Liebert® IntelliSlotTM Unity Card Version 6.2.0.0_97845 Firmware Release Notes May 9th, 2016 This document outlines: 1. Version and Compatibility Information 2. What’s New 3. Security Issues Addressed 4. Upgrade Instructions 5. Known Issues =================================================================================== 1. Version and Compatibility =================================================================================== This release contains the following firmware version: IS-UNITY_6.2.0.0_97845 This release is compatible with the following Liebert IntelliSlot communication cards: IS-UNITY-DP IS-UNITY-LIFE This release is compatible with the following power and thermal management equipment: Alber BDSU-50™ Liebert GXT4™ Liebert APM™ Liebert HPC™ Liebert APS™ Liebert HPC-S,M,R,W,Generic Liebert CRV™ Liebert HPM™ Liebert CW™* Liebert NX™ 225-600kVA Liebert Challenger™* Liebert NXC™ Liebert Deluxe System/3™* Liebert NXL™ Liebert DCL™ Liebert NXR™ Liebert DCP™ Liebert PCW™ Liebert DS™* Liebert PDX™ Liebert DSE™ Liebert PeX™* Liebert EPM™ Liebert PPC™ Liebert EXC™ Liebert RDC™ Liebert eXL™ Liebert RX™ Liebert eXM™ Liebert XDC™ with iCOMTM Control Liebert FDC™ Liebert XDP™ with iCOMTM Control Liebert FPC™ Liebert XDP-Cray Liebert GXT3™ *iCOM Firmware PA1.04.033.STD versions or later 1 Emerson. Consider it Solved., Emerson Network Power and the Emerson Network Power logo are trademarks and service marks of Emerson Electric Co. ©2015 Emerson Electric Co. All rights reserved. Microsoft and Internet Explorer are either registered trademarks or trademarks of Microsoft Corporation. Google and Chrome are either registered trademarks or trademarks of Google, Inc. Mozilla and Firefox are either registered trademarks or trademarks of Mozilla Foundation Corporation. Safari, MacBook, and iPad are registered trademarks of Apple, Inc. All other trademarks, brand names, and service marks are the property of their respective owners. This release is compatible with the following sensors: Liebert SN-2D Liebert SN-T Liebert SN-Z02 Liebert SN-3C Liebert SN-TH Liebert SN-Z03 Liebert SN-L Liebert SN-Z01 This release supports the following communication interfaces: Communication Protocol LIFE™ Services Communication Support Card Third-Party Protocols HTTP/ HTTPS Emerson Protocol Email SMS SNMP v1,v2c,v3 BACnet IP/MSTP Modbus TCP/RTU YDN23 IS-UNITY-DP NXL & PeX Only IS-UNITY-LIFE - - - - This release supports the following browsers: o Microsoft Internet Explorer® - IE9, IE10, IE11, Edge o Mozilla Firefox® - ver. 38.0 or later o Google ChromeTM - ver. 46.0 or later o Safari® (MacBook®) - ver. 6.1.1 and 8.0.5 o Safari® (iPad®) - ver. 5.1.1 and 7.1 =================================================================================== 2. What’s New =================================================================================== This release contains the following enhancements: Read-Only Unity Card support - Optional settings have been added to allow the Unity card to restrict IP network access to Read-Only: o A Remote Write Access web server setting may be disabled restricting all web browsers to read–only access to device, sensor and communication card information. While in this mode, all write operations must be performed locally either at the device’s local display panel (if supported) or from a local browser session on a PC with an Auto-configuration network connection directly connected to the Unity card (see the Unity User Manual for details). WARNING! – Only disable this if you are absolutely sure you do not need to administer the managed device or the Unity card through a remote web browser session. o An Emerson Protocol IP Access setting may be disabled preventing any Emerson management application access to device, sensor or communication card information via the proprietary Emerson Protocol. With these and other settings already supported, the Unity card may be locked down preventing any write access to the managed device over the IP network. See the Unity User Manual for details. Support for the Liebert EPM UPS units which includes the following protocol support: o Emerson Protocol o Web (HTTP/HTTPS) o Email o SNMP v1/v2c/v3 o SMS o BACnet MSTP/IP o LIFE Services o Modbus RTU/TCP Support for the Liebert eXM UPS units has been extended to include the Scalable/Redundant configurations. LIFE Services support is included. 