Liebert® IntelliSlotTM Unity Card Version 6.1.0.0_96590 Firmware Release Notes February 15th, 2016 This document outlines: 1. Version and Compatibility Information 2. What’s New 3. Security Issues Addressed 4. Upgrade Instructions 5. Known Issues =================================================================================== 1. Version and Compatibility =================================================================================== This release contains the following firmware version: IS-UNITY_6.1.0.0_96590 This release is compatible with the following Liebert IntelliSlot communication cards: IS-UNITY-DP IS-UNITY-LIFE This release is compatible with the following Liebert power and thermal management equipment: Alber BDSU-50™ Liebert GXT4™ Liebert APM™ Liebert HPC™ Liebert APS™ Liebert HPC-S,M,R,W,Generic Liebert CRV™ Liebert HPM™ Liebert CW™* Liebert NX™ 225-600kVA Liebert Challenger™* Liebert NXC™ Liebert Deluxe System/3™* Liebert NXL™ Liebert DCL™ Liebert NXR™ Liebert DCP™ Liebert PCW™ Liebert DS™* Liebert PDX™ Liebert DSE™ Liebert PeX™* Liebert EXC™ Liebert PPC™ Liebert eXL™ Liebert RDC™ Liebert eXM™ Liebert RX™ Liebert FDC™ Liebert XDC™ with iCOMTM Control Liebert FPC™ Liebert XDP™ with iCOMTM Control Liebert GXT3™ Liebert XDP-Cray *iCOM Firmware PA1.04.033.STD versions or later 1 Emerson. Consider it Solved., Emerson Network Power and the Emerson Network Power logo are trademarks and service marks of Emerson Electric Co. ©2015 Emerson Electric Co. All rights reserved. Microsoft and Internet Explorer are either registered trademarks or trademarks of Microsoft Corporation. Google and Chrome are either registered trademarks or trademarks of Google, Inc. Mozilla and Firefox are either registered trademarks or trademarks of Mozilla Foundation Corporation. Safari, MacBook, and iPad are registered trademarks of Apple, Inc. All other trademarks, brand names, and service marks are the property of their respective owners. This release is compatible with the following sensors: Liebert SN-2D Liebert SN-T Liebert SN-Z02 Liebert SN-3C Liebert SN-TH Liebert SN-Z03 Liebert SN-L Liebert SN-Z01 This release supports the following communication interfaces: Communication Protocol Communication Card LIFE™ Services Support HTTP/ HTTPS Emerson Protocol Email SMS SNMP v1,v2c,v3 BACnet IP/MSTP Modbus TCP/RTU YDN23 IS-UNITY-DP NXL & PeX Only IS-UNITY-LIFE - - - - Third-Party Protocols This release supports the following browsers: o Microsoft Internet Explorer® - IE9, IE10, IE11, Edge o Mozilla Firefox® - ver. 38.0 or later o Google ChromeTM - ver. 46.0 or later o Safari® (MacBook®) - ver. 6.1.1 and 8.0.5 o Safari® (iPad®) - ver. 5.1.1 and 7.1 =================================================================================== 2. What’s New =================================================================================== This release contains the following enhancements: Support for the Liebert DCL thermal management units which includes the following protocol support: o Emerson Protocol o Web (HTTP/HTTPS) o Email o SNMP v1/v2c/v3 o SMS o BACnet MSTP/IP o Modbus RTU/TCP LIFE Services support for the Liebert DCL will be added in a future Unity release. Support for installing 3rd-party SSL Certificates for HTTPS is now available with this release. This feature allows customers to install their own SSL Certificates from their own trusted Certificate Authority (CA) for improved security. Support for generating a self-signed SSL Certificate containing customer provided information, instead of our Liebert default values, for Common Name, Organization, Organization Unit, City, State, Country and Email Address. Message Account Authentication support has been added for both email and text message notifications. To reduce spam, messaging service providers may require validation of the sender’s email or text message account credentials before accepting messages for processing using their services. NOTE - Some email servers may require account configuration changes to allow communication with the Unity card. For example, Gmail only recognizes Google applications as being secure. However, they provide an account setting that allows authentication with what they consider “less-secure apps.” Please see your network administrator or service provider for configuration details. 2 Emerson. Consider it Solved., Emerson Network Power and the Emerson Network Power logo are trademarks and service marks of Emerson Electric Co. ©2015 Emerson Electric Co. All rights reserved. Microsoft and Internet Explorer are either registered trademarks or trademarks of Microsoft Corporation. Google and Chrome are either registered trademarks or trademarks of Google, Inc. Mozilla and Firefox are either registered trademarks or trademarks of Mozilla Foundation Corporation. Safari, MacBook, and iPad are registered trademarks of Apple, Inc. All other trademarks, brand names, and service marks are the property of their respective owners. Message Encryption support has also been added for both connections to SMTP and SMS servers for improved security. Message connections options supported are ‘use SSL/TLS encryption,’ ‘use STARTTLS encryption,’ ‘or use no encryption’ (clear text). AES Encryption is now a supported option with Unity’s SNMPv3 protocol support. include AES, DES, and None. Text