how to manageyour HP-UXsoftware updates

September 2004

HP-UX 11i v2 for hp9000 workstations and servers

Dear Customer,

We are pleased to present to you our latest HP-UXsoftware updates brochure. This brochure contains all the information you needabout HP-UX products - applications, patches,technical support availability dates and more.This invaluable tool provides assistance and advice tohelp you manage your application and operatingsystem updates effectively.

We thank you for your confidence in us and hopeyou enjoy reading our brochure

Best Regards,

HP

TABLE OF CONTENTS

HP-UX 11i v1 Operating Environment – September 2004 . . . . . . . . . . . .7

Discontinuance information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8

A note for HP Integrity server support customers . . . . . . . . . . . . . . . . .8

What’s updated in the HP-UX 11i v2 September 2004 release? . . . . . .9

Newly released or updated products for September 2004 . . . . . . . . .12

Newly released or updated products summary . . . . . . . . . . . . . . . . .18

HP-UX 11i v2 Operating Environment September 2004

Important Discontinuance Infor-mation:HP has discontinued the HP ItaniumWorkstation family as of Sept 1,2004. Shipments shall be completedby the end of October. Productsupport for Itanium workstations(zx2000, zx6000) running HP-UX orLinux will be continued for 5 yearsfrom the product discontinuance.In conjunction with the obsolescenceof workstation hardware we are alsodiscontinuing the workstationsoftware products:B9000AA Minimal TechnicalComputing OE.B9001AA Technical Computing OE.

A note for HP Integrity serversupport customersHP has upgraded our supportprocesses to better serve ourcustomers and to be more responsiveto your support needs for bothIntegrity server hardware andsoftware. HP has upgraded ourprocesses so as to improve responsetimes for all of our customers,particularly those with mission-criticallevel services. As an Integrity servercustomer, you will find HP support tobe knowledgeable, timely, efficientand ready to serve your needs atany hour of the day or night.

HP-UX 11i v2 Operating Environment September 2004

8

9

What’s updated in the HP-UX 11i v2 September 2004release?

The September 2004 release of UP-UX 11i v2 is a joint release of HP-UX11i for both the HP9000 andIntegrity server families. This releaseoffers a full range of HP-UXOperating Environments andcapabilities including 128-wayscaling, systems management,security, and high-availability softwareproducts. This release of HP-UX 11i v2is delivered on a common DVDmedia which means that the samemedia can be used for installation oneither HP 9000 or Integrity servers.

Itanium-based systems offersignificantly better price/performanceand performance scalability thansystems based on currentarchitectures, and HP-UX 11i v2provides the best way to preserveyour investment through the transitionfrom Precision-Architecture ReducedInstruction Set Computing (PA-RISC)HP-9000 servers to Itanium basedIntegrity servers.

Hewlett-Packard’s enterprise computingbusiness has carefully planned thetransition to Itanium-based systems,placing a premium on customer andpartner investment protection. HP-UX

11i v2 maintains compatibilitybetween HP 9000 and Integrityservers through: • Common “look and feel”• Application Build Environment

compatibility (source code compatibility)

• Data compatibility• Binary compatibility

With this release of HP-UX 11i v2 forboth HP 9000 and Integrity serverfamilies, HP has successfullyintroduced a transition bridgebetween the PA-RISC architectureand Itanium architecture andprovided a smooth transition path forits customers and partners onto theItanium next-generation architecture.

There are many other improvementsand upgrades in all the functionalareas of HP-UX which include:• management utilities • disk and file management • high availability with Serviceguard • networking • security • commands and system calls • programming languages and • utilities

10

HP-UX 11i version 2 is supported onall current HP Integrity servers. Thefollowing HP 9000 PA-RISC servers(11iv1) are fully supported:

• Class/rp2400 series except A180 and A180C, which had 32-bit processors

• L-Class/rp5400 series• rp3400 series• rp4400 series• All N-Class/rp7400 series• All rp8400 series• All HP 9000 Superdome

HP encourages you to look for moredetailed information on the changesin the September 2004 HP-UX 11iv2 Operating Environments at thefollowing url: http://docs.hp.com/hpux/os/11iv2/index.html, click on the “ReleaseNotes” link to go to the HP-UX 11iv2 September 2004 Release Notes,Chapter 3, "What's New at aGlance".

Your HP US licensing contact:Hewlett-Packard CompanyHP Licensing Services North AmericaPhone: +1(650) 960-5111or (800) 538-1733Fax: +1(650) 960-5670or (800) 541-2633E-mail: hplicense.na@hp.comBusiness hours: Monday to Friday 6:00am - 4:30pm PST

Your HP European licensing contact:Hewlett-Packard IrelandHP Licensing Services IrelandPhone: +353 (0)91 75 40 06Fax: +353 (0)91 70 1002E-mail: codeword_europe@hp.comBusiness hours: Monday to Friday 8:30am - 5:30pm GMT

Your HP Asia Pacific contact:Hewlett-Packard JapanHP Licensing Services JapanPhone: 0120.42.1231 (Inside Japan)or 0426.48.9310 (Inside Japan)or +81.426.48.9312 (Outside Japan)Fax: 0 120.52.1231 (Inside Japan)or +81 426.39.4983 (Outside Japan)E-mail: sw_codeword@hp.comBusiness hours: Monday to Friday 9:00am - 5:30pm GMT+9

Licensing information for September 2004

Some applications require codeword certificate to unlock the software.The password is supplied with your software shipment or for some productsyou will receive a “password request form” enclosed with your shipmentasking you to:1. Generate it on line on Software License Manager2. Generate it on line on Web ware3. View it on line thru Software Update Manager4. Contact HP Licensing Services5. Contact Password Center

Hewlett-Packard Password Centerfor U.S.A:Phone: (801) 431-1597 or (800)326-0411Fax: (801) 431-3654Hours of operation: 6:00 am to6:00 pm MSTAmericas_password@cnd.hp.com

Hewlett-Packard Password Centerfor Europe/Africa:Phone: (+31-55-543-4642)Fax: (+31-55-543-4645)Hours of operation: 9:00 to 18:00CETEurope_password@cnd.hp.com

