VERTIV DSView User Manual

VERTIV

™

Avocent® Universal Management Gateway 2000/4000/6000 Appliance

Release Notes

UPDATE! VERSION 4.2.2.21, JANUARY 13, 2020

Release Notes Section Outline

1 Update Instructions

2 Local Client Requirements

3 Features and Enhancements

4 UMIQ Module Support

5 Smart Card Support

6 External Sensor Support

7 PDU Support

8 Service Processor Support

9 External Network Port Usage

10 Known Issues

Trellis

11

1 Update Instructions

Please refer to the installer/user guide for detailed instructions on updating the Avocent® Universal Management Gateway appliance.

™ Real-time Infrastructure Optimization Platform Support (Not Supported With This Release)

NOTE: After you have followed the instructions in the installer/user guide and completed the update, please reboot the appliance. If you

are using the Trellis™ platform, see section 11 in these release notes for more information and next steps.

Important Notes

• If the current appliance version is older than 2.6.0.14, please contact Technical Support for additional assistance with net booting

the appliance to version 3.1.2.10 prior to upgrading to the latest version.

• When upgrading the appliance to version 2.2.1.10 (or later) from 2.1.1.6 (or earlier), please ensure power is retained on the

appliance for at least three hours to allow the upgrade to complete. The appliance upgrade process requires more time in this

version as the FPGA is being upgraded.

• Also, please avoid rolling back the version from 2.2.1.10 (or later) to 2.1.1.6 (or earlier) since there will be a FPGA downgrade

procedure. If there are any issues with upgrades or rollback, please contact Technical Support for additional assistance.

NOTE: If the Web interface session times out while transferring the firmware upgrade file, the upgrade process will be cancelled. If this

occurs, lengthen or disable the Session Time-Out setting for the Admin user in the Web interface before starting the upgrade.

NOTE: Please allow at least three hours for the upgrade process to complete once it is started.

Page 1 of 39

VERSION

Compatibility with the Avocent® DSView™ Management Software

NOTE: All references to “DSView™ software” within these release notes refer to version 4.5, Service Pack 5 (SP5) or later, unless

otherwise specified.

To upgrade your system for this release:

NOTE: The client computer must use a 32-bit browser with a 32-bit Java JRE to launch sessions from the Avocent® DSView™

management software. Java JRE 8u181 and 10.0.1 were used in testing.

1. Upgrade the Avocent® DSView™ management software to SP5 (Service Pack 5) or later. If there are DSView™ software log in

issues using the Internet Explorer browser after upgrading, ensure that the SSLv2 and SSLv3 options are disabled in the

browser.

2. Upgrade the Avocent® Universal Management Gateway appliance plug-in to version 4.2.2.21 or later.

NOTE: The appliance plug-in must be at the same version or newer than the appliance firmware for correct operation.

3. Upgrade the Avocent® Universal Management Gateway appliance to version 4.2.2.21.

4. Execute the appliance resync action for the Avocent® Universal Management Gateway appliance within the Avocent®

DSView™ software.

5. If this upgrade sequence could not be followed and the Avocent® Universal Management Gateway appliance cannot properly

be managed using the Avocent® DSView™ software, please remove the appliance from the software and then re-add the

appliance again.

After upgrading the appliance to version 4.2.2.21, if KVM sessions launched via the Avocent® DSView™ software display an error

message, resync the appliance with the software and try again.

2 Local Client Requirements

SOFTWARE

Java (32-bit) Java 8 Update 201

Internet Explorer 11

Firefox 62

Chrome 68

Edge EdgeHTML 13

NOTE: If the Firefox browser prompts that the Flash plug-in should be updated when the appliance Web interface is accessed, please

update the Flash plug-in to the latest version before continuing, if possible.

NOTE: If using Java 7 Update 51 or later and attempting serial and KVM session launches from the DSView™ software and the

Avocent® Universal Management Gateway appliance, confirmation prompts may be presented by the Java Run-time Engine even

though there are no specific security concerns listed in the details of the prompt. The launches can be continued by clicking Cancel or

Continue to follow through on the launch process.

NOTE: If using Java 7 and attempting KVM or SP SSH, Telnet, or SoL session launches from the Avocent® Universal Management

Gateway appliance, ensure that the TLS1.1 and TLS1.2 boxes are checked and the SSL 2.0 box is unchecked in the Advanced tab of

the Java Control Panel.

Page 2 of 39

NOTE: Please check the Avocent® DSView™ software release notes for the latest client requirements for the DSView™ software.

