IBM Support

Management of POWER8 Update Access Keys

Technote (FAQ)


Question

What do I need to know about POWER8 "Update Access Keys"?

Answer

POWER8 (and later) servers include an “update access key” that is checked when system firmware updates are applied to the system. Update access keys include an expiration date. As these update access keys expire, they need to be replaced using either the Hardware Management Console (HMC), the Advanced Management Interface (ASMI) on the service processor, or directly using the update_flash command.

What is an "update access key"?

POWER8 (and later) servers include an “update access key” that is checked when system firmware updates are applied to the system. Update access keys include an expiration date. System firmware updates contain a release date. When attempting to apply system firmware updates, if the release date for the firmware updates has passed the expiration date for the update access key, the updates will not be processed. As update access keys expire, they need to be replaced using either the Hardware Management Console (HMC) or the Advanced Management Interface (ASMI) on the service processor.

When will I need a new “update access key” for my POWER8 servers?

An expired update access key must be replaced before any system firmware updates can be applied to the system (Some Exceptions Apply - A server is entitled to all firmware updates that were made available during the time period for which the server had a valid update access key). Your POWER8 server will provide several warnings in the 30 days prior to the expiration of the system’s update access key and if/when an update access key is allowed to expire

How can I check the “update access key” expiration date from the Hardware Management Console?

It is possible to check the expiration date using the lslic command:

# lslic -m 9119-MME*??????? -F mtms,update_access_key_exp_date
9119-MME*???????,04/01/2040

Will the Hardware Management Console warn me when the "update access key" approaches expiration?

HMC message screen will be displayed as the "update access key" approaches expiration.

Countdown to Expiration: This screen will be displayed at 30, 20, 10, 5, 4, 3, 2, and 1 day(s) before the "update access key" expires. The message will read:

HSCL0071:The update access key for this server expires in {number} days.  To renew the hardware entitlement of this
server, obtain a new update access key from the website http://www.ibm.com/servers/eserver/ess.  Use the management
console Capacity on Demand (CoD) Enter CoD Code task to enter the new key on the server.

What will I see within the Hardware Management Console when an "update access key" expires?

This HMC message screen will be displayed when the "update access key" expires:


HSCL0072: The update access key for this server has expired.  To renew the hardware entitlement of this server,
obtain a new update access key from the website http://www.ibm.com/servers/eserver/ess.  Use the management console 
Capacity on Demand (CoD) Enter CoD Code task to enter the new key on the server 


The General progress panel has a row for each selected server. As the firmware update progresses, updated status messages are displayed on the panel. If an error happens, it is noted at the end of the install task.

The user can select a row and click 'details' to get the specific reason of the failure for the selected server.
(Go to the following URL for information on updating the update access key value. The new update access key must be entered through the Capacity on Demand (CoD) or Advanced System Management (ASMi) function of the management console.)
The expiration notice for the "update access key" will also be logged and can be viewed in the CoD History Panel.

What will I see within the Advanced System Management Interface (ASMI) about the "update access key" expiration date?

The Welcome page shows the update access key status in the upper right hand corner.


Will there be warnings within the Advanced System Management Interface (ASMI) prior to expiration?

Update Access Key expiration warnings can be seen in the error logs. These warnings will be displayed in the "Extended trace events". They will be listed as an informational event (SRC A7004760), and will be logged at 30, 20, 10, 5, 4, 3, 2, and 1 day(s) before the update access key expires.


After Expiration date (SRC A7004761) will show up, except it will be in the top part of the error log, in the "Serviceable/Customer attention events", not in the lower section of the error log in the "Extended trace events" section as shown above. User Documentation will describe the SRC codes and the action that must be taken to address them. (there is no interactive capability on the ASMI screens). A pointer to the LMS website (http://www.ibm.com/servers/ess) will be included in the description

Where do I get a new “update access key”?

An expired update access key can be acquired by visiting the following website: http://www.ibm.com/servers/eserver/ess/index.wss Step 1: Gather Data You will need to know your server's machine type, serial number, and the country of installation in order to obtain a new update access key. Step 2: Login to the "Entitled System Support" web page using your IBM WebID http://www.ibm.com/servers/eserver/ess/index.wss Step 3: Navigate to the "My Entitled Hardware" section and select "View, download and request update access keys". Step 4: Enter your server’s machine type, serial number and country of installation. You may enter each server machine type and serial number individually, or you can upload a list of servers Step 5: On the “Update Access Key Request Confirmation” page, you’ll see the result of your request(s). You’ll have the option of viewing your server’s new update access key directly, downloading the key via a file or sending it to your IBM Web ID via email. Note: If you were not provided with a new update access key for your server, click on “contacts” on the right side of the screen to engage with IBM Step 6: After retrieving your server’s new update access key, return to your server and enter the key on your HMC (using the “Enter CoD Code” feature) or via the ASMI (using the “CoD Activation” feature)

What is the active duration of a new Update Access Key”?

