if licenses are accepted either from the choices that are made when initializing the installation, or by using the ACCEPT_LICENSES field in a customized bosinst.data file, SWMA acceptance is constituted.

You can download AIX fixes and search technical databases (including APARS and Tips for AIX administrators) at the Fix Central website.

Security subscription services are available at the My notifications website.

After you subscribe to the AIX security advisories, you will receive the advisories by email when they are published.

Only 64-bit Common Hardware Reference Platform (CHRP) machines that are running selected POWER7®, POWER8®, POWER9™, and Power10 processors that implement the Power Architecture® Platform Requirements (PAPR) are supported.

prtconf | grep 'Processor Type'

AIX 7 with 7200-05 requirements for minimum current memory vary, based on the configuration.

A minimum current memory requirement for AIX 7 with 7200-05 is 2 GB.

AIX 7 with 7200-05 requires the minimum current memory requirement to increase as the maximum memory configuration or the number of devices scales upward, or both. Larger maximum memory configurations or extra devices scale up the minimum current memory requirement. If the minimum memory requirement is not increased along with the maximum memory configuration, the partition hangs during the initial program load (IPL).

AIX 7 with 7200-05 creates a 512 MB paging space (in the /dev/hd6 directory) for all new and complete overwrite installations.

AIX Version 7.2 requires a minimum of 20 GB of physical disk space for a default installation that includes all devices, the Graphics bundle, and the System Management Client bundle.

SAS RAID controllers and Fibre Channel controllers support attached arrays and disks with capacities, which exceed 2 TB. The maximum supported capacity (beyond 2 TB) is limited by either the attached storage subsystem or the higher-level logical storage management.

For more information about SAS RAID controllers, see the SAS RAID controller for AIX topic.

For more information about AIX capacity limitations for logical storage, see the Limitations for logical storage management topic.

# installp -e /tmp/install.log -agXd software_source bos.dsc

The minimum size of the boot logical volume is 24 MB. If your current boot logical volume is 16 MB or less, the installation process tries to increase it. However, partitions in a boot logical volume must be contiguous, and within the first 4 GB on the disk. If your system does not have free space that meets these requirements, a message indicates that there is not enough space to expand hd5 (the boot logical volume).

To install AIX 7 with 7200-05, follow the instructions in the Installing the base operating system topic.

Network Installation Management (NIM) includes a readme file that is installed with the NIM Master bos.sysmgt.nim.master file set. The path name of the file is /usr/lpp/bos.sysmgt/nim/README.

IBM software development kit (SDK) and Java™ Runtime Environment (JRE) for AIX, Java Technology Edition is released in JavaV.x filesets, where V represents the version of Java, such as Java 8, and x is the individual file set, such as Java8_64.sdk.

Only Java Version 8 is installed for new overwrite or preservation operating system installation. For these installations, the PATH variable in the /etc/environment file points to java8_64. If you upgrade to AIX 7 with 7200-05 or perform an operating system migration, all previous levels of Java remain on the system, and the /etc/environment PATH variable is not changed. Later, if you remove the previous levels of Java (Java Version 5, Java Version 6, and Java Version 7), then you must change the /etc/environment PATH variable to point to java8_64.

It is recommended to use java8_64. There is no support for security vulnerabilities in Java Version 5 and Java Version 6.

To check whether a more recent service refresh is available for a version of Java, see the AIX Download and service information website.

bos.xerces.lib

This fileset contains a new library that is called libxerces.a in the /usr/lib directory. While installing the AIX operating system, you must first install the bos.xerces.lib fileset before installing the bos.net.ipsec.keymgt and bos.aixpert.cmds filesets because the libxerces.a library of the box.xerces.lib fileset is used by the IP Security (IPsec) and AIXPert technologies. To include the box.xerces.lib fileset in the LPP_SOURCE directory, you must use the bos.sysmgt.nim fileset.

bos.decrypt, bos.kmip_client

These filesets are required for logical volume encryption. These filesets are not installed automatically when you run the smit update_all command or during an operating system migration operation. You must install it separately from your software source such as a DVD or an ISO image.

bos.net.tcp.cdp

This fileset contains new commands cdpd and cdpctl that are used to receive Cisco Discovery Protocol (CDP) messages for discovering other Cisco devices that are directly connected to the AIX logical partition. The cdpd command runs as a daemon to receive CDP packets that are sent by the resource controller. The cdpctl command controls the CDP daemon by configuring the network interface that is physically connected to the Cisco device.

bind.rte

This fileset contains BIND 9.16 support for AIX operating system that is available in AIX 7.2, Technology Level 5 Expansion Pack. For more information, see AIX 7.2 with Technology Level 5 Expansion Pack Release Notes®.

The core code for each original fileset is in the bos.net.tcp.client_core and bos.net.tcp.server_core filesets. Requisites for software that is shipped with the AIX operating system (the bos.net.tcp.client and bos.net.tcp.server filesets) are changed to the bos.net.tcp.client_core and bos.net.tcp.server_core filesets. More requisites are added to the other new fileset as needed.

The original filesets still exist to satisfy any requisites from other software. The original filesets have requisites to all the new filesets to ensure that all the requirements are met.

To remove any of the new filesets, you must first remove either the bos.net.tcp.client fileset or the bos.net.tcp.server fileset. To remove the bos.net.tcp.client fileset, the bos.net.tcp.server fileset, or a new fileset, run the lslpp -d fileset_name command. If no other software has requisites to the fileset that you want to remove, the removal is possible.

During an operating system migration, code changes occur, so that all the system configuration and user configurable files, which were owned by the bos.net.tcp.client and bos.net.tcp.server filesets, are merged by the new filesets that now own the files.

The list of new filesets follow:

• bos.net.tcp.client_core
• bos.net.tcp.server_core
• bos.net.tcp.bind
• bos.net.tcp.bind_utils
• bos.net.tcp.bootp
• bos.net.tcp.dfpd
• bos.net.tcp.dhcp
• bos.net.tcp.dhcpd
• bos.net.tcp.ftp
• bos.net.tcp.ftpd
• bos.net.tcp.gated
• bos.net.tcp.imapd
• bos.net.tcp.mail_utils
• bos.net.tcp.ntp
• bos.net.tcp.ntpd
• bos.net.tcp.pop3d
• bos.net.tcp.pxed
• bos.net.tcp.rcmd
• bos.net.tcp.rcmd_server
• bos.net.tcp.sendmail
• bos.net.tcp.slip
• bos.net.tcp.slp
• bos.net.tcp.snmp
• bos.net.tcp.snmpd
• bos.net.tcp.syslogd
• bos.net.tcp.tcpdump
• bos.net.tcp.telnet
• bos.net.tcp.telnetd
• bos.net.tcp.tftp
• bos.net.tcp.tftpd
• bos.net.tcp.timed
• bos.net.tcp.traceroute
• bos.net.tcp.x500
• bos.net.tcp.cpd

The encoded software in the bos.net.uucp fileset moved to the bos.net.uucode fileset.

The IBM License Metric Tool version 7.2 is no longer supported. To learn more about the replacement version of IBM License Metric Tool Version 9.x, go to IBM License Metric Tool 9.2.

IBM PowerSC Trusted Surveyor is not supported in AIX 7 with 7200-05. If you are migrating to AIX 7 with 7200-05, you must remove the powersc.ts fileset before you start the migration process. If you have WPARs that you are migrating, you must verify that the powersc.ts fileset is not installed on the WPARs.

When you upgrade to AIX 7 with 7200-05, RSCT Version 3.2.5.0 is installed and replaces the previous version of RSCT. For more information about RSCT, see the IBM Docs for RSCT 3.2.

AIX 7.2 and RSCT Version 3.2.5.0 no longer support the Virtual Shared Disk (VSD) and Low-level application programming interface (LAPI) products. If these products are already installed from an older code level, both the rsct.vsd and rsct.lapi.rte filesets must be removed before migrating to AIX 7 with 7200-05. If you have third-party products that use VSD, you must review the current Spectrum Scale product offerings for a replacement.

The dsm.core ships a /etc/ibm/sysmgt/dsm/overrides/dsm.properties file, which allows the user to override SSH configuration. If this file was modified, the file needs to be backed up manually before an update or a migration, as it is overwritten.

If you migrate any previous version of the AIX Common Operating System Image (COSI) and associated AIX Thin Servers to the AIX 7 with 7200-05, it is recommended that you delete any dump device that is associated with the migrated Thin Servers and re-create the Thin Servers.

Also, you must install the devices.tmiscsw.rte fileset on the NIM master for the AIX 7 with 7200-05 Thin Server to create a dump device. The devices.tmiscsw.rte fileset is available in the AIX Expansion Pack.

AIX Version 7.2 does not support the IBM Subsystem Device Driver (SDD) for IBM TotalStorage Enterprise Storage Server®, the IBM TotalStorage DS family, and the IBM System Storage® SAN Volume Controller. If you are using SDD, you must transition to Subsystem Device Driver Path Control Module (SDDPCM) or AIX Path Control Module (PCM) for the multipath support on AIX for IBM SAN storage. SDD to SDDPCM migration scripts are available to help you with the transition.