After upgrading the Avocent® Universal Management Gateway appliance to version 2.9.0.25 or later, the web user interface may not

open in Firefox if the correct TLS options are not selected.

To ensure the correct TLS options are selected in Firefox:

1. Enter about:config in your browser.

2. Enter security.tls in the Search bar.

3. Under the Preference Name section, ensure the security.tls.version.max Value is set to 3.

4. Under the Preference Name section, ensure the security.tls.version min Value is set to 1.

5. Close all browser sessions.

6. Open a new session and verify you have access to the Avocent® Universal Management Gateway appliance web interface.

NOTE: If the appliance Web interface cannot be accessed using the Internet Explorer 11 or a Firefox browser, follow these steps to

reset the browser.

To reset the browser for Internet Explorer 11:

1. Select Internet Options- Advanced and click the Reset button.

2. Follow the prompted instructions to reboot the computer, then re-open Internet Explorer 11.

3. Press Ctl+Shift+Del on the keyboard to clear the cache and history. On the Delete Browsing History window, select all

checkboxes except the Preserve Favorites website data checkbox, then click Delete.

4. Select Internet Options- Content and select the Clear SSL State button.

5. Close and re-open Internet Explorer 11.

To reset the browser for Firefox:

1. Click the Menu (hamburger) icon, then select Privacy.

2. Select Clear your recent history. The Clear All History window opens.

3. Select Everything as the time range to clear, and select the appropriate details to clear, including Cookies and Cache.

4. Click Clear Now, then close and re-open the browser to launch the appliance Web interface again.

NOTE: If using Java 8 Update 60 or later, a KVM session cannot be started if the encryption setting of either the Video or the

Keyboard/Mouse is set to128-bit SSL. Because this setting is not supported by these Java versions, please do not use it.

NOTE: If using Java with the Microsoft Edge browser in a Windows 10 client, Java must be installed using the Internet Explorer 11

browser.

IMPORTANT NOTE: The Java KVM viewer certificate existing in older firmware versions is expiring on February 17, 2019. Unless you

use the HTML5 viewer with virtual media capabilities (introduced in firmware version 3.4.1.10), update to this newest firmware (version

4.2.2.21) or edit the Java Console Security settings on each computer client by that date, you will be unable launch KVM sessions.

To edit the Java Console security settings:

NOTE: If using Java 10, menus may vary, but the same workaround applies.

1. From your Windows Control Panel, click Java.

2. When the Java Control Panel opens, click the Security tab.

Page 3 of 39

3. Select the High radio button to indicate the desired security level, then click the Edit Site List button. This will enable you to add

the expired certificate information to the Exception Site List so that you can continue using it.

4. When the Exception Site List window opens, click the Add button and enter your appliance IP address in the following format:

http://<applianceIP>:80

5. Click Add again, then click Continue when the Security Warning pop-up appears. This allows an HTTP address in the Exception

Site List.

6. When the Exception Site List window opens again, click OK.

Page 4 of 39

7. Back in the Java Control Panel, your appliance IP address is now listed in the Exception Site List. Click OK to be able to launch

a KVM session that will allow use of the of the expired viewer certificate.

3 Features and Enhancements

Firmware version 4.2.2.21 is an update of the Avocent® Universal Management Gateway 2000/4000/6000 appliance firmware. Please

refer to the installer/user guide for a detailed list of features supported by the Avocent® Universal Management Gateway appliance.

New general features and resolved issues in this release include:

• The interface to the DSView™ software now supports 2048-bit certificates.

• Additional Operating System (OS) and Ethernet information is now being collected from Redfish-enabled Service Processors.

• The 1:1 NAT Wizard now supports Accessible Targets as an option.

• Accessible Targets are now included in the Exported Targets file.

• The HTML5 KVM viewer has the following enhancements:

o It now supports a single cursor mode when sessions are launched using the Chrome and Firefox browsers.

o It now supports a “Persistent Connection” mode where if the connection is lost at the target end, the viewer will continue to

attempt to reestablish the connection until the viewer is closed.

o It now has an additional “Exit Full Screen” hotkey located on F10.

o It now displays debug logging information through the browser Development Mode.

• The Geist I-03 PDU firmware is now validated prior to being accepted into the appliance target firmware repository.

• Java KVM session launch errors when Java8u201 is installed on the client are resolved.

• NEW! Addressed the following security vulnerabilities: CVE-2019-9507, CVE-2019-9508, CVE-2019-9509.

