From:	SMTP%"kgd@uno.edu" 21-APR-1994 14:17:26.38
To:	EVERHART
CC:	
Subj:	Security MUP problems

X-Newsgroups: comp.os.vms
From: kgd@uno.edu (Ken D'Aquin)
Subject: Security MUP problems
Message-ID: <1994Apr21.142344.29149@cs.uno.edu>
Sender: news@cs.uno.edu
Reply-To: kgd@uno.edu
Organization: University of New Orleans
Date: Thu, 21 Apr 1994 14:23:44 GMT
Lines: 40
To: Info-VAX@CRVAX.SRI.COM
X-Gateway-Source-Info: USENET

  We recently installed the OpenVMS Security patch (VAXSMUP03_ V6.0_) on our
VAX and immediately encountered a problem.  It would seem that 

  if
   you have a VAX 7000 or 10000,
   with a shadowed DSSI system disk,
   on a KFMSA controller,
  then
   your system may not BOOT or DUMP.

  We got the following message at bootup.

     SHADOW-I-VOLPROC, DSAxx: does not contain the member named to VMB.
     WARNING: System may NOT DUMP and/or REBOOT.


  The Security patch appears to include a varient of CSCPAT_0269, which is
documented in DSNlink to cause this problem.  We were able to boot our system,
but only after a full power cycle.  We did have a crash before we could correct
the bug, and indeed, we did not get a DUMP.  I guess we'll never know why that
crash took place (the bug also blocks the flushing of errorlog buffers to
disk).

  We were able to fix the problem by applying 2 patches.  CSCPAT_1066013 was
required to bring the RF controllers to firmware level T392.  CSCPAT_026028 ( a
improved version of the patch that caused the problem) was required to upgrade
the shadowing drivers.

    WARNING  WARNING  WARNING  WARNING  WARNING  WARNING  WARNING  WARNING

  Installing the second patch without the first could be hazardous to your
data.  Data corruption problems have been documented with it when combined with
firmware levels below T392.

  Of course, you should verify all this with DEC for your own configuration 
(and so you won't blame me if I left out an important step).
---
Ken D'Aquin   (kgd@uno.edu)          |     The opinions expressed above are my
University Computing Center          |     own.  They do not reflect the views
University of New Orleans            |     of the University of New Orleans.