Lenovo UPS Power Protector v1.71.0017 for Windows

Change History

Supported with all models of 5594 and 5595 UPS units only.


NOTE: All operating system compatibility guides and the software user guide
      are also contained in the download package


********************************************************************************

ATTENTION!

As a minimum the following firewall ports must be opened for UPS Power Protector
to work properly:

4679
4680

Please refer to the included UPP User Guide for further details on TCP / UDP
ports in "Chapter 1. Introduction / Network Ports".

********************************************************************************


===============================================================================
 Release note Lenovo UPP 1.71
===============================================================================

New features
============
* None

Bugs fixed
==========
* Set Node Access Parameter, which was not available in UPP 1.69 and is now
     available.
* The FireFox events icons that were missing from the event configuration
     dialogue is now available.

Cyber-security
==============
* Version 1.71 of IPP software has enhanced security with better authentication
     and data upload authenticity protections, implemented. Vulnerability
     numbered CVE-2022-33861 and CVE-2022-33862 have been fixed.

*Warning*
=========
To execute a shutdown, the UPP service has to run with Administrator/root rights.
Though access to the web server is protected through Login/Password, customers
should make sure that access to the server is not opened to the World Wide Web.

As an additional protection, customers can restrict the access to the server by 
configuring the server firewall to forbid remote access on ports 4679 and 4680.


===============================================================================
 Release note Lenovo UPP 1.69
===============================================================================


Cyber-security:
=============== 
* Script injection via fake/emulated Network UPS card containing malicious
     scripts in the *.xml files
* JavaScript injection via input text fields


===============================================================================
 Release note Lenovo UPP 1.68 
===============================================================================
 
Bugs fixed: 
=========== 
* VPS not shutting down UPP Software
* Removing and changing the assigned power source from Power Protector application
* Sending alarm emails via Office 365 and Gmail
* Missing Input voltage and Input current in the Measure panel when Power source is
     connected in USB / RS232
* The Power source designation (name) is incorrect
* OS shutdown duration is not properly synchronized
* Charset encoding for JSON data causes parsing error at client side
 
Cyber-security : 
=============== 
* Multiple unauthenticated accesses to UPP
* SQL Injection (Post-Auth) - Improper Neutralization of Special Elements used in
     an SQL Command


=============================================================================== 
 Release note Lenovo UPP 1.67 
=============================================================================== 
 
Bugs fixed: 
=========== 
* Power components panel now display correctly all data for VPS (including
    protection state)
* The power source edition (remove or change) in UPP is fixed : change does
     not require intervention on the Network card
* Communication lost status is now correctly detected and shown in UPP
* The UPS connected locally (via USB or RS232) is set automatically as power
     source after UPP installation
 
Cyber-security : 
=============== 
* Cyber resilience upon upgrade is improved to prevent any command injection
     through update file (CVE-2020-6651 and CVE-2020-6652)


===============================================================================
 Release notes Lenovo UPP 1.66
===============================================================================

==============================
New features and improvements:
==============================
* STARTTLS email protocol compatible with UPP

===============
Cyber-security:
===============
* Unsecure HTTP connection deactivated by default
* Unprotected Windows services executable path vulnerabilities are fixed
* CVE-2014-3566 - POODLE (SSLv3) vulnerability fixed
* Undisclosed various IPP path traversal vulnerabilities are fixed


===============================================================================
 Release note Lenovo UPP 1.57
===============================================================================

==============================
New features and improvements:
==============================
* Added support for TLS 1.2 protocol 
* Added support for Windows Server 2016
* Added support for VMware 6.5
* Added support for RHEL 7.4 & 7.3
* Added support for SLES 12 SP2


===============================================================================
 Release note Lenovo UPP 1.52
===============================================================================

==============================
New features and improvements:
==============================
* Improved communication issues detection

==============================
Bug fixes:
==============================
* Better integration in last Linux distribution

===============================================================================
 Release note Lenovo UPP 1.42.006
===============================================================================

==============================
New features and improvements:
==============================
* Compatibility with Lenovo UPS T 1 to 1.5 kVA
* Compatibility with Lenovo UPS RT 1.5 to 3 kVA
* Compatibility with Lenovo UPS RT 5 to 11 kVA 1 Phase
* Compatibility with Lenovo UPS RT 8 to 11 kVA 3 Phase

==============================
Bug fixes:
==============================
* Fixed communication losses with Virtual Power Sources that could prevent UPP protection mechanisms to be launched properly
* Ubuntu with the Unity interface, The Open shortcut does not work.
* The status bar doesn't upgrade counters when adding or suppressing nodes.
* Fix issue on upgrade procedure
* Events Calendar is no more limited to current year.
* Fix the root issue of loading error from AFS on WinSrv 2008 & WinSrv 2012.
* Virtual Power Source improvements:
  * Status is better managed to avoid some unexpected shutdown.
  * VPS can be used as a Power Source without restarting UPP Service
  * VPS login/password correctly synchronized on source UPS
  * VPS with Parallel UPS: Communication Lost with all connectUPS and Data Base error fixed

  
===============================================================================
 Release notes IBM UPS Power Manager/Protector 1.42.0005 (Release 2.0)
===============================================================================

Changeset:
==========

* New version number for official release: v01.42 build 0005


===============================================================================
 Release notes IBM UPS Power Manager/Protector 1.04.0003 (Release 2.0)
===============================================================================

Changeset:
==========

* New version number for official release: v01.04 build 0003


===============================================================================
 Release notes IBM UPS Power Manager/Protector 1.03.0003 (Release 2.0)
===============================================================================