Page 5 of 39

RESOLVED ISSUE DESCRIPTION

Issues related to restoring a backup

The installed Web interface ce

Requests from the local port browser to Internet sites for

Web interface errors shown when entering the Targets

DESCRIPTION

Appliance Support Issues Addressed in this Release

ISSUE

487234-850280269

487234-863037049

487234-872554406

487234-871696959

configuration onto the appliance are resolved.

rtificate will no longer be overwritten on appliance firmware upgrade.

operational information are disabled.

menu have been corrected.

4 UMIQ Module Support

NOTE: Attaching either the UMIQ-V1 or UMIQ-V2 module to a Windows target requires the USB CCID driver to be installed. If the user

is prompted by the Windows New Hardware Wizard, the Next button should be selected.

NOTE: The Video Viewer included with the Avocent® DSView™ software does not support non-automatic Keyboard/Video/Mouse

(KVM) video sharing when the first video session is launched. When video sharing is needed, please configure the appliance to

automatically share video by navigating (within the DSView™ software) to Unit Overview-Target Settings-KVM Settings-KVM Devices

and selecting Automatic Sharing.

5 Smart Card Support

Tested Smart Card Readers

CARD READER ALIAS

SCM335 SCR335 SCM Microsystems

Precise 250 Precise Biometrics Precise 250 MC

KOBIL KAAN KOBIL KAAN Base

Lenovo Gemplus Lenovo Gemplus

Cherry 1044 Cherry GmbH Smart Terminal 1044

OMNIKEY 5125 OMNIKEY CardMan 5125

OMNIKEY 5121 OMNIKEY CardMan 5121

OMNIKEY 3121 OMNIKEY CardMan 3121 SC

SCR 3311 SCR 3311 SCM Microsystems

SCR 3310 SCR 3310 SCM Microsystems 905057

Smart Card Test Samples

CARD READER ALIAS

SC1 Oberthur CS PIV End Point v1.08

SC2 SN: 1111-00024038 (T-0,1)

SC3 409061459963280D2A24 64K V2C S6C 353723 (T-0)

Page 6 of 39

DESCRIPTION

SC1 SC2 SC3 SC4 SC5 SC6 SC7

JA JA JA JA JA J* A J* AL

JA JA JA JA JA J* A --

JAL JAL JAL JAL JAL J* AL

J* AL

JA JA JA JA JA J* A J* A

JAL JAL JAL JAL JAL J* AL

J* AL

JAL JAL JAL JAL JAL J* AL

J* AL

JAL JAL JAL JAL JAL J* AL

J* AL

JAL JAL JAL JAL JAL J* AL

J* AL

JAL JA JA JA JA J* A J* AL

CARD READER ALIAS

SC4 DOD CAC GEMALTO TOPDLGX4144

SC5 20505000734830727826 64K V5.2 O5B-1

SC6 4820502B121613CBE736 128k v5.5-n (T-0)

SC7 Oberthur ID-One PIV (Type A) Large D 4820-502B-2007-00104440 (T-1)

The combinations of card readers (rows) and cards (columns) in the following table were successfully tested using the remote Java

viewer (J), the remote Active X viewer (A), and/or the local port viewer (L).

Tested Combinations of Card Readers and Cards

CARD READER

SCM335

Precise 250

KOBIL KAAN

Lenovo Gemplus

Cherry 1044

OMNIKEY 5125

OMNIKEY 5121

OMNIKEY 3121

SCR 3311

SCR 3310

*NOTE: With Java KVM viewer 5.04.04 build 363, card removal does not always trigger card unmapping. You must unmap the card

through the Java KVM viewer Tools menu to ensure the smart card is unmapped from the target. (Avocent® Universal Management

Gateway appliance 3.4.0.16 rdist, Java KVM viewer 5.04.04 build 363, Active KVM viewer 5.04.04 build 349.)

6 External Sensor Support

NOTE: The following external sensors were tested with the port connection and test scenarios where sensors were automatically

discovered and monitored by the appliance.

Tested External Sensors

EXTERNAL SENSORS PORT CONNECTION TEST SCENARIOS

SN-Z01 Single Temperature Probe

TH1/TH2

• Single SN-Z01 sensor connected to each port sequentially.

• Reported as SN-T as it cannot be distinguished from the corresponding

SN-T sensors from the info returned.

• Not chainable as limited by cabling.

Page 7 of 39

Temperature 1 Humidity

simultaneously, where

EXTERNAL SENSORS PORT CONNECTION TEST SCENARIOS

SN-Z02 Three Temperature Probe

SN-Z03 Three

SN-3C Modular Dry Contact

SN-2D Modular 2-Door Contact

SN-TH Modular Temp/Humidity Sensor

TH1/TH2

• Single SN-Z02 sensor connected to each port sequentially.

• Reported as three SN-T sensors as it cannot be distinguished from the

corresponding SN-T sensors from the info returned.

• Not chainable as limited by cabling.

• Single SN-Z03 sensor connected to each port sequentially.

• Reported as two SN-T and one SN-TH as it cannot be distinguished from

the corresponding SN-T/SN-TH sensors from the info returned.

• Not chainable as limited by cabling.

• Single SN-3C sensor connected to each port sequentially.

• Chain of five SN-3C sensors connected to each port sequentially, where

the cable was less than 20 meters in total length.

• Single SN-2D sensor connected to each port sequentially.

• Chain of ten SN-2D sensors connected to both ports

each cable was less than 20 meters in total length.

• Single SN-TH sensor connected to each port sequentially.

• Chain of five SN-TH sensors connected to each port sequentially, where

the cable was less than 20 meters in total length.

SN-T Modular Temperature Sensor

SN-L Leak Sensor

IRM-S01T Temperature SNSR

IRM-S02TH Temperature + Humidity

AD-S Smoke DI1/DI2 Single AD-S sensor connected to each port sequentially.

AD-IM Motion DI1/DI2 Single AD-IM sensor connected to each port sequentially.

TH1/TH2

SNSR Single IRM-S02TH sensor connected to the port.

• Single SN-T sensor connected to each port sequentially.

• Chain of five SN-T sensors connected to each port sequentially, where the

cable was less than 20 meters in total length.

• Single SN-T sensor connected to each port

• Not chainable.

• Single IRM-S01T sensor connected to the port

• Chain of two IRM-S01T sensors connected to the port, where the cable

was less than 20 meters in total length.

Page 8 of 39

COMMENTS

7 PDU Support

Tested PDUs and Firmware

CARD READER ALIAS FIRMWARE VERSION

Geist I-02 3.3.3

Geist I-03 5.2.3

Vertiv™ RPC2 (MPX, MPH, MPH2)

13.0.0.3

Supported in a limited manner, including firmware upgrade and web access through an SPAccess browser session. Outlet control and monitoring are not yet supported.

The PDU userid/password must be supplied to enable firmware upgrade functionality.

8 Service Processor Support

Tested Service Processors/Servers and Firmware

SERVICE PROCESSOR FIRMWARE VERSION COMMENTS

Cisco UCS-B Chassis and Blades 4.0(1d) N/A

Cisco UCS CIMC/Monolithic (C210) 1.4(3z)

Cisco UCS CIMC/Monolithic (C220) 4.0(1a) N/A

Support for this Service Processor has been obsoleted. It is not tested or maintained.

Dell C Series (PowerEdge C6220) 2.53 N/A

Dell DRAC 4 (PowerEdge 1850) 1.75 (Build 06.03)

Dell DRAC 5 (PowerEdge 2950) 1.65 (12.08.16)

Dell DRAC/MC 1.6.0

Dell iDRAC blades (M600/M605/M805)

Dell iDRAC6 blades (M610/M710) 3.85

Dell iDRAC6 monolithics (R210/R410/R710)

Dell iDRAC7 blade (M520, M620) 2.61.60.60 N/A

1.65

2.91 N/A

Support for this Service Processor has been obsoleted. It is not tested or maintained.

SSH sessions to the iDRAC6 blades are not functional; iDRAC6 is only supporting ciphers that are blocked from the appliance for security reasons. Telnet must be enabled to discover these iDRAC6 blades. We recommend that Telnet be disabled by default and disabled following discovery.

Page 9 of 39

SERVICE PROCESSOR FIRMWARE VERSION COMMENTS

Dell iDRAC7 monolithic (R320) 2.61.60.60 N/A

Dell iDRAC8 blade (M630, FC630) 2.61.60.60 N/A

Dell iDRAC8 monolithic (R430) 2.61.60.60 N/A

Dell iDRAC9 blade (M640) and monolithic (R640)

Dell M1000E Chassis 6.20 N/A

Dell FX2s Chassis 2.20 N/A

Dell VRTX Chassis (Express) 3.20 N/A

FSC iRMC (BX630 S2) 2.30G

FSC iRMC S2 (RX300 S4) 5.76A

FSC iRMC S4 (RX200 S8) 9.08F N/A

HP BladeSystem 4.85 N/A

HP iLO 2 (DL580 G5) 2.33 N/A

HP iLO 3 (DL380 G7) 1.90 N/A

HP iLO 4 (DL360p Gen8) 2.61 N/A

HP iLO 5 (DL360p Gen10) 1.37 N/A

3.21.23.22 N/A

Support for this Service Processor has been obsoleted. It is not tested or maintained.

