HP B-series Fabric OS 7.1.0c Release Notes (5697-2892, October 2013 - includes all 7.1.0x versions)

• With Windows and Veritas Volume Manager/Veritas Dynamic Multipathing, when LUN sizes
less than 400 MB are presented to HP Encryption SAN Switch for encryption, a host panic
may occur and this configuration is not supported in the Fabric OS 6.3.1 or later release.
• Hot Code Load from Fabric OS 6.4.1a to Fabric OS 7.0.0a or later is supported.
Cryptographic operations and I/O are disrupted, but other layer 2 FC traffic is not disrupted.
• When disk and tape CTCs are hosted on the same encryption engine, re-keying cannot be
done while tape backup or restore operations are running. Re-keying operations must be
scheduled at a time that does not conflict with normal tape I/O operations. The LUNs should
not be configured with the auto rekey option when single EE has disk and tape CTCs.
• Fabric OS 7.1.0 introduces support for the disk device decommissioning feature. To use this
feature, all the nodes in the encryption group must be running Fabric OS 7.1.0 or later.
Firmware downgrade will be prevented from Fabric OS 7.1.0 to a lower version if this feature
is in use.
• Fabric OS 7.1.0 mandates regular zones for Hosts and Targets must be defined in the effective
configuration before adding an initiator into a crypto container. If the crypto commit operation
is performed without regular zones for the Host and Target, frame redirection zones will not
be created. Hosts and targets must be zoned together by worldwide port name (WWPN)
rather than worldwide node name (WWNN) in configurations where frame redirection will
be used.
• In Fabric OS 7.1.0, the encryption FPGA has been upgraded to include parity protection of
lookup memory (ROM) within the AES engine. This change enhances the parity error detection
capability of the FPGA.
• Special Notes for HP Data Protector backup/restore application:
For the Tape Pool encryption policy specification on Windows Systems, HP Data Protector
can be used with tape pool encryption specification only if the following pool label options
are used (for other options, behavior defaults to Tape LUN encryption policy):
◦
– Pick from Barcode.
– User Supplied. A maximum of nine characters.
◦ On HP-UX systems, HP Data Protector cannot be used with tape pool encryption
specification for any of the pool options. The behavior defaults to Tape LUN Encryption
Policy.
◦ For the Tape LUN encryption policy specification, no restrictions, tape LUN encryption
policy specification can be used with HP Data Protector on HP-UX and Windows systems.
• HP Encryption SAN Switch/HP DC Switch Encryption FC Blade rejects the SCSI commands
write same and extended copy, which are related to VAAI (vStorage APIs for Array
Integration) hardware acceleration in vSphere 4.1. This results in non-VAAI methods of data
transfer for the underlying arrays, and may affect the performance of VM related operations.
• VMware VMFS5 uses ATS commands with arrays that support ATS. The HP Encryption SAN
Switch/HP DC Switch Encryption FC Blade do not support this command set and therefore
VMFS5 with ATS is not supported. Instead, HP recommends that you use VMFS3.
FCIP (HP DC SAN Director Multiprotocol Extension Blade, HP 1606 SAN Extension Switch and
HP B-series Multi-protocol Router Blade)
• Any firmware activation disrupts I/O traffic on FCIP links.
• Latency measurements supported on FCIP Tunnels are for 1 GbE & 10 GbE a 200 ms round
trip time and 1% loss.
• After inserting a 4 Gb/s SFP in GE ports of an HP DC SAN Director Multiprotocol Extension
Blade or HP 1606 SAN Extension Switch, sfpshow output might display Cannot read
28