Changeset:
==========

* Add updated automatic upgrade information
* Updated compiled binaries
* Unit test updates
* Add new developer scripts
* Create a specific VA License, removing all '&' characters not correctly handled in VMware studio
* Add conditions on hid layer specific workaround, so that they don't apply on new Signature 5P, 5PX and 9PX based UPS.
* VA packaging improvement tests
 * Try replacing S function by X one to avoid issue with specific characters like &
 * Adding bugfixes for packaging and VA:
  * Automatic build errors
  * VA centos 6.5 + jdk1.7 server
* Use specific IBM default login and password everywhere it is needed (virtualization modules)
* New version number: v01.42 build 0005


Buxfixes:
=========
* IBMUV-7: VA UPM - the given root password is false
=> Use a new and more generic password for IBM Surry VA + modify introduction text accordingly

* IBMUV-8: UPM - OEM NMC cards are not present in "Nodes Setting"
=> Use the correct min version value + add traces in nmc_config file


===============================================================================
 Release notes IBM UPS Power Manager/Protector 1.42.000x (Release 2.0)
===============================================================================


New features:
=============

* Italian language has been added
* New connector supports vCenter installation non-default port
* Change driver node: after discovering a node, it's now possible to re-assign another driver to a node.
* Infrastructure Connectors (JRE prerequisite, please see the Licensing chapter in the user guide) 
 * Better integration of VMware vCenter.
 * NetApp Storage management.
 * Cisco UCS Management.
* vSphere web plug-in gives access to the power source status in the VMware vSphere.
* Ability to open CA’s Nimsoft platform from IBM UPM.
* "Generic driver" is a new and advanced feature which allows supervising any SNMP or NUT enabled device.
* Export nodes data into a CSV file.
* Synchronization of NetworkMS card security settings (except passwords).
* SNMPv3 support for IBM UPM and IBM UPP data acquisition.
* Storage supervision (NETAPP, HP, SYNOLOGY, NETGEAR, QNAP, BUFFALO)
* For NETAPP storage it is also possible to trigger graceful shutdown from IBM UPM.
* IBM UPM/UPP administrator has the possibility to definitely delete the old events from IBM UPM database in order to reduce size and improve performance.


Bug fixed:
==========

 * ESXi type is now available to create a sub view of the node view
 * Shutdown's sequences to NetappStorage are now logged correctly
 * No more display delay for the IBM UPM widget into vSphere Web Client
 * No more issue when removing VMware vCenter Plugin connector 
 * Maintenance or shutdown orders work in new VMware vCenter connector even when activating the plugin directly at creation time
 * Initial configuration of a new connector at creation time is now taken into account
 * Robustness improvement of ESXi Maintenance mode management
 * Robustness improvement of communication reliability with new connectors 
 * New connector Netapp Storage: No more communication loss when restarting the IBM UPM service
 * (IBM UPP) Fixed communication losses with Virtual Power Sources that could prevent IBM UPP protection mechanisms to be launched properly
 * The transfer to High Efficiency mode (on bypass) is now visible in the events list.
 * 9130 UPS does shutoff at the end of the Shutdown duration.
 * Fixing some problems with SCVMM and Maintenance Mode.
 * Tabulations added in XenCenter are now different if it's a IBM UPP or IBM UPM.
 * Fix VMware Mass Configuration Cache Problem.
 * Removing IBM UPM tab in vCenter, when removing the plugin.
 * Error messages generated while VM shutdown and Turn on.
 * MassConfig of the IBM UPM shutdown settings is now available.
 * Fixed level status for 9390 On Bypass mode in IBM UPM
 * Fixing different battery status depending on Power Source
 * Fixing synoptic problem (on bypass).
 * Fixing problem with IBM UPM, when vCenter is installed on an non-default port.
 * Fixing inconsistency value for load segment and shutdown duration, from a Network Management Card. 
 * The status bar does upgrade counters when adding or suppressing nodes.
 * German language display is now consistent.
 * (IBM UPP) Ubuntu with the Unity interface, The Open shortcut does not work.
 * Value size restriction in shutdown timer and shutdown duration fields (999999 max seconds).
 * Remove the Ascend/Descend sort capability for the "Messages" column in the Events panel.
 * Update the battery icon in system tray, depending of the power source status.
 * Correct some labels in the mass configuration.
 * Uninstallation of the SCVMM component issues.
 * Icons display issues when using Windows Remote Desktop.
 * Reduce time to detect a communication lost in RS232 mode.
 * Event Calendar view issues.
 * Display the temperature on ePDU products.
 * Scan cancellation issue.
 * Nodes suppression issue.
 * Application crash on Debian, Fedora, Suse.
 * Communication lost detection issue for client.
 * Installation / Integration issues when Windows UAC is activated.


Known issues:
============
(VA - Virtual Appliance)
* No information/warning about unassigned power source for the "XenServer"infrastructure connector
* On the reboot of the VA, IPM need at least 4 minutes to start.
* When a connector configuration file is broken, there is no way to remote it through the web interface

* When creating a first infrastructure connector checking the box "vCenter Plugin" may lead to unstabilities. 
  If you want to activate the vCenter plugin feature first create  the connector without checking the vCenter Plugin box. 
  Then, edit your connector and check the box : all should work fine. If you have checked the box at creation time and 
  experience some unstabilities restart IBM UPM (twice if needed) in order to get back to a normal state.

* With the JRE 7u45, the NetApp infrastructure connector, can lost the communication with the Netapp Storage after 2 days. 
  This issue does not appear with the JRE 7u40 and the last one 7u51.