Contact IBM storage technical support to request access to the migration scripts.

For more information about the available multipath I/O solutions and supported AIX versions for IBM SAN storage products, see the IBM System Storage Interoperation Center (SSIC) website.

IBM Db2® Version 11.1 with FP5 is available on the AIX base media. You can upgrade your Db2 environment from Db2 Version 10.5, 10.1, or 9.7 to Db2 Version 11.1. For more information about upgrading to Db2 Version 11.1, see the Upgrade to Db2 Version 11.1 topic.

A dynamic change occurs when you change a device attribute while the device is in the opened state. In the AIX operating system, you can change certain device attributes while the device is in the opened state by running the chdev command with the -U flag. In AIX 7 with 7200-05, you can dynamically change the queue_depth attribute for MPIO devices.

For each device that the AIX scsidisk device driver manages, a separate command queue is created. This queue is used as a buffer for the SCSI commands that are sent to the device. The queue_depth attribute represents the maximum number of SCSI commands that are allowed in the queue. The initial setting for the queue_depth attribute is configured in the ODM when the device is installed. In previous releases of the AIX operating system, the queue_depth attribute was static when a device was in the opened state. In AIX 7 with 7200-05, you can change the queue_depth attribute while the disk is in an opened state by running the chdev -U -l hdiskX -a queue_depth=NEW_VALUE command, where NEW_VALUE is the new queue depth.

AIX 7 with 7200-05 supports scheduling periodic diagnostics multiple times a day instead of only once per day. To schedule periodic diagnostics multiple times a day, run the diag command and select Task Selection > Periodic Diagnostics and specify a time interval between each test.

AIX 7 with 7200-05 supports formatting and certifying up to 10 disks in parallel instead of a single at a time. To format or certify multiple disks, run the diag command and from the Task Selection menu, select Certify Media in Parallel or Format Media in Parallel. All eligible resources are displayed in a list. You can select up to 10 disks from the list. The status of the operation is updated every 5 seconds. The time the operation takes to complete for each disk is based on various factors such as disk type, size, and speed.

Starting with AIX 7.3 Technology Level 2, IBM Security Directory Server (ISDS) is upgraded and is renamed as IBM Security Verify Directory (ISVD). The fileset for ISDS Version 6.4.0.25 is upgraded to ISVD Version 10.0.0.1. The fileset version and the name change for the directory have no impact on how the ISVD functions. The ISVD Version 10.0.0.1 fileset is shipped with AIX 7.3 Technology Level 2 and AIX 7.2 Technology Level 5 base packs. The AIX 7.3 with Technology Level 2 base pack also includes the latest and stable Lightweight Directory Access Protocol (LDAP) filesets that provide fixes for the earlier issues.

Previous versions of AIX Enterprise Edition included IBM® Tivoli® Monitoring Version 6.2.3 and Version 6.3.0. However, AIX 7.2 Enterprise Edition 1.1, or later, includes only Tivoli Monitoring Version 6.3.0. To use AIX 7.2 Enterprise Edition 1.1, or later, you must upgrade to Tivoli Monitoring Version 6.3.0.

Starting with AIX 7.2 Technology Level 5, Open Source Secure Sockets Layer (OpenSSL) is updated from version 1.0.2 to 3.0.10. As a result of new updates in AIX 7.2 Technology Level 5, a few APIs are deprecated, weak ciphers are removed, support for Transport Layer Security (TLS) version 1.3 is introduced, and provider concepts are introduced. The OpenSSL version 3.0.10.1001 contains performance optimization for Advanced Encryption Standard (AES) with Galois/Counter Mode (AES-GCM) cipher and ChaCha20 stream cipher on Power10 systems.

The new symbols that are introduced in the OpenSSL 3.0 configuration file are stored in the /var/ssl/openssl.cnf file. It is recommended to backup and save the changes in the old configuration file because the old OpenSSL configuration file is not retained for the use.

openssl_conf = openssl_init

 [openssl_init]
 providers = provider_sect

 [provider_sect]
 default = default_sect
 legacy = legacy_sect

 [default_sect]
 activate = 1

 [legacy_sect]
 activate = 1

For more information about updates between OpenSSL 1.0.2 and OpenSSL 3.0, see the community migration guide (https://www.openssl.org/docs/man3.0/man7/migration_guide.html).

To raise any queries, see IBM AIX support website.

OpenSSH 6.0p1 with VRMF 6.0.0.6204, or earlier, OpenSSH 7.1p1 with VRMF 7.1.102.1100, or earlier, and OpenSSH 7.5p1 with VRMF 7.5.102.1600 or earlier are no longer supported. You can download the latest version of the OpenSSH fileset from the AIX Web Download Pack Programs website.

GSKit version 8.0.55.11 is provided on the AIX 7 with 7200-05 Expansion Pack media.

Use GSKit version 8.0.50.10, or later, when you use IP Security with Rivest-Shamir-Adleman (RSA) key lengths that are greater than 2048 bits. The minimum RSA key length of 2048 bits is a requirement for complying with the National Institute of Standards and Technology (NIST) standard as defined in Special Publication 800-131A. When you generate certificates for IP securiy (IPsec), consider the requirements that are listed in Installing the IP security feature.

The behavior of the nmon recordings for the PCPU and SCPU sections are not recorded by default in AIX Version 7.2. To enable the recording of the PCPU and SCPU sections, run the nmon recording with the -y PCPU=on,SCPU=on options. When the PCPU and SCPU sections are enabled, the recorded format is the same as the format in previous versions of the AIX operating system. For more information about the nmon command, see the nmon command topic.

The previous version of Perl was upgraded to Perl Version 5.28.1 in IBM AIX 7.2 with Technology Level 5. Perl is a separate 3rd-party open source package that is not owned by IBM. The Perl package might not preserve full compatibility across all versions. If you are moving Perl scripts to version 5.28.1, you must complete an evaluation of the scripts to verify that they continue to work as expected. For more information about Perl, see the Perl Programming Documentation website.

The bos.cifs_fs software package is moved to the AIX Version 7.2 Expansion Pack media. The Common Internet File System (CIFS) client is provided as-is (without support).

The shared processor partitions in the AIX operating system are limited to a maximum of 128 virtual processors. Each virtual processor contains up to eight hardware threads and allows up to 1024 logical processors for POWER8 systems that run in SMT8 mode. If your configuration requires more AIX LPAR processors, you must use dedicated processors.

To view the most current version of the AIX Version 7.2 information, see the IBM Documentation for AIX website.

AIX on IBM Hyperconverged Systems that are powered by Nutanix provides simplified management through a hyperconverged infrastructure. You can run AIX Version 7.2.2 with Service Pack 2, or later, and APAR IJ05283 on IBM Hyperconverged Systems with POWER8 based CS821 and CS822 nodes.

AIX Version 7.2.2 with Service Pack 2, or later, runs fully virtualized on the Nutanix Acropolis Hypervisor and the corresponding virtual machine (VM) lifecycle is managed by the Nutanix PRISM graphical user interface (GUI). IBM Hyperconverged Systems support is integrated into the same version of the AIX 7.2.2 operating system that runs on IBM PowerVM® platforms. IBM Hyperconverged Systems are binary compatible with the AIX operating system that runs on PowerVM per the AIX binary compatibility guarantee.

For more information about IBM Hyperconverged Systems, see the IBM Hyperconverged Systems topic.

The IBM AIX Dynamic System Optimizer (DSO) extends the features that are provided by the Active System Optimizer (ASO) to automatically adjust some system settings to maximize the efficiency of your system. This optimizer automates the difficult job of manually tuning those system settings to optimize eligible workloads. The additional features that are provided by DSO are large page optimization and data stream prefetch optimization.

DSO is no longer a stand-alone feature and is included in AIX Version 7.2, or later, as part of ASO. For more information about DSO and ASO, see the AIX Dynamic System Optimizer topic.

A Loadable Password Algorithm (LPA) model is available that supports the Linux SHA-256 and SHA-512 password cryptographic algorithm. The Linux SHA-256 and SHA-512 password cryptographic algorithm is supported by other operating systems and was published in the public domain by Ulrich Drepper (https://www.akkadia.org/drepper/SHA-crypt.txt).

The LPA model is included in the pwmod licensed program product (LPP) package. You can get the pwmod package from the AIX Web Download Pack website.

For more information about server-side support for new Unicode locales, see the Supported languages and locales topic.

The Common Criteria administration guide for AIX 7.2.5.3 is available for use.

Visit the following URL to access the document that provides instructions to configure and operate AIX 7.2 Technology Level 5 (TL5) Service Pack 3 (SP3) in the Common Criteria evaluated configuration to meet the National Information Assurance Partnership (NIAP) Protection Profile for General Purpose Operating Systems version 4.2.1 (also known as OSPP) and Extended Package for Secure Shell v1.0.

https://www.ibm.com/support/pages/common-criteria-administration-guidance-aix-7253