Hewlett-Packard Password Centerfor Asia Pacific:Phone: (outside Japan) +81-3-3227-5672Phone: (within Japan) 03-3227-5264Fax: (+81-3-3227-5238)Hours of operation: 9:00 am to5:00 pm JSTAsia_password@cnd.hp.com

For some other products it is recommended to:1. Generate the password on line thru Web Ware web site at the

url:www.webware.hp.com, or2. For additional password assistance you may contact one of the

following license centers

11

12

Workstation Platform

Base Category Description Product Number Version Update/New11.23 NETWORKING ACC/X.25 SW bnd Z7344A B.03.40.02 New 11.23 NETWORKING ATM PCI ATM-00 M.11.23.10 Update 11.23 MULTIMEDIA Audio Clients AudioClient B.11.23.02 New 11.23 NETWORKING Auto Port Aggreg J4240AA B.11.23.05 New 11.23 CASE C SB LTU -Eng B6449EB E.11.23.01 Update 11.23 CASE C SB LTU -Jpn B6450EB E.11.23.01 Update 11.23 CASE C++ SB LTU -Eng B6451EB E.11.23.01 Update 11.23 CASE C++ SB LTU -Jpn B6452EB E.11.23.01 Update 11.23 LANGUAGE C/ANSI C Dev LTU B3899BA C.11.23.01 Update 11.23 OTHER Device Manager PeriphDev B.11.23.02 Update 11.23 NETWORKING Dual Gbe S/W IEther-00 B.11.23.05 Update 11.23 OTHER EMS Framework B7609BA A.04.10 Update 11.23 NETWORKING FCD PCI-X Adaptr FibrChanl-01 B.11.23.02 New 11.23 NETWORKING FDDI Univ PCI FDDI-00 B.11.23.01 Update 11.23 LANGUAGE Fortran90 LTU B3907DB B.11.23.08 Update 11.23 CASE GNU Src for SB SBGNU E.11.23.01 Update 11.23 OTHER GTK+ LIbraries B6848BA 1.4.gm.46.9 Update 11.23 NETWORKING GbE PCI 1000B-T GigEther-01 B.11.23.05 Update 11.23 NETWORKING GbE PCI 1000BT GigEther-00 B.11.23.05 Update 11.23 OTHER Glance + M/M B3691AA C.03.85.00 Update 11.23 OTHER Glance + Pak B3699AA C.03.85.00 Update 11.23 OTHER GraphicsTechCom Graphics B.11.23.03. New 11.23 OTHER HP CIFS Client B8724AA A.01.09.02 Update 11.23 OTHER HP CIFS Server B8725AA A.01.11.02 Update 11.23 OTHER HP MPI B6060BA B.11.23.06 Update 11.23 OTHER HP VxVM - Base Base-VXVM B.03.50.IA. Update 11.23 LANGUAGE HP aC++ LTU B3911DB C.11.23.01 Update 11.23 LANGUAGE HP-UX Apache hpuxwsApache B.2.0.50.01 Update 11.23 NETWORKING HP-UX IPFilter B9901AA A.03.05.10. Update 11.23 NETWORKING HP-UX IPSec J4256AA A.02.00.01 Update

Newly released or updated productsfor September 2004

13

Workstation Platform

Base Category Description Product Number Version Update/New11.23 LANGUAGE HP-UX Tomcat hpuxwsTomcat B.4.1.29.03 Update 11.23 LANGUAGE HP-UX Tools hpuxwsXml A.2.00 Update 11.23 LANGUAGE HP-UX Webmin hpuxwsWebmin A.1.070.01 Update 11.23 OTHER HPUXOpenSSL OpenSSL A.00.09.07- New 11.23 OTHER HW Par Provider NPar B.11.23.01. Update 11.23 NETWORKING HyperFabric drvr HyprFabrc-00 B.11.23.01. Update 11.23 OTHER IDS/9000 HPUX-HIDS D.02.02.26 New 11.23 OTHER ISEEPlatform ISEEPlatform A.03.50.861 New 11.23 OTHER Ignite-UX B5725AA C.6.0.109 Update 11.23 NETWORKING InfiniBand-Core IB4X-00 B.11.23.02 New 11.23 OTHER Java Out-of-Box JAVAOOB 2.03.01 Update 11.23 LANGUAGE Java2 JDK 1.4 T1456AA 1.4.2.03.04 Update 11.23 LANGUAGE Java2 JPI 1.3 T1455AA 1.3.1.13.01 Update 11.23 LANGUAGE Java2 JPI 1.4 T1458AA 1.4.2.03.04 Update 11.23 LANGUAGE Java2 JRE 1.3 B9789AA 1.3.1.13.01 Update 11.23 LANGUAGE Java2 JRE 1.4 T1457AA 1.4.2.03.04 Update 11.23 LANGUAGE Java2 RTE Addon T1457AAaddon 1.4.2.03.04 New 11.23 LANGUAGE Java2 SDK 1.3 B9788AA 1.3.1.13.01 Update 11.23 LANGUAGE Java2 SDK Addon T1456AAaddon 1.4.2.03.04 New 11.23 LANGUAGE Java3D for 1.3 T1868AA 1.3.0.01.11 Update 11.23 LANGUAGE Java3D for 1.4 T1869AA 1.3.0.01.11 Update 11.23 OTHER Kerberos Server T1417AA C.03.02 New 11.23 OTHER Kernel Config Casey B.11.23.10 Update 11.23 OTHER LDAP-UX Integ J4269AA B.03.20.02 Update 11.23 OTHER MLIB Math Lib B6061AA B.08.06.02 Update 11.23 OTHER MWA Wk M/M B4965AA C.03.85.00 Update 11.23 NETWORKING MobileIPv6 HA/CN HPUXMOBILEIP A.01.01 New 11.23 OTHER Mozilla MOZILLA 1.4.0.01.04 Update 11.23 OTHER Mozilla Source MOZILLAsrc 1.4.0.01.04 Update 11.23 OTHER MySQL MySQL 3.23.54a.01 Update 11.23 OTHER NetscapeDirSvrV6 J4258CA B.06.11.20 New 11.23 NETWORKING PCI Mux 8/64Port TermIO-00 B.11.23.1.1 Update 11.23 NETWORKING PCI Token Ring TokenRing-00 B.11.23.01 Update 11.23 OTHER PRM Sw Libs B7697BA C.02.03.03 Update 11.23 OTHER PRM sw/lic B3835DA C.02.03.03 Update 11.23 NETWORKING Pam Kerberos J5849AA C.01.23 Update 11.23 OTHER ParMgr ParMgr B.11.23.02. Update