The initial Update Access Key is loaded during the manufacturing process and is dated to align with the expiration of the initial warranty period.

The term of any subsequent agreement (e.g. IBM hardware maintenance service agreement or special bid agreement) may vary. Therefore, replacement Update Access Keys are issued with a duration of 180 days.

How do I install an “update access key” if I am using HMC to manage my POWER8 servers?

Enter your replacement update access key via the "Enter COD Code" panel on your HMC.

What if I am managing POWER7 or earlier servers with my HMC?

Update access keys are a feature on POWER8 and later servers.

How do I use ASMI to manage “update access key”?

Enter your replacement update access key via the "COD Activation" Panel on the ASMI menu.

How do I manage a “update access key” if using update_flash directly on Linux or AIX?

Check the status of your update access key via the “lscfg –p” command (on Linux) or the “lscfg –vpl sysplanar0” command (on AIX). If your update access key has expired, proceed to the website listed in the answer to question 3 to replace your update access key. Sample Linux Screen: - "Update Access Key" is shown in the system firmware content - No "interactive" capability for managing the keys - If an update fails to proceed, a pointer to the LMS landing page is provided



Sample AIX Screen - "Update Access Key" is shown in system firmware content - No "interactive" capability for managing the keys. - A failed system update references the update access key.

How do I manage a “update access key” on IBM I?

Check the status of our update access key via the “Display Firmware Status” screen. If your update access key has expired, proceed to the website listed in the answer to question 3 to replace your update access key. The below image shows what it will look like in the IBM i 7.1 and 7.2 releases. In the 7.3 release, the text will change to "Update Access Key Expiration Date". The line highlighted below will be displayed whether the system is OS managed or HMC managed.



The following image shows the 7.3 release and the change in text:


- The client can access "help" relative to the Update Status field:
Update access key expiration date – Help
- The expiration date of the update access key. Server firmware fix packs with a later date will not be activated until a valid update access key expiration date is detected. For more information on entitled system support, see http://www.ibm.com/servers/eserver/ess .
Update status – Help
- Shows the update status of the temporary and permanent copies of the server firmware. If the update status is Staged or Pending when no server IPL is required, a server IPL is recommended to clear the update status. This condition can occur as the result of cancelling the delayed application or removal of a server firmware PTF. The possible values are:

None - No updates are in progress or pending.
In progress - An update is currently in progress from the operating system copy to the corresponding server firmware copy.
Staged - An update has been made from the operating system copy to the corresponding server firmware copy.
Pending - An update may be made when the next server IPL is performed. This value is only valid for the permanent server firmware copy.
Not allowed - An update is not allowed because the operating system copy is incompatible with the server firmware copy.
Key expired -
       The Update access key expiration date is earlier than the date of the server firmware fix pack.
       The fix pack will not be activated until a valid Update access key expiration date is detected.
       For more information on entitled system support, see http://www.ibm.com/servers/eserver/ess

How do I manage a “update access key” on via IBM Systems Director?

The IBM Systems Director Update Manager extension uses the update access key to validate firmware updates. If a firmware update fails to proceed, the message shown directs the client to the LMS website


(DNZPFW086W Installation of Power System Firmware update ########### failed because the update access key validation failed for the system ####. Go to URL http://www.ibm.com/servers/eserver/ess for information on updating the update access key value.)

Use HMC, ASMI or the update_flash commands to update the key.

How do I use ASMI to manage “update access key”?

Enter your replacement update access key via the "COD Activation" Panel on the ASMI menu.

HMC - A Hardware Management Console (HMC) is an appliance used to manage Power Systems servers. In particular, it may be used to create or change virtual machines (LPARs), including dynamically altering the hardware assigned to an LPAR (add and remove) without rebooting the operating system running in the LPAR.

Hardware Management Console
https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Power%20Systems/page/Hardware%20Management%20Console

Document information

More support for: HMC for Power Systems Version 7

Software version: 7.3.1.0, 7.3.2.0, 7.3.3.0, 7.3.4.0, 7.3.5.0, 7.7.1.0, 7.7.2.0, 7.7.3.0, 7.7.4.0, 7.7.5.0

Operating system(s): Platform Independent

Reference #: T1020902

Modified date: 02 March 2016


Translate this page: