HP A7340A - Surestore FC 1Gb/2Gb Switch 16B Instruction Manual

release notes
hp StorageWorks
secure fabric OS for version
3.1.x/4.1.x firmware
Product Version: 3.1.x/4.1.x
First Edition (June 2003)
Part Number: AV–RUK8A–TE
This document contains last-minute and supplemental information about your common software
and switch options. In the event of conflicting information between these Release Notes and
other documents contained in this product release, the Release Notes contents take precedence.

2 Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
© Copyright 1999-2003 Hewlett-Packard Development Company, L.P.
Hewlett-Packard Company makes no warranty of any kind with regard to this material, including, but not limited to,
the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be liable for
errors contained herein or for incidental or consequential damages in connection with the furnishing, performance,
or use of this material.
This document contains proprietary information, which is protected by copyright. No part of this document may be
photocopied, reproduced, or translated into another language without the prior written consent of Hewlett-Packard.
The information contained in this document is subject to change without notice.
BROCADE, the Brocade B weave logo, Brocade: the Intelligent Platform for Networking Storage, SilkWorm, and
SilkWorm Express, are trademarks or registered trademarks of Brocade Communications Systems, Inc. or its
subsidiaries in the United States and/or in other countries.
Hewlett-Packard Company shall not be liable for technical or editorial errors or omissions contained herein. The
information is provided “as is” without warranty of any kind and is subject to change without notice. The warranties
for Hewlett-Packard Company products are set forth in the express limited warranty statements for such products.
Nothing herein should be construed as constituting an additional warranty.
Printed in the U.S.A.
Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
First Edition (June 2003)
Part Number: AV–RUK8A–TE

About this Document
3Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
About this Document
This section describes the content reflected in this document, including:
■Release Notes Information, page 3
■Intended Audience, page 3
■Related Documentation, page 4
Release Notes Information
These Release Notes cover the following major topics:
■PKI Certificate Installation Utility for WIN32/NT, page 6
■PKI Certificate Installation Utility for Solaris, page 10
■Other Important Notes:, page 13
Intended Audience
This document is intended for customers who purchased hp StorageWorks SAN
or hp StorageWorks Core switches running V3.1.x or V4.1.x firmware.

About this Document
4 Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
Related Documentation
The related documentation includes the following documents:
■HP StorageWorks Advanced Performance Monitoring Version 3.1.x/4.1.x
User Guide, part number AA-RTS4C-TE
■HP StorageWorks Common Software and Switch Options Version 3.1.x/4.1.x
Release Notes, part number AV-RTQUC-TE
■HP StorageWorks Core Switch 2/64 Version 4.1.x Installation Guide, part
number AA-RS2WC-TE
■HP StorageWorks Core Switch 2/64 Version 4.1.x Release Notes, part number
AV-RSK9C-TE
■HP StorageWorks Extended Fabric Version 3.1.x/4.1.x User Guide, part
number AA-RTSDC-TE
■HP StorageWorks Fabric OS Commands Version 3.1.x/4.1.x Quick Reference
Guide, part number AA-RTE6B-TE
■HP StorageWorks Fabric OS Procedures Version 3.1.x/4.1.x User Guide, part
number AA-RS23C-TE
■HP StorageWorks Fabric OS Version 3.1.x/4.1.x Reference Guide, part
number AA-RS24C-TE
■HP StorageWorks Fabric Watch Version 3.1.x/4.1.x User Guide, part number
AA-RTSGC-TE
■HP StorageWorks ISL Trunking Version 3.1.x/4.1.x User Guide, part number
AA-RTSAC-TE
■HP StorageWorks MIB Version 3.1.x/4.1.x Reference Guide, part number
AA-RU58A-TE
■HP StorageWorks MSA SAN Switch 2/8 Version 1.0 Installation Guide, part
number 308999-001
■HP StorageWorks Quickloop Fabric Assist Version 3.0.x User Guide, part
number AA-RTS1A-TE
■HP StorageWorks Remote Switch Version 3.1.x/4.1.x User Guide, part number
AA-RTS7C-TE
■HP StorageWorks SAN Switch 2/16 Version 3.1.x Installation Guide, part
number AA-RR84C-TE
■HP StorageWorks SAN Switch 2/16 Version 3.1.x Release Notes, part number
AA-RR85C-TE