14

Workstation Platform

Base Category Description Product Number Version Update/New11.23 OTHER Pay Per Use T2351AA B.11.23.07. Update 11.23 NETWORKING RAID SA software RAID-01 B.11.23.02 New 11.23 NETWORKING SCSI U320 scsiU320-00 B.11.23.01 Update 11.23 NETWORKING SNA+2 3270 J2722BA R6.11.23.00 Update 11.23 NETWORKING SNA+2 API J2724BA R6.11.23.00 Update 11.23 NETWORKING SNA+2 APPN EN J2721BA R6.11.23.00 Update 11.23 NETWORKING SNA+2 Link J2720BA R6.11.23.00 Update 11.23 NETWORKING SNA+2 RJE J2723BA R6.11.23.00 Update 11.23 OTHER Sec Patch Check SecPatchCk B.02.02 New 11.23 OTHER Secure Shell T1471AA A.03.71.007 Update 11.23 OTHER Security Tools Sec00Tools B.01.02.00 Update 11.23 OTHER SwPkgBuilder SwPkgBuilder A.02.00.02 Update 11.23 OTHER SysMgmtAgent B8339BA B.03.00.09 Update 11.23 OTHER SysMgmtBASE SysMgmtBASE B.00.01 New 11.23 NETWORKING TL pCI/HSC Adapt FibrChanl-00 B.11.23.03 Update 11.23 NETWORKING TN3270 J2636BA R6.11.23.00 Update 11.23 OTHER Tech Sys Config TechSysConf B.11.23.01. Update 11.23 NETWORKING USB driver USB-00 B.11.23.02 Update 11.23 OTHER WBEM SDK T1434BA A.02.00.04 Update 11.23 OTHER WBEM Services B8465BA A.02.00.04 Update 11.23 NETWORKING WBEMProvider-LAN WBEMP-LAN-00 B.11.23.01 New 11.23 OTHER WLM Monitor GUI WLMUtilities A.02.03.03 New 11.23 MULTIMEDIA WTSharedX SharedX B.11.23.05 Update 11.23 NETWORKING X.25/9000 Link J2793B B.11.23.02 Update 11.23 OTHER Zeus Web Server ZWST41_TRY B.04.02.04. Update 11.23 OTHER iCOD SW B9073BA B.11.23.06. Update 11.23 NETWORKING iSCSI-00 iSCSI-00 B.11.23.03c New 11.23 LANGUAGE perl-non CPL perl D.5.8.0.D Update

Server Platform

Base Category Description Product Number Version Update/New11.23 NETWORKING ACC/X.25 SW bnd Z7344A B.03.40.02 New 11.23 NETWORKING ATM PCI ATM-00 M.11.23.10 Update 11.23 NETWORKING Auto Port Aggreg J4240AA B.11.23.05 New 11.23 CASE C SB LTU -Eng B6445EB E.11.23.01 Update 11.23 CASE C SB LTU -Jpn B6446EB E.11.23.01 Update 11.23 CASE C++ SB LTU -Eng B6447EB E.11.23.01 Update 11.23 CASE C++ SB LTU -Jpn B6448EB E.11.23.01 Update 11.23 LANGUAGE C/ANSI C Dev LTU B3901BA C.11.23.01 Update 11.23 OTHER Cluster Obj Mgr B8324BA B.03.00.01 Update 11.23 OTHER ContCluster T2346BA A.04.02 New 11.23 OTHER Device Manager PeriphDev B.11.23.02 Update 11.23 NETWORKING Dual Gbe S/W IEther-00 B.11.23.05 Update 11.23 OTHER ECM Toolkit T1909BA B.02.11 Update 11.23 OTHER EMS Framework B7609BA A.04.10 Update 11.23 NETWORKING FCD PCI-X Adaptr FibrChanl-01 B.11.23.02 New 11.23 NETWORKING FDDI Univ PCI FDDI-00 B.11.23.01 Update 11.23 LANGUAGE Fortran90 LTU B3909DB B.11.23.08 Update 11.23 CASE GNU Src for SB SBGNU E.11.23.01 Update 11.23 OTHER GTK+ LIbraries B6848BA 1.4.gm.46.9 Update 11.23 NETWORKING GbE PCI 1000B-T GigEther-01 B.11.23.05 Update 11.23 NETWORKING GbE PCI 1000BT GigEther-00 B.11.23.05 Update 11.23 OTHER Glance + M/M B3693AA C.03.85.00 Update 11.23 OTHER Glance + Pak B3701AA C.03.85.00 Update 11.23 OTHER HA Monitors B5736DA A.04.10 Update 11.23 OTHER HP CIFS Client B8724AA A.01.09.02 Update 11.23 OTHER HP CIFS Server B8725AA A.01.11.02 Update 11.23 OTHER HP MPI B6060BA B.11.23.06 Update 11.23 OTHER HP Online JFS B3929DA B.11.23.05 Update 11.23 OTHER HP VxVM - Base Base-VXVM B.03.50.IA. Update 11.23 LANGUAGE HP aC++ LTU B3913DB C.11.23.01 Update 11.23 LANGUAGE HP-UX Apache hpuxwsApache B.2.0.50.01 Update 11.23 OTHER HP-UX Dev Kit HPDesktopDev B.11.23.07 New 11.23 NETWORKING HP-UX IPFilter B9901AA A.03.05.10. Update 11.23 NETWORKING HP-UX IPSec J4256AA A.02.00.01 Update 11.23 LANGUAGE HP-UX Tomcat hpuxwsTomcat B.4.1.29.03 Update 11.23 LANGUAGE HP-UX Tools hpuxwsXml A.2.00 Update

15

16

Server Platform

Base Category Description Product Number Version Update/New11.23 LANGUAGE HP-UX Webmin hpuxwsWebmin A.1.070.01 Update 11.23 OTHER HPUXOpenSSL OpenSSL A.00.09.07- New 11.23 OTHER HW Par Provider NPar B.11.23.01. Update 11.23 NETWORKING HyperFabric drvr HyprFabrc-00 B.11.23.01. Update 11.23 OTHER IDS/9000 HPUX-HIDS D.02.02.26 New 11.23 OTHER ISEEPlatform ISEEPlatform A.03.50.861 New 11.23 OTHER Ignite-UX B5725AA C.6.0.109 Update 11.23 NETWORKING InfiniBand-Core IB4X-00 B.11.23.02 New 11.23 OTHER Java Out-of-Box JAVAOOB 2.03.01 Update 11.23 LANGUAGE Java2 JDK 1.4 T1456AA 1.4.2.03.04 Update 11.23 LANGUAGE Java2 JPI 1.3 T1455AA 1.3.1.13.01 Update 11.23 LANGUAGE Java2 JPI 1.4 T1458AA 1.4.2.03.04 Update 11.23 LANGUAGE Java2 JRE 1.3 B9789AA 1.3.1.13.01 Update 11.23 LANGUAGE Java2 JRE 1.4 T1457AA 1.4.2.03.04 Update 11.23 LANGUAGE Java2 RTE Addon T1457AAaddon 1.4.2.03.04 New 11.23 LANGUAGE Java2 SDK 1.3 B9788AA 1.3.1.13.01 Update 11.23 LANGUAGE Java2 SDK Addon T1456AAaddon 1.4.2.03.04 New 11.23 OTHER Kerberos Server T1417AA C.03.02 New 11.23 OTHER Kernel Config Casey B.11.23.10 Update 11.23 OTHER LDAP-UX Integ J4269AA B.03.20.02 Update 11.23 OTHER MLIB Math Lib B6061AA B.08.06.02 Update 11.23 OTHER MWA Svr M/M B4967AA C.03.85.00 Update 11.23 OTHER Metro Clstr SRDF B6264BA A.04.13 New 11.23 OTHER MetroClstr XP256 B8109BA A.04.22 New 11.23 NETWORKING MobileIPv6 HA/CN HPUXMOBILEIP A.01.01 New 11.23 OTHER Mozilla MOZILLA 1.4.0.01.04 Update 11.23 OTHER Mozilla Source MOZILLAsrc 1.4.0.01.04 Update 11.23 OTHER MySQL MySQL 3.23.54a.01 Update 11.23 OTHER NetscapeDirSvrV6 J4258CA B.06.11.20 New 11.23 NETWORKING PCI Mux 8/64Port TermIO-00 B.11.23.1.1 Update 11.23 NETWORKING PCI Token Ring TokenRing-00 B.11.23.01 Update 11.23 OTHER PRM Sw Libs B7697BA C.02.03.03 Update 11.23 OTHER PRM sw/lic B3835DA C.02.03.03 Update 11.23 NETWORKING Pam Kerberos J5849AA C.01.23 Update 11.23 OTHER ParMgr ParMgr B.11.23.02. Update 11.23 OTHER Pay Per Use T2351AA B.11.23.07. Update 11.23 NETWORKING RAID SA software RAID-01 B.11.23.02 New

17

Server Platform

Base Category Description Product Number Version Update/New11.23 NETWORKING SCSI U320 scsiU320-00 B.11.23.01 Update 11.23 OTHER SG Ext for SAP T2357BA B.03.11 Update 11.23 OTHER SGeFF SW T2389BA A.01.00.00 New 11.23 OTHER SGeRAC T1907BA A.11.16.00 Update 11.23 NETWORKING SNA+2 3270 J2722BA R6.11.23.00 Update 11.23 NETWORKING SNA+2 API J2724BA R6.11.23.00 Update 11.23 NETWORKING SNA+2 APPN EN J2721BA R6.11.23.00 Update 11.23 NETWORKING SNA+2 Link J2720BA R6.11.23.00 Update 11.23 NETWORKING SNA+2 RJE J2723BA R6.11.23.00 Update 11.23 OTHER Sec Patch Check SecPatchCk B.02.02 New 11.23 OTHER Secure Shell T1471AA A.03.71.007 Update 11.23 OTHER Security Tools Sec00Tools B.01.02.00 Update 11.23 OTHER Serviceguard T1905BA A.11.16.00 Update 11.23 OTHER SwPkgBuilder SwPkgBuilder A.02.00.02 Update 11.23 OTHER SysMgmtAgent B8339BA B.03.00.09 Update 11.23 OTHER SysMgmtBASE SysMgmtBASE B.00.01 New 11.23 NETWORKING TL pCI/HSC Adapt FibrChanl-00 B.11.23.03 Update 11.23 NETWORKING TN3270 J2636BA R6.11.23.00 Update 11.23 NETWORKING USB driver USB-00 B.11.23.02 Update 11.23 OTHER WBEM SDK T1434BA A.02.00.04 Update 11.23 OTHER WBEM Services B8465BA A.02.00.04 Update 11.23 NETWORKING WBEMProvider-LAN WBEMP-LAN-00 B.11.23.01 New 11.23 OTHER WLM Monitor GUI WLMUtilities A.02.03.03 New 11.23 OTHER WLM Toolkits T1302AA A.01.07.03 Update 11.23 OTHER Workload Manager B8843CA A.02.03.03 Update 11.23 NETWORKING X.25/9000 Link J2793B B.11.23.02 Update 11.23 OTHER Zeus Web Server ZWST41_TRY B.04.02.04. Update 11.23 OTHER iCOD SW B9073BA B.11.23.06. Update 11.23 NETWORKING iSCSI-00 iSCSI-00 B.11.23.03c New 11.23 LANGUAGE perl-non CPL perl D.5.8.0.D Update

18

ACC- new productCustomers updating to HP-UX 11iv.2 on PA-RISC and/or customersmigrating to IA 64 platform wouldbenefit from this release.

Product Description Platform VersionZ7344A ACC/X.25 SW bnd 700,800 11.23

Product Description Platform VersionCasey Kernel Config 700,800 11.23

Newly released or updated products summary

Casey on 11.23- product updatedThe top three things that areoccurring with the product thatwould make the customer want torequest the update.a) Availability on PA platform b) Support for Terminal UserInterface (TUI).This update applies to System Adminmanaging UNIX patch updatesand/or planning UNIX hardwareupdates.

CIFS Client (B8724AA) - productupdatedThe release contains defect fixes andPAM-NTLM 64-bit support

Product Description Platform VersionB8724AA HP CIFS Client 700,800 11.23

19

Gigabit Ethernet; Fast Ethernet -product updatedGigabit Ethernet and Fast Ethernetnetworking cards and their alwaysinstalled drivers. Gigabit drivers arein all version B.11.23.05.

SUMMARYChanges since the June 04 releaseof 11i v 1.0 include:TCP Segmentation Offload (TSO)support for the iether and igelanGigabit Ethernet drivers. TSOoffloads portions of a system CPU'soutbound TCP packet processing toa network interface card therebyreducing system service demand.

64-bit management information base(MIB) statistics support. Directs theDLS provider to return 64 bit statistics.

HP-UX LAN provider support: youcan use WBEM-based clients toaccess the LAN Provider and collectinformation about the Ethernet linkson your system.

Virtual LAN (VLAN) support for HP-UX 11i v2 release of September2004: for further information accessthe following url: http://docs.hp.com/hpux/os/11iv2/index.html and clickon release notes.

IMPACTTCP Segmentation Offload (TSO) isa performance enhancement thatreduces a system's service demand.New or changed APIs: • New option added to both the

iether and igelan drivers to getand set a new tunable called"vmtu". The syntax of the newoption is described below.

• lanadmin -x vmtu <ppa> • lanadmin -X vmtu new_vmtu_value

<ppa>

COMPATIBILITYGigabit Ethernet and Fast Ethernetcards are supported on theSeptember 2004 HP-UX 11.23release. For further informationaccess the following url:http://docs.hp.com/hpux/os/11iv2/index.html and click on releasenotes.

TCP Segmentation Offload (TSO)works only with network cards thatuse the iether and igelan GigabitEthernet drivers. If you have a versionof HP-UX 11i v 1.0 or v 2.0 prior tothe September 2004 release, youcan download the TSO enhancementat http://software.hp.com underenhancement releases and patchbundles. TSO requires that the TOUR2.0 transport software be installed -the TOUR 2.0 transport software ispart of this September 2004 HP-UX11i v2 release.

20

PERFORMANCETSO performance information isavailable via the following url:http://docs.hp.com/hpux/os/11iv2/index.htmlClick on release notes.

DOCUMENTS64-bit MIB statistics comply with theRFC2863 (standard for 64 bitstatistics interpretation). See lanadminman page for details.

LAN Provider information isavailable in this document in theInternet and Networking chapter inthe section titled "HP-UX LANProvider".

OBSOLESCENCEAt the time of this writing, only theGigabit Ethernet and Fast Ethernetcards shown on page 21 aresupported on the September 2004

HP-UX 11i v2 OE release. Gigabitcards released since the publicationof this document will likely besupported but not shown in thisbrochure. Some older Fast Ethernetand Gigabit Ethernet cards thatworked on HP-UX 11i v 1.0 versionor even the March 2004 11i v 2.0will no longer work on thisSeptember 2004 HP-UX 11.23release. Among the GigE cards thatare not supported on this releaseare: A3738A, A5172A, A6792A,and A8685A PCI GigE cards.Among the Fast Ethernet cards thatare not supported on this releaseare: A3658AA, A4308B, J2780BA,A3495A, A3495B, and J2459BAFast Ethernet cards.Additional LAN cards that are notsupported on this September 2004HP-UX 11.23 release are EISA, HP-PB, and HSC types.

21

MACHINES-AFFECTEDLAN cards of the types mentioned inthe OBSOLESCENCE section will notoperate on the September 2004 HP-UX 11i v2 OE release.

Product Description Platform VersionA4926A GbE PCI 1000SX 700,800 11.23 A4929A GbE PCI 1000BT 700,800 11.23 GigEthe GbE PCI 1000BT 700,800 11.23

GigabitEthernet Product(s)

Product Description Platform VersionA7011A Dual GbE Fiber 700,800 11.23 A7012A Dual Gbe Copper 700,800 11.23 AB352A Dual Gbe Core 700,800 11.23 IEther- Dual Gbe S/W 700,800 11.23

GigabitIgelan Product(s)

Product Description Platform VersionA6794A GBE PCI 1000BT 700,800 11.23 A6825A GBE PCI 1000BT 700,800 11.23 A6847A GBE PCI 1000SX 700,800 11.23 A7109A GBE PCI 1000BT 700,800 11.23 A9782A GBE PCI 1000SX 700,800 11.23 A9784A GBE PCI 1000BT 700,800 11.23 GigEthe GbE PCI 1000B-T 700,800 11.23

Gigabitiether Product(s)

22

iCOD - product updated• fix for upgrading to any 6.*

version of iCOD, from versions prior to 6.0

• fix for system hang duringshutdown when using the shutdown command

• fix for more accurate iCOD resource reporting

PPU - active cpu metric with cpucapping:• WBEM communication to PPU

meter• more accurate reporting through

report caching

These changes apply to both SystemAdmins managing UNIX patchupdate and those planning forhardware upgrades.

Product Description Platform VersionB9073BA iCOD SW 700,800 11.23 T2351AA Pay Per Use 700,800 11.23

IPFilter A.03.05.10 - productupdated• Defect repairs, primarily in the

DCA and NAT features• Support for DCA and NAT on HP-

UX 11i v2 (previously these were only supported on HP-UX 11i v1).

Note that the version supplied on theSeptember application/operatingenvironment is planned to beidentical to the web release that iscoming out in the next couple weeks(same version number, same code).

Product Description Platform VersionB9901AA HP-UX IPFilter 700,800 11.23

IPSecurity A.02.00.01 - productupdated• Dynamic configuration update• MIPv6 support • Manual keying support• Command Line Interface method

for configuration• Defect repairs

Note that the version supplied on theSeptember 2004 applications willhave the same functionality as theupcoming web release (A.02.00),but it will have some minor codedifferences and therefore will have adifferent version number(A.02.00.01).

Product Description Platform VersionJ4256AA HP-UX IPSec 700,800 11.23

23

IUX - Update The Ignite-UX (Ignite-UX) product isan HP-UX administration toolset thathelps you do the following:

• install HP-UX 11.0 and 11i v1 (B.11.11), v1.6 (B.11.22), v2 (B.11.23) on multiple PA-RISC and/or Intel® Itanium®-based clients on your network;

• create custom install configurations,or golden images, for use inmultiple installations on clients;

• recover HP-UX clients remotely; • create custom recovery media

including tape, CD-ROM and DVD;• manage and monitor multiple

client installation sessions.

Product Description Platform VersionB5725AA Ignite-UX 700,800 11.23

Kerberos Products -PAM Kerberos -Update PAM Kerberos v 1.11 providesKerberos authentication as per thePluggable Authentication Module(PAM) architecture that is specifiedin Open group RFC 86.0. PAMallows multiple authenticationtechnologies to coexist. A configurationfile /etc/pam.conf determines whichauthentication module to use, in amanner transparent to the applicationsthat use the PAM library. PAMKerberos has the support for fourPAM modules namely Authenticationmodule, Account management module,Session management module andPassword management module. PAM Kerberos Library is one of themany authentication modules thatPAM can invoke based on what isdefined under the PAM configurationfile: /etc/pam.conf. If PAM's

authentication-management is pointedto the shared, dynamically loadablePAM Kerberos library ( Eg : /usr/lib/security/libpam_krb5.1), PAM Kerberosis invoked for user authentication. The PAM-Kerberos depot on HP-UX11.11 also contains the KerberosSupport v1.1 product as part of thesoftware bundle. Kerberos Supportv1.1 (KRBS-Support) has adependency on the KerberosSupport product (KRB-Support).Additionally, PAM-Kerberos isavailable on HP-UX 11.00, HP-UX11.22, and HP-UX 11.23. The HP-UX11.00 PAM-Kerberos depot containsKerberos-Client, KRB5-Client andGSSAPI products, GSS-API, as partof the bundle. However these twoproducts are part of the coreoperating system on HP-UX 11.11,HP-UX 11.22 and HP-UX 11.23.PAM Kerberos has dependency on

24

Kerberos-Client fileset KRB5-Client.IA32SLIB both on 11.22 and11.23.Features and Benefits: Following are the top three featuresof PAM-Kerberos on HP-UX 11.11and on HP-UX 11.00: • PAM Kerberos validation tool :

This tool will validate the PAMKerberos configuration. It validates the PAM Kerberos related entries in the configuration files /etc/pam.conf, /etc/pam_user.conf,/etc/krb5.conf and /etc/krb5.keytaband also checks for the presenceof the authentication server (KDC).

• Session Management: The credentials created by PAMKerberos for the user whilelogging-in will not be deleted from the system when the user closes the session, which might result in unnesessary usage of disk space. Hence the session management is now enhanced to provide this facility through pam_sm_close_session(), which will delete thecredentials that are created by the pam_sm_setcred().

• Configurable Password prompt: The password for PAM-Kerberos is now configurable by specifyingthe krb_prompt flag to the corresponding entry in the PAM configuration file /etc/pam.conf.

The top two features of Kerberos-Support on HP-UX 11.11 andKerberos-Client on HP-UX 11.00 are : • Appdefault support : The Kerberos

Client configuration file/etc/krb5.conf supports the[appdefaults] section. Each tag in the [appdefaults] section names aKerberos V5 application. Thevalue of the tag is a subsectionwith relations that define the defaultbehaviors for that application.

• ADS Multidomain Support: If theuser account is present inWindows 2000 multidomain, the Kerberos Client will resolve theWindows 2000 domain a userbelongs to. This will make the authentication consistent withnss_ldap (LDAPUX).

Product Description Platform VersionJ5849AA Pam Kerberos 700,800 11.23

25

Kerberos Server - New Kerberos Server version 3.1,T1417AA, is now available as partof the Kerberos Security productfamily. Kerberos is a mature networkauthentication protocol based on theRFC 1510 (The Kerberos NetworkAuthentication Service (V5))specification of the Internet EngineeringTask Force (IETF). It is designed toprovide strong authentication forclient or server applications using theshared secret key cryptography. Kerberos server v3.1, optionally,allows you to configure yourKerberos server with LDAP as thebackend database. The previousversions of the Kerberos serversupported C-tree as the backenddatabase.

Features and Benefits: Following are top features andbenefits this product offers, whichwould make you update fromKerberos Server version 2.0 and 3.0to Kerberos server v3.1 on HP-UX11i v2: • LDAP database:- This version,

optionally, enables you to configureyour Kerberos Server with LDAP as

the backend database. Byintegrating the Kerberos principals with the corresponding users inthe LDAP directory, you store datafor mechanisms, such as UNIXand Kerberos in a commonrepository.

• HP Kerberos Administrator: TheHP Kerberos Administrator is agraphical user interface that can be used to administer the kerberosprincipal database.

• Multithreaded Server: This capability has been provided for servicing user requests in KDC.Thus enhancing the performance of the Kerberos Server.

• High availability: In the event of the primary server crashing orgoing down, the secondary server(backup) can immediately bemade the primary server. This isaccomplished by having theparent process always monitor the server daemon, kdcd. If the serverdaemon dies or crashes, theparent process will automatically spawn a new server daemon. Thisprovides for high availability in the case of mission critical applications.

Product Description Platform VersionT1417AA Kerberos Server 700,800 11.23

26

Mobile IPv6 - NewMobile IPv6 is the next generation ofMobile IP technology. HP-UX 11iMobile IPv6 allows mobile nodes tochange network attachment pointsusing a single and fixed IPv6address for extended periods oftime. Users with portable handhelddevices or laptops are now able toroam throughout the Internet fromone domain to another whileconstantly communicating to aremote application (CorrespondentNode) with uninterrupted service.

This product actually consists of twoMobile IPv6 components: HomeAgent and Correspondent Node.The Home Agent is for thosecustomers who need to providemobility service to Mobile Nodesthat administratively belong to them(e.g. service providers). TheCorrespondent Node is for any IPv6box owner who wants to provideMIPv6's route optimization supportto Mobile Nodes that will directlycommunicate to the IPv6 boxbypassing the Home Agent.

Benefits of HP-UX Mobile IPv6:• It's free-of-charge• It's designed for and supports MP

scaling • IPSec is also offered from HP and

is also free-of-charge • It has participated in conformance

testing and multi-vendor verificationat TAHI project forums andnumerous Connectathon bakeoffs

• HP's nettl tracing tool will supportMobile IPv6 packet tracing

• Mobile IPv6 product is bundledwith TOUR 2.0 and can beobtained through HP's Softwaredepot at the url: www.software.hp.com

• It includes easy to use and friendlyadministrator tools for configurationand administration.

Mobile IPv6 A.01.00 is based onthe following IETF Standards: • RFC 3775 - Mobility Support in

IPv6 • RFC 3776 - Using IPSec to Protect

Mobile IPv6 Signaling BetweenMobile Nodes and Home Agents

Product Description Platform VersionHPUXMOB MobileIPv6 HA/CN 700,800 11.23

27

OpenSSL - NewOpenSSL A.00.09.07-d is based onthe open source product OpenSSL0.9.7d, which offers a general-purpose cryptography library andimplementation of the Secure SocketsLayer (SSL v2/v3) and TransportLayer Security (TLS v1) protocols.OpenSSL A.00.09.07-d is fully testedand supported on the HP-UXoperating system. OpenSSLA.00.09.07-d is available as a webupgrade on the HP-UX 11i v1 andv2 operating systems. OpenSSLA.00.09.07-d is also available as aWeb upgrade on the HP-UX 11i v1operating system.

Prior to this release, OpenSSL waspart of the Internet Express suite ofproducts and the version shippedwith Internet Express was OpenSSL0.9.7c, which is an open sourceproduct. Starting with this release,OpenSSL will be released as a webupgrade and will also be availablein the application and in the HP-UXOperating Environments media.

HP has built OpenSSL A.00.09.07-dwith the following options:./Configure no-idea no-rc5 threadsshared zlib no-krb5 --openssldir=/opt/openssl hpux-cc

Supported Security Features OpenSSL A.00.09.07-d supports thefollowing security features:CiphersMessage Digest Public Key Encryption Certificates Encoding

OpenSSL A.00.09.07-d Components OpenSSL A.00.09.07-d contains thefollowing components:• The openssl library • The openssl command-line tool

28

The /opt/openssl/prngd/prngdDaemonOpenSSL A.00.09.07-d relies onrandom numbers for generatingcryptographic keys and digitalsignatures. A strong random numbergenerator is necessary to providesecure and non-reproducible keysand certificates. You can use/dev/urandom, /dev/random, or/opt/openssl/prngd/prngd togenerate random numbers. OpenSSL A.00.09.07-d looks for therandom number generator in thefollowing order: 1. /dev/urandom 2. /dev/random 3. /opt/openssl/prngd/prngd If none of the three random numbergenerators are available on thesystem, OpenSSL returns an errorwhile executing cryptographicfunctions. To prevent this situation,the OpenSSL A.00.09.07-d productfor HP-UX 11i v1 includes the/opt/openssl/prngd/prngd randomnumber generator. The HP-UX 11i v2

operating system contains /dev/random by default; therefore, it doesnot require /opt/openssl/prngd/prngd for generating random numbers.

Random number generation using/dev/urandom or /dev/random isfaster compared to /opt/openssl/prngd/prngd, but prngd isautomatically used by the appropriateOpenSSL function when /dev/urandom or /dev/random is notinstalled on the system. HP-UX 11i v1users can download /dev/random,from the following location: http://www.software.hp.com/portal/swdepot/displayProductInfo.do?ProductNumber=KRNG11IThe prngd server reads HP-UXcommands from the prngd.conf file,computes random numbers based oncertain parameters, and writes thecomputed random numbers to an HP-UX socket located at the /var/run/egd-pool directory. OpenSSL functionscan connect to and read randomnumbers from this socket.

29

Automatically Generated Self-Signed Host CertificateOpenSSL A.00.09.07-d automaticallygenerates a self-signed host certificatecompared to Internet Express OpenSSLversion 0.9.7c. An SSL-enabled server requires a hostcertificate that identifies the server. Acertificate is a document that containsdetails such as the network host'sidentity, the name and ID of the CA,and expiry date of the certificate.Before you can deploy an SSL-enabled server for production, it mustacquire a certificate signed by alegitimate Certificate Authority (CA).However, for testing purposes thecertificate can also be self-signed,that is, the certificate can be signedby the application generating thecertificate. Normally, self-signedcertificates are used for testing andcertification of SSL-enabled servers.Setting up a certificate hierarchy caninitially consume lot of time.

Therefore, if a self-signed certificateis readily available, you can directyour SSL-server to this certificate.Starting with this release, OpenSSLA.00.09.07-d automatically generatesa self-signed host certificate andprivate key. The host certificate isstored as /opt/openssl/certs/host.pem,and the private key of the hostcertificate as /opt/openssl/private/hostkey.pem. The subject name ofthe certificate is as follows:C=US, ST=CA, L=City, O=Company,CN=localhost/emailAddress=www@localhostYou can also generate a self-signedhost certificate using the followingcommand:openssl req -new -x509 -out/opt/openssl/certs/host.pem -keyout/opt/openssl/private/hostkey.pem -nodes -subj /C=US/ST=CA/L=City/O=Company/CN=localhost/emailAddress=www@localhost

Product Description Platform VersionOpenSSL HPUXOpenSSL 700,800 11.23

30

Secure Shell - UpdateHP-UX Secure Shell A.03.71.000,based on OpenSSH 3.7p2, providesa secure channel for remotecommunication by transparentlyencrypting network traffic. HP-UXSecure Shell uses hashing to ensuredata integrity and supports severalauthentication methods. HP-UX SecureShell supports the SSH-1 and SSH-2protocols and provides strongersecurity than the traditional ftp,remsh, telnet, and rcp services. HP-UX Secure Shell also includes toolsfor manually creating public andprivate keys, storing private keys,and gathering public keys.

HP-UX Secure Shell provides thefollowing features and benefits: • Strong encryption • Secure tunneling capabilities • Several authentication schemes • Kerberos 5/GSSAPI • PAM for password authentication • Public key • IPv6 support • Fully-tested HP product • Support included with HP-UX

Support Agreement • Privilege separation • Enhanced ls support for sftp • SSH protocol enhancements

The following new features havebeen added in HP-UX Secure ShellA.03.71.000:• Enhanced ssh_prng_cmds for

random number generation • New escape character (~B) for

requesting a pseudo terminal • Support for generating KEX-GEX

groups (/etc/moduli) in the ssh-keygen file

• New AddressFamily option in theSecure Shell client

• New configuration directive, UsePAM, to enable or disable PAM support

• Support for chroot in SSH and SFTP

• VerifyReverseMapping directivereplaced with the UseDNSconfiguration directive

• SOCKS V5 support for dynamicforwarding mode in ssh(1)

• Automatic rekeying based on quantify of data

• Support for /etc/default/security directives

• Recording bad login attempts

31

Improved Secure Shell Performanceand Security with HP's StrongRandom Number GeneratorHP's Strong Random NumberGenerator improves the performanceand security of HP-UX Secure Shell.The Strong Random NumberGenerator product provides asecure, non-reproducible source oftrue random numbers. HP-UX SecureShell automatically detects and usesthe Strong Random NumberGenerator if it is installed. Using theStrong Random Number Generatorwith HP-UX Secure Shell will

significantly speed-up programinitialization time and improvesecurity because it generates arandom number that cannot beinfluenced. Download StrongRandom Number Generator

In the HP-UX 11i Version 2.0operating system, the /dev/randompatch is part of the core operatingsystem. Therefore, the randomnumber generation feature is readilyavailable after installing theoperating system.

Product Description Platform VersionT1471AA Secure Shell 700,800 11.23

Security Patch Check B.02.00 - New

The following features are included:a) Reports all recommended actions

to address HP-UX security bulletins.Specifically, Security Patch Check analyzes product updates andmanual actions needed to address all relevant security bulletins.Previous versions only analyzed patches.

b) Support for SSL (tamper-resistant) downloads of the security patchcatalog, in addition to the previously supported FTPdownload.

The tool is useful to HP-UX SystemAdministrators responsible forkeeping systems up to date withrespect to HP Security Bulletins.

Product Description Platform VersionSecPatc Sec Patch Check 700,800 11.23

32

SoftBench.- product updatedHP Softbench is a complete set oftools for application developmentusing C and C++. It combinesinnovative project-based softwaredevelopment with an easy-to-usegraphical user interface (GUI) and arobust set of development tools thatgo beyond traditional edit-build-debug functionality. HP Softbench'sProject Model and the tightintegration between tools, results indevelopers spending less timeinteracting with the underlyingsystem and more time focusing onwriting high-performance, high-quality applications.

Here are the top changes that areoccurring with 11.23 SoftBench thatwould make you request the update:

Softbench is being delivered on11.23 PA systems for the first time.The permissions on writeabledirectories in softbench are modified,to allow for sticky bit. This willenhance the security features of theproduct.

The product update applies toSystem Admin managing UNIXpatch updates.

Product Description Platform VersionB6445EB C SB LTU -Eng 800 11.23 B6446EB C SB LTU -Jpn 800 11.23 B6447EB C++ SB LTU -Eng 800 11.23 B6448EB C++ SB LTU -Jpn 800 11.23 B6449EB C SB LTU -Eng 700 11.23 B6450EB C SB LTU -Jpn 700 11.23 B6451EB C++ SB LTU -Eng 700 11.23 B6452EB C++ SB LTU -Jpn 700 11.23 SBGNU GNU Src for SB 700,800 11.23

For the September 2004 release wewill provide the latest versions ofboth IPSec (A.02.00) and IPFilter(A.03.05.10) on the HP-UX 11i v2

OS base. As you know, the keypoint here is that this release willsupport both IA and PA hardwareplatforms.

33

WBEM Services Product - productupdatedMajor features added to the HPWBEM Services 2.0 release include:• WBEM Indication (Event) Support.

This release of HP WBEM Services delivers DMTF compliant infrastructure components requiredfor Indication subscription,creation, delivery and reception.

• Enhanced Security Features. Thisrelease of HP WBEM Services includes a set of security enhancements that increase

supportability and configurability of the CIM Server.

• Enhanced Platform Support. Thisrelease of HP WBEM Services isnow available and supported on a wide variety of HP-UX and LinuxPlatforms at the url:www.hp.com/go/wbem

This update applies to System Adminmanaging UNIX patch updatesand/or planning UNIX hardwareupdates.

Product Description Platform VersionB8465BA WBEM Services 700,800 11.23 T1434BA WBEM SDK 700,800 11.23

MiscellaneousThe products listed below aresupporting this release of HP-UX 11iv2 Update 2. Customers wanting thisnew version of the OS, will now beable to run it on HP 9000 systems.From a Serviceguard perspective, wewill be providing support for mixed

clusters meaning customers will beable to have HP 9000 and HPIntegrity systems running in a singleServiceguard cluster. Specificconfiguration requirements areavailable via a white paper athttp://docs.hp.com/

34

Product Description Platform VersionB7660BA ContCluster Doc 800 11.23 T2346BA ContCluster 800 11.23

ContClusters - New product

Product Description Platform VersionB5736DA HA Monitors 800 11.23 B7609BA EMS Framework 700,800 11.23

EMS- product updated

Product Description Platform VersionT2389BA SGeFF SW 800 11.23

SGeFF – New product

Product Description Platform VersionT1907BA SGeRAC 800 11.23 T1908BA SGeRAC Docs 800 11.23

SGeRAC – product updated

Product Description Platform VersionB8324BA Cluster Obj Mgr 800 11.23

ServGuardAPI -

Product Description Platform VersionT1905BA Serviceguard 800 11.23 T1906BA Servguard Docs 800 11.23

ServiceGuard -

Product Description Platform VersionB6264BA Metro Clstr SRDF 800 11.23 B8109BA MetroClstr XP256 800 11.23 T1909BA ECM Toolkit 800 11.23 T2357BA SG Ext for SAP 800 11.23

Toolkits -

© Copyright 2004 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The onlywarranties for HP products and services are set forth in the express warranty statementsaccompanying such products and services. Nothing herein should be construed asconstituting an additional warranty. HP shall not be liable for technical or editorialerrors or omissions contained herein.Printed in Europe September 2004