Format support for the SNMPv3 EngineID has been added for improved security. In the past the EngineID used for SNMPv3 communication was automatically generated using the Unity card’s MAC address. Now a text format of the EngineID is optionally available for the administrator to select and modify. A new EngineID will be generated from the text string entered by the administrator. See the Unity User Manual for details. Options now This release contains fixes for the following issues: Component Description Web Interface Upgraded OpenSSL to a version that supports TLS1.2 to improve security for HTTPS. Long sensor labels could cause temperature & humidity status to be displayed incorrectly in a web browser. This has been corrected. A defect in the serial port driver was found that periodically would cause communication with the managed device to restart. This problem has been corrected. A defect was found with the Modbus RTU interface that under certain circumstances would cause a loss of communication requiring the card to be rebooted. This problem has been corrected. Some ‘upsident’ OIDs defined in the RFC1628 MIB were not available in all supported UPS devices. This has been corrected. The ‘Traps Only’ SNMPv3 User Setting did not function properly. This has been corrected. The Battery Rating and Battery Cabinet Type data values were not being reported correctly. This has been corrected in the web display and the protocol values. BACnet MSTP Modbus RTU SNMP GXT =================================================================================== 3. Security Issues Addressed =================================================================================== The following highly publicized security vulnerabilities have already been addressed in a previous release: Name Description “ShellShock” Updated bash version to fix this in release 4.2 “Poodle” SSLv3 was disabled in release 5.0 Cross-Scripting Cross-Scripting entries via the Web user Interface were restricted in release 5.1 3 Emerson. Consider it Solved., Emerson Network Power and the Emerson Network Power logo are trademarks and service marks of Emerson Electric Co. ©2015 Emerson Electric Co. All rights reserved. Microsoft and Internet Explorer are either registered trademarks or trademarks of Microsoft Corporation. Google and Chrome are either registered trademarks or trademarks of Google, Inc. Mozilla and Firefox are either registered trademarks or trademarks of Mozilla Foundation Corporation. Safari, MacBook, and iPad are registered trademarks of Apple, Inc. All other trademarks, brand names, and service marks are the property of their respective owners. =================================================================================== 4. Update Instructions =================================================================================== The Unity cards may be updated to this firmware version using the web-based Firmware Upload feature. Please refer to the Firmware Updates section of the Liebert IntelliSlot Unity Card User Manual (SL-52645). =================================================================================== 5. Known Issues =================================================================================== Component Description Device Settings When temperature settings are made on some thermal devices, there may be some ‘round-off’ error of one tenth of a degree between what was requested and what the device shows after the change. This is a known limitation of some thermal device firmware versions and will be corrected in future versions of the device controller firmware. The IP address of the Unity card may be displayed on the local display of the Liebert GXT4 UPS unit. The IP address is pushed to the GXT4 when the card starts up. If the address changes (for example, if it is changed by the DHCP server when the DHCP lease runs out), the local GXT4 display will continue to show the old address until the card is restarted. While the SNMP OIDS for the GXT are backward compatible with those from the IS-WEBCARD, the text values in some SNMP varbinds and email/SMS notifications have changed slightly to use the Unity card equivalent. The preferred way to change the display order for multiple sensors is through the Web user interface. If the order is changed using one of the supported protocols then the entire list of sensors should be set in the correct order (including slots that should become blank) to ensure all sensors are still included. SNMP getnext requests may fail on some tables if there are multiple varbinds in the request. If this occurs, use single-varbind requests. Liebert GXT3/4 UPS Support Sensor Support SNMP 4 Emerson. Consider it Solved., Emerson Network Power and the Emerson Network Power logo are trademarks and service marks of Emerson Electric Co. ©2015 Emerson Electric Co. All rights reserved. Microsoft and Internet Explorer are either registered trademarks or trademarks of Microsoft Corporation. Google and Chrome are either registered trademarks or trademarks of Google, Inc. Mozilla and Firefox are either registered trademarks or trademarks of Mozilla Foundation Corporation. Safari, MacBook, and iPad are registered trademarks of Apple, Inc. All other trademarks, brand names, and service marks are the property of their respective owners.