2 Emerson. Consider it Solved., Emerson Network Power and the Emerson Network Power logo are trademarks and service marks of Emerson Electric Co. ©2015 Emerson Electric Co. All rights reserved. Microsoft and Internet Explorer are either registered trademarks or trademarks of Microsoft Corporation. Google and Chrome are either registered trademarks or trademarks of Google, Inc. Mozilla and Firefox are either registered trademarks or trademarks of Mozilla Foundation Corporation. Safari, MacBook, and iPad are registered trademarks of Apple, Inc. All other trademarks, brand names, and service marks are the property of their respective owners. LIFE Services support has been added for the Liebert DCL thermal management units. Support for the Liebert PDX and PCW thermal management units has been extended to include support for the European versions. LIFE Services support is included. This release contains fixes for the following issues: Component Description Security The “Clickjacking” vulnerability has been addressed in this release. OpenSSL has been upgraded to version v1.0.2g for improved security. Notifications Modbus Diagnostics Some sequences of removing and adding sensors, with or without acknowledgement of the changes, were not triggering email notifications when email notifications were active. This has been corrected. Improvements were made to the Modbus RTU support to better detect the end of one frame and the start of the next. The server can now handle devices that transmit frames more closely spaced together on the serial network bus. Improvements have been made to the diagnostics and contents of the log files for improved troubleshooting and support. =================================================================================== 3. Security Issues Addressed =================================================================================== The following highly publicized security vulnerabilities have already been addressed in a previous release: Name Description “ShellShock” Updated bash version to fix this in release 4.2 “Poodle” SSLv3 was disabled in release 5.0 Cross-site Scripting Cross-site Scripting entries via the Web user Interface were restricted in release 5.1 Resolved in this 6.2 release. “Clickjacking” ================================================================================= 4. Update Instructions =================================================================================== The Unity cards may be updated to this firmware version using the web-based Firmware Upload feature. Please refer to the Firmware Updates section of the Liebert IntelliSlot Unity Card User Manual (SL-52645). 3 Emerson. Consider it Solved., Emerson Network Power and the Emerson Network Power logo are trademarks and service marks of Emerson Electric Co. ©2015 Emerson Electric Co. All rights reserved. Microsoft and Internet Explorer are either registered trademarks or trademarks of Microsoft Corporation. Google and Chrome are either registered trademarks or trademarks of Google, Inc. Mozilla and Firefox are either registered trademarks or trademarks of Mozilla Foundation Corporation. Safari, MacBook, and iPad are registered trademarks of Apple, Inc. All other trademarks, brand names, and service marks are the property of their respective owners. =================================================================================== 5. Known Issues =================================================================================== Component Description Device Settings When temperature settings are made on some thermal devices, there may be some ‘round-off’ error of one tenth of a degree between what was requested and what the device shows after the change. This is a known limitation of some thermal device firmware versions and will be corrected in future versions of the device controller firmware. The IP address of the Unity card may be displayed on the local display of the Liebert GXT4 UPS unit. The IP address is pushed to the GXT4 when the card starts up. If the address changes (for example, if it is changed by the DHCP server when the DHCP lease runs out), the local GXT4 display will continue to show the old address until the card is restarted. While the SNMP OIDS for the GXT are backward compatible with those from the IS-WEBCARD, the text values in some SNMP varbinds and email/SMS notifications have changed slightly to use the Unity card equivalent. The preferred way to change the display order for multiple sensors is through the Web user interface. If the order is changed using one of the supported protocols then the entire list of sensors should be set in the correct order (including slots that should become blank) to ensure all sensors are still included. SNMP getnext requests may fail on some tables if there are multiple varbinds in the request. If this occurs, use single-varbind requests. Liebert GXT3/4 UPS Support Sensor Support SNMP 4 Emerson. Consider it Solved., Emerson Network Power and the Emerson Network Power logo are trademarks and service marks of Emerson Electric Co. ©2015 Emerson Electric Co. All rights reserved. Microsoft and Internet Explorer are either registered trademarks or trademarks of Microsoft Corporation. Google and Chrome are either registered trademarks or trademarks of Google, Inc. Mozilla and Firefox are either registered trademarks or trademarks of Mozilla Foundation Corporation. Safari, MacBook, and iPad are registered trademarks of Apple, Inc. All other trademarks, brand names, and service marks are the property of their respective owners.