About this Document
5Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
■HP StorageWorks SAN Switch 2/32 Version 4.1.x Installation Guide, part
number AA-RTQVC-TE
■HP StorageWorks SAN Switch 2/32 Version 4.1.x Release Notes, part number
AV-RTT4C-TE
■HP StorageWorks SAN Switch 2/8 Version 3.1.x Installation Guide, part
number AA-RSB6C-TE
■HP StorageWorks SAN Switch 2/8 Version 3.1.x Release Notes, part number
AV-RSB7C-TE
■HP StorageWorks Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release
Notes (this document), part number AV-RUK8A-TE
■HP StorageWorks Secure Fabric OS Version 1.0 User Guide, part number
AA-RU57A-TE
■HP StorageWorks Web Tools Version 3.1.x/4.1.x User Guide, part number
AA-RS25C-TE
■HP StorageWorks Zoning Version 3.1.x/4.1.x User Guide, part number
AA-RS26C-TE
The latest documentation is also available on the HP website at:
http://www.hp.com/country/us/eng/prodserv/storage.html
To access the documentation:
— Locate the networked storage section of the web page.
—Undernetworked storage go to the by type subsection.
— Click SAN infrastructure. The SAN infrastructure page displays.
— Locate the fibre channel switches section.
— Go to the infrastructure or entry subsection. Click the appropriate
switch. The switch overview page displays.
— Go to the product information section. Select technical documents.

PKI Certificate Installation Utility for WIN32/NT
6 Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
PKI Certificate Installation Utility for WIN32/NT
The main purpose of the PKI Certificate Installation utility is to provide functions
that support automated installation of digital certificates onto multiple switches.
Installation of digital certificates is one part of the process for upgrading switches
to support Secure Fabric operations.
Installation
The pki_nt.zip file should be downloaded from the HP website at
http://www.hp.com/country/us/eng/prodserv/storage.html . Unzipping it installs
the pkicert executable and required DLLs in the nt_pki folder in the location
where the zip file is unzipped. To access the pki_nt.zip file:
— Locate the networked storage section of the web page.
—Undernetworked storage go to the by type subsection.
— Click SAN infrastructure. The SAN infrastructure page displays.
— Locate the fibre channel switches section.
— Go to the infrastructure or entry subsection. Click the appropriate
switch. The switch overview page displays.
— Go to the product information section. Select software & drivers.
Usage
This utility may be used interactively via its text-based, menu-driven interface or
it may be used from the command line. The command-line (batch mode) usage
exists to support use of its functions from a script.
The easiest way to use this utility is to run it interactively by running the pkicert
executable with no task-option arguments. An argument of -h prints the brief
command line usage information. You can read more detailed help information by
starting it with no command-line arguments and interactively choosing Help from
the main menu.
The PKI Certificate utility always writes event and error information to a log file,
by appending information to an existing log file or creating a new one if one does
not exist.
You must provide the IP addresses or switch names (domain aliases) of one switch
in each fabric you want to access. The utility operates on all switches in a fabric.
You can not target a single switch in a multi-switch fabric.

PKI Certificate Installation Utility for WIN32/NT
7Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
Addresses or switch names can be provided in a file (one address or name per
line) or manually entered as prompted.
Data files, both input and output, contain switch data in XML format. You may
view the data files with an editor, but do not attempt to edit them as this may
invalidate the format or data.
The PKI Certificate utility may be run from the command line. This is useful
when using a script to run the pkicert utility.
Command (or batch) mode usage is as follows:
pkicert [task-options] [-e event-log-file] [-d data-file] [-a
addr-file] [-A switch-addr] [-L log-level] [-u user-name -p
password]
Task-Options:
-g Get CSRs and generate a CSR data file
-G Get CSRs (even from switches with certificates)
-i Install Certificates from a data file
-l Licensed Product report compile and generate
Event-Log-file: -e event-log-file
This is the path\file-name of log file created and written to (or if it already
exists, appended to) with event/error data.
Data-file: -d data-file
This is the path\file-name of an input or output file
— If the task-option is Get-CSRs, the file is an output file created and
written to with CSR data.
— If the task-option is Install Certificates, data is read from it.
— If the task-option is Licensed Product report generation, the file is
written to.
Address-file: -a addr-file
This is the path\file-name of optional input file containing IP addresses or
aliases of fabrics to which sessions should be established. If this argument
is not provided, this data is read from the file indicated by environment
variable FABRIC_CONFIG_FILE if defined.
Address-Switch-IP: -A switch-addr
This is the IP address of the switch/fabric to which to connect for the
given task.

PKI Certificate Installation Utility for WIN32/NT
8 Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
Log-Level: -L n
The argument n is a numeric value, 0-3, indicating the level of detail for
information logged to the event log file. This may be provided on the
command line using the -L argument when using interactive mode. This is
used primarily for debug purposes. Values and their meanings are as
follows: 0 = silent; 1 = Error only; 2 = Events + Errors; 3 = Debug-info +
Events + Errors.
Username: -u user-name
The argument user-name is the login used for the one switch IP/Name
given with the -A switch-name argument. If -u is used, a password must
also be provided via the -p argument.
Password: -p password
The password that goes with the “-u user-name” provided.
Important Notes
The following provides important information for Secure Fabric OS and pkicert.
Secure Fabric OS
Secure Fabric OS is a comprehensive security product, which requires some
planning and specific steps to set up and configure. For detailed product
information, refer to the HP StorageWorks Secure Fabric OS Version 1.0 User
Guide.
PKICERT
Table 1 lists important information you should be aware of regarding PKICERT.

PKI Certificate Installation Utility for WIN32/NT
9Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
Table 1: PKICERT important notes
Area Description
Certificate load process Certificate load process should be run for 20 or less fabrics
at the same time from pkicert . If more than 20 fabrics
should go through the process, the request should be broken
into batches of 20 or less fabrics.
Pkicert prompt While answering y/n questions for pkicert prompt,
y is
taken as yes and all other characters are taken as no for an
answer by default.
Switch names A switch name with spaces in it is not supported by the HP
website
(http://www.hp.com/country/us/eng/prodserv/storage.html,
referenced on page 5) for issuing certificates. If requesting a
certificate, the switch name must be one word and should
not contain spaces.

PKI Certificate Installation Utility for Solaris
10 Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
PKI Certificate Installation Utility for Solaris
The main purpose of the PKI Certificate Installation utility is to provide functions
that support automated installation of digital certificates onto multiple switches.
Installation
An environment variable, LD_LIBRARY_PATH=/usr/gnu/lib:..., must
be defined that includes the path to the library files that accompanied pkicert—
libFabOsApi.so and libstdc++.so.
Usage
This utility may be used interactively via its text-based, menu-driven interface or
it may be used from the command line. The command-line (batch mode) usage
exists to support use of its functions from a script.
The easiest way to use this utility is to run it interactively by running the
executable pkicert with no task-option arguments. An argument of -h prints the
brief command line usage information. You can read more detailed help
information by starting it with no command-line arguments and interactively
choosing Help from the main menu.
The PKI Certificate utility always writes event and error information to a log file
by appending information to an existing file or by creating a new one if one does
not exist.
You must provide the IP addresses or switch names (domain aliases) of one switch
in each fabric you want to access. The utility will operate on all switches in a
fabric. You cannot target a single switch in a multi-switch fabric.
Addresses or switch names can be provided in a file (one address or name per
line) or manually entered as prompted.
Data files, both input and output contain switch data in XML format. You may
view the data files with an editor, but do not attempt to edit them as this may
invalidate the format or data.
This utility may be run from the command line. This is useful when using a script
from which to run the pkicert utility.
Command (or batch) mode usage is as follows:
pkicert [task-options] [-e event-log-file] [-d data-file] [-a
addr-file] [-A switch-addr] [-L log-level] [-u user-name -p
password]