IBM BladeCenter (E/8677) BPET68C

IBM IMM (x3550 M2, x3650 M2) YUOOH2B

IBM IMM2 (x3250 M4) 1AOO82E

IBM RSA II (x3550, x3850) GGEP42A

IPMI 1.5 N/A N/A

IPMI 2.0 N/A N/A

Lenovo Flex Chassis 1AON24A(2.0.0) N/A

Lenovo IMM2 (x240 M5) TCOO46E(5.10) N/A

Lenovo XCC CDI328M(2.10) N/A

Page 10 of 39

Support for blades connected to this Service Processor has been obsoleted. The blades are not tested or maintained

Support for this Service Processor has been obsoleted. It is not tested or maintained

Support for this Service Processor has been obsoleted. It is not tested or maintained.

G (Get only)

S (Set only)

G/S (Get and Set)

Information

Power Control

Alert Destination Status/Control

Log

Configuration

vKVM

G

SERVICE PROCESSOR FIRMWARE VERSION COMMENTS

Oracle ILOM3 (Sun Server X3-2)

4.0.4.22

N/A

SUN ALOM (Netra 240) 1.6.10

SUN ELOM (x2200 M2) 3.2

SUN ILOM (Sun Fire x4250) 3.0.6.15f

Support for this Service Processor has been obsoleted. It is not tested or maintained.

Supported Service Processor Features Table

TABLE KEY

 (Supported feature)

* (Supported if available)

† (Features inherited from chassis)

D (Only via Direct Command support in the Avocent® DSView™ software)

Power Capping

Sensors

Power

FRU Information

Service Processor

SP Time

LED

System Event

SoL Session

Browser UI

SOL

Telnet Session

SSL

Auto Login SSH

SSH Session

Virtual Media

IPMI 1.5

IPMI 2.0

IDRAC 9 (14G)

IDRAC 8 (13G)

IDRAC 7 (12G)

IDRAC 6 (11G)

Dell C Series

Dell DRAC 5



G* G*/S*

G G/S

G* G*/S*

G* G*

Dell DRAC 4



G G/S

G

HP ILO 5

HP ILO 4

HP ILO3

HP ILO2

Page 11 of 39

  

 



  

 



G/S S*

G/S G/S

G/S

G/S G/S

G G/S

G/S



  

 

  

 

* *

* * * *

* * * * * * *

* *

* * * * *

D * * * * D D

* *

* * * * *

* *

* * * *

 

* *

 

Information

Power Control

Alert Destination Status/Control

Log

Configuration

vKVM

Service Processor

Oracle ILOM3

Sun ELOM

Sun ILOM

Sun ALOM

IBM IMM2

IBM IMM

IBM RSA II

Cisco UCS-C (Monolithic)

FSC IRMC

FSC IRMC II

FSC IRMC S4

Sensors



Power Capping

Power

G

G G/S

G* G*/S*

FRU Information

  



  



  



SP Time

LED

G/S G/S

G/S

G/S G/S

System Event

SoL Session

SOL

 

  

 

  



*



 

  

Browser UI

Telnet Session

Auto Login SSH

SSH Session

SSL

D *

D * * * * D D

D *

* * * * * * *

D * * * * D D

* * * * *

D * * * * D D

* * * * *

* * D D

* * *

 

Virtual Media

Dell M1000E

Dell M1000E (Blade)

Dell FX2

Dell FX2 (Blade)

Dell VRTX

Dell VRTX (Blade)

Dell DRAC/MC

Dell DRAC/MC (Blade)

HP BS

HP BS (Blade)

IBM BC

IBM BC (Blade)

Lenovo Flex

Lenovo Flex (Blade)



G G/S

G

G G/S

G

G G/S

G

G G/S

G

G G/S

G

G G/S



 



G/S G/S

G/S



* * * * *

† † † †

* * * * *

† † † †

* * * * *

† † † †

* * *

D

* * * * *

† † † †

* * * * *

* * * * * †

*



*



D D

*

† † †

Lenovo XCC

Page 12 of 39



G G/S



G/S G/S

  

* * * * * †