Hit enter to search

SSLv3 security issue: Impact for the HMC and V3700

Author Avatar
Guy Debrabandere

What is SSLv3

A protocol that allows you to securily connect to a service. But... SSLv3, which is quiet old, is no longer secure. Many bugs and security issues have been found the past years and some of those simply cannot be fixed. The protocol is fundamentally flawed. Therefore, It has been scratched from the list with supported protocols by the IETF - Internet Engineering Task Force.

HMC - What does it do

HMC stands for Hardware Management Console. It's a dedicated machine that provides a standard interface to configure and maintain logical partitions on all power systems. This includes IBM Power System i, system p and system z. Be it through a web interface or the CLI command line.

V3700/V7000 - What is it

It is a SAN, which stands for Storage Area Network. SANs are primarily used to provide storage devices such as disk arrays and tape libraries for your servers.

Direct user impact : broken Web interface on the HMC and SAN

Firefox and chrome have completely dropped the support for the protocol SSLv3. Older versions of the HMC use this protocol and thus are no longer reachable through the web interface with Firefox and Chrome. Internet Explorer is still able to work in legacy mode, but no one knows how long Microsoft will keep on supporting this unsecure protocol.

How to fix it?

SSLv3 is no longer supported so there is no way to "fix it". You can bypass it with internet explorer for now to be able to access the web interface of your HMC or SAN, but your HMC and SAN will still be vulnerable.

Aside from some work-arounds the best way is to update or upgrade the firmware on your HMC. It's easy, tightens your security and adds new functionality. With this update or upgrade come the more recent protocols such as the recent versions of TLS which are considered safe.

Current job openings

Sign up to our newsletter

Follow us

  

Share this article