PKI Certificate Installation Utility for Solaris
11Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
Task-Options:
-g Get CSRs and generate a CSR data file
-G Get CSRs (even from switches with certificates)
-i Install Certificates from a data file
-l Licensed Product report compile and generate
Event-Log-file: -e event-log-file
This is the path\file-name of log file created and written to (or if it already
exists, appended to) with event/error data.
Data-file: -d data-file
This is the path\file-name of an input or output file
— If the task-option is Get-CSRs, the file is an output file created and
written to with CSR data.
— If the task-option is Install Certificates, data is read from it.
— If the task-option is Licensed Product report generation, the file is
written to.
Address-file: -a addr-file
This is the path\file-name of optional input file containing IP addresses or
aliases of fabrics to which sessions should be established. If this argument
is not provided, this data is read from the file indicated by environment
variable FABRIC_CONFIG_FILE if defined.
Address-Switch-IP: -A switch-addr
This is the IP address of the switch/fabric to which to connect for the
given task.
Log-Level: -L n
The argument n is a numeric value, 0-3, indicating the level of detail for
information logged to the event log file. This may be provided on the
command line using the -L argument when using interactive mode. This is
used primarily for debug purposes. Values and their meanings are as
follows: 0 = silent; 1 = Error only; 2 = Events + Errors; 3 = Debug-info +
Events + Errors.
Username: -u user-name
The argument user-name is the login used for the one switch IP/Name
given with the -A switch-name argument. If -u is used, a password must
also be provided via the -p argument.

PKI Certificate Installation Utility for Solaris
12 Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
Password: -p password
The password that goes with the “-u user-name” provided.
Important Notes
The following provides important information regarding Secure Fabric OS,
installation, and pkicert.
Secure Fabric OS
Secure Fabric OS is a comprehensive security product, which requires some
planning and specific steps to set up and configure. For detailed product
information, refer to the HP StorageWorks Secure Fabric OS Version 1.0 User
Guide.
Installation
An environment variable, 'LD_LIBRARY_PATH=/usr/gnu/lib:...', must be
defined that includes the path to the library files that accompanied pkicert,
libFabOsApi.so and libstdc++.so.
PKICERT
This table lists important information you should be aware of regarding
PKICERT.
Table 2: PKICERT important notes
Area Description
Certificate load process Certificate load process should be run for 20 or less fabrics
at the same time from
pkicert . If more than 20 fabrics
should go through the process, the request should be broken
into batches of 20 or less fabrics.
Pkicert prompt While answering y/n questions for pkicert prompt,
y is
taken as yes and all other characters are taken as no for an
answer by default.
Switch names A switch name with spaces in it is not supported by the HP
website
(http://www.hp.com/country/us/eng/prodserv/storage.html,
referenced on page 5) for issuing certificates. If requesting a
certificate, the switch name must be one word and should
not contain spaces.

Other Important Notes:
13Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes
Other Important Notes:
This table lists important information you should be aware of regarding Fabric OS
v3.1.x.
Table 3: Other Important Notes
Area Description
Security,
PKICERT
utility
Before using the PKICERT utility to prepare a Certificate Signing
Request (CSR), please ensure that there are no spaces in the switch
names of any switches in the fabric. The Web site that processes the
CSRs and generates the digital certificates does not accept switch
names containing spaces, and any CSRs that do not conform to this
requirement will be rejected.
Security:
Secure
mode,
passwd
telnet
Using the passwd telnet command in Secure Mode to change the
password results in all sessions using that password to be logged out
including the session that changed the password.
This is expected behavior. The session will terminate if you change
the password in secure mode.

Other Important Notes:
14 Secure Fabric OS for Version 3.1.x/4.1.x Firmware Release Notes