Product Bulletin #: 1055
Subject: BIOS Configuration change for SMS H3 and SMS H3 XL
Date of Announcement: October 2, 2015
Summary: TippingPoint's Security Management Systems (SMS) shipped from manufacturing prior to October 1, 2015 had an incorrect setting in the system's BIOS, thus enabling support for x2APIC technology. Enabling this configuration forces the SMS to only recognize one CPU core in a system with multiple CPU cores. SMS systems running with only one core enabled, have experienced symptoms such as slow distribution times and high CPU utilization. For optimum SMS performance, the x2APIC option should be disabled.
Note: SMS manufacturing procedures have been adjusted to correct for this this change. All SMS's shipped after October 1, 2015 will ship with the correct BIOS setting.Affected Products
|"J" SKU Number||Description|
|C1J59A||SMS H3||HP ProLiant DL360 Gen 9|
|C1J60A||SMS H3 XL||HP ProLiant DL380 Gen 9|
To identify if your system is an H3 SMS, run the following command from the command line interface (CLI):
If the model is SMS H3 XL or SMS H3 then you may be affected and should follow the instruction below.
How to confirm if the BIOS change is required:
- From the CLI run the command; set logs.create=yes. This command will initiate the creation of a forensic file.
- From the SMS client go to; Admin > Exports and Archives section.
- Highlight the file sms_log.zip, press Export and save the file to you PC.
- Locate and unzip the file (sms_log.zip) just exported.
- From the unzipped files select and open the file forensics.txt.
- Once the file is open look for the following entry: begin: cpu count.
If the data after the "begin: cpu count" entry has multiple processors entries, then the system is configured correctly. If the data after the "begin: cpu count" entry shows a single processor entry, then you system is configured incorrectly and will require the BIOS configuration change.
If the BIOS entry has been correctly configured, the SMS H3 server would show 24 processors (0-23) and the SMS H3 XL would show 48 processors (0-47).
|As an example;|
[begin: cpu count]
processor : 0
processor : 1
[end: cpu count]
If your system is affected, disable the x2APIC BIOS setting at the earliest opportunity.
Note: Changing the BIOS requires a system reboot and either physical console (VGA) access or BIOS access via the iLO management interface.How to disable x2APIC support:
- From a physical console (not SSH) or via iLO reboot the SMS
- When the "HP ProLiant" boot screen appears, press F9 to access the System Utilities. Note: You will have around 30 seconds to press F9 before the system continues with the normal boot process.
- Select System Configuration
- Select BIOS/Platform Configuration (RBSU)
- Select System Options
- Select Processor Options
- Select Processor x2APIC Support
- Press Enter
- Select Disabled
- Press the <ESC> key twice, to move to the BIOS/Platform Configuration (RBSU) screen.
- Select System Default Options.
- Select User Default Options.
- Select Save User Defaults and press Enter. Press spacebar to dismiss the warning, then use the arrow keys to select the option "Yes, Save" and press Enter.
- Press F10 to Save.
- Select Y to confirm.
- Press the <ESC> key until you are back to the System Utilities menu.
- Select Reboot the System. Press Enter to confirm the reboot of the system.
If you have concerns or further questions regarding this issue, contact the Trend Micro™ TippingPoint Technical Assistance Center (TAC).Thank you,
Trend Micro™ TippingPoint
For updated contact information, please click here.
|© Copyright 2018 Trend Micro Incorporated. All rights reserved. Trend Micro, the Trend Micro logo, TippingPoint, the TippingPoint logo, and Digital Vaccine are trademarks or registered trademarks of Trend Micro Incorporated. TippingPoint Reg. U.S. Pat. & Tm. Off. The information is provided "as is" without warranty of any kind and is subject to change without notice. The only warranties for Trend Micro products and services are set forth in the express warranty statements accompanying such products and services. nothing herein should be construed as constituting an additional warranty. Trend Micro shall not be liable for technical or editorial errors or omissions contained herein.|