HP Server Automation Release Notes for the HP-UX, IBM AIX, Red Hat Enterprise Linux, Solaris, SUSE Linux Enterprise Server, VMware, and Windows® Operating Systems


Software version: 9.04

Original Publication date: June 2011

Server Automation release notes contain information for users who are familiar with the installation and maintenance of Server Automation, Storage Visibility and Automation, SE Connector, Application Deployment Manager, DMA integration, and SA-OO integration. The notes contain information that is not included in books or online Help.

In addition, these release notes contain:




You can find information about the following in this document:

New in This Release

New in Previous Releases


Known Issues

Fixed Issues for this Release

Fixed Issues for 9.0 through 9.03

Documentation Errata

HP Software Support

Legal Notices


The sections contain information that is not included in books or online Help.

The primary audience for these release notes are users who are familiar with the installation and maintenance of Server Automation, Storage Visibility and Automation, SE Connector, Application Deployment Manager, DMA integration, and SA-OO integration.


New In this Release

The following features are new for 9.04.


Faster Agent Installation

The process of bringing servers under SA management is considerably faster in SA 9.04. When you install the SA 9.04 agent to bring your servers under SA management, SA now installs the agent in parallel on multiple servers simultaneously so the performance is significantly improved. The agent deployment dialog displays the set of servers on which the agent is being installed. For more information on installing the agent and bringing servers under SA management, see the SA User Guide: Server Automation.


Application Deployment Manager

The Application Deployment Manager in HP SA 9.04 introduces the ability to import and export application definitions in XML format using the admtool command line utility (see “Appendix A: Importing and Exporting Data” in the Application Deployment User Guide). This allows for migration of application definitions between separate meshes often used, for example, in Development and Production environments.

Additionally, Application Deployment Manager 9.04 supports enhanced logging for HP OO integration, allowing easier auditing of in-bound and out-bound HP OO interactions.


Database Scanner for Oracle (Storage)

In order to monitor an Oracle 11G database with the SA Oracle Database Scanner, the XML DB and DBMS_NETWORK_ACL_ADMIN package must exist in the database.  The SA Oracle DB Scanner needs access to these objects in order to grant privileges and access for itself. If the objects do not exist, then the "pamuserprivilege.sql" script cannot complete its tasks and the DB Scanner cannot be run.   An application may or may not install these objects in its Oracle 11G database.

Before executing the SA DB Scanner "pamuserprivilege.sql" script in the Oracle database, first perform the following steps to install the XML DB and DBMS_NETWORK_ACL_ADMIN package in the Oracle 11G database. The steps can be done manually, or by using SQL scripts provided by SA.
To use the SQL scripts provided by SA :

The scripts are installed along with the APX into /opt/opsware/dbscanner.oracle/lib directory and are accessible in OGFS and can be copied from the following OGFS folder: /opsw/apx/runtime/script/com.opsware.server.module.storage.dbscanner.oracle.

To perform the steps manually:

  1. cd $ORACLE_HOME/rdbms/admin
  2. sqlplus /nolog
  3. SQL> connect <sys_user>/<password> as sysdba
  4. SQL> spool install_xml.log
  5. SQL> @catqm xdb sysaux temp NO
  6. SQL> @dbmsnacl.sql
  7. SQL> spool off;


Adobe Flash Player and the New SA Client Launcher – All SA Users

SA 9.04 includes a new SA Client Launcher (version 1.5.0), which is required for SA 9.04. Make sure that Adobe Flash Player is installed before you install the new SA Client Launcher. Every SA user (not just the SA administrator) must install both Adobe Flash Player and the new SA Client Launcher.

To ensure that you install these items in the right sequence:

  1. Download and install the latest Adobe Flash Player. You can download it from:


  2. Download and install the latest SA Client Launcher included in SA 9.04. For complete instructions, see “Installing the SA Client Launcher” in the SA 9.0 User Guide: Server Automation.

Note: If the SA Client becomes unresponsive after you perform these steps, restart it.



This release features support for HP-UX patching and HP-UX provisioning.

This releases also provides an Application extension for the management of Virtual Partitions (vPars) and Virtual Machines (HPVMs).

Download the document: HP-UX Virtualization for 9.04 from the 9.04 section of the Self-Solve Portal at: http://support.openview.hp.com/selfsolve/manuals.


Integration with NA 9.10

This release provides SA integration with NA 9.10.

Model Repository Host: Multiple Database Instances

SA now supports multiple database instances on the database server where one of the instances is the SA Model Repository instance. The requirements, configuration and procedures for adding instances is the same as shown in the SA Simple/Advanced Installation Guide, Appendix A: Oracle Setup for the Model Repository.

OO-SA Integration

Updates pertaining specifically to the OO-SA integration (Server Automation operations performed within Operations Orchestration) are delivered via the HP Live Network at https://www.www2.hp.com/.

Operating Systems and Platforms Supported/Deprecated

For a list of supported operating systems and platforms for Server Automation Cores, Agents, clients, and Satellites, see the Server Automation Support and Compatibility Matrix .

For a list of supported operating systems and platforms for Storage Visibility and Automation Managed Servers, SE Connector, SAN Arrays, Fibre Channel Adapters, SAN Switches, File System Software, Database Support, and Storage Essentials Compatibility, see the Storage Visibility and Automation Support and Compatibility Matrix .

To check for updates to these documents, go to: http://support.openview.hp.com/selfsolve/manuals

The HP Software Product Manuals site requires that you register for an HP Passport and sign in. To register for an HP Passport, select the New users - please register link on the HP Passport login page.

Support for SLES 11 for zSeries

The SLES 11 for zSeries platform is supported in SA 9.04 with the functionality that existed in 9.03. However, the platform is not supported for new 9.04 features.



This release provides support for the following Solaris Fujitsu patching features:


Upgrades and Patches

If you have customized such settings as Java heap settings, you must reapply your customizations after you install 9.10, as the settings are set to the SA default during installation or upgrade.


New In Previous Releases


New platform support was added in 9.03.

For a list of supported operating systems and platforms for Server Automation Cores, Agents, clients, and Satellites, see the Server Automation Support and Compatibility Matrix .


Application Deployment Manager (9.02)

Application Deployment Manager benefits from two significant changes in HP SA 9.02. First,
Application Deployment Manager now integrates with HP Database and Middleware Automation
(DMA – formerly Stratavia Data Palette) through the DMA Flow Component. Second, application
definition has been greatly simplified with the introduction of a deployment debugger.

DMA Flow Component

Starting with SA 9.02, the new “DMA Flow Component” allows developers to leverage the vast
middleware capabilities of DMA to ensure the middleware requirements of their applications are
satisfied. For more information about DMA, see the DMA 1.0 User Guide. For more information
on configuring SA to use DMA, see the HP SA Integration Guide. For more information on DMA
Flow Components, see the Application Deployment Manager User Guide.

Deployment Debugger

The deployment debugger introduced in SA 9.02 allows developers to selectively execute
(or skip) components, include (or exclude) servers, step incrementally through deployments, set
breakpoints and pause on deployment failure. The ability to pause on failure allows developers to
investigate managed server state before rollback restores the systems to their last good state.
The fine-grained deployment job control allows developers to focus on problematic components
and more quickly produce a stable application version for release into production.

Approving Blocked Jobs (9.02)

Approving Blocked Jobs that Run SA Extensions

Job Approval Integration in SA allows you to block certain SA jobs from running until they
are verified and unblocked. The typical method of unblocking these blocked jobs is by using
HP Operations Orchestration (OO). SA provides a way to unblock jobs that run program
APXs (Automation Platform Extensions) without requiring HP Operations Orchestration.
For more information on Job Approval Integration, see the SA Platform Developer's Guide.

In releases prior to SA 9.02, the only way to unblock blocked jobs was by calling an OO flow.
The OO flow performed the appropriate checks and unblocked the job, allowing it to run.
SA 9.02 added the ability to verify and unblock jobs that run program APXs without requiring
HP Operations Orchestration.

NOTE: This applies only to "Run Program Extension" jobs, which are jobs that run a program APX.
APXs are extensions to SA. For more information on APXs, see "Creating Automation
Platform Extensions (APX)" in the SA Platform Developer Guide.

Starting with SA 9.02, you can create a specifically named program APX that will run without
blocking. This allows you to write a program APX that can unblock other APX jobs, without
the control APX itself being blocked. To specify an APX to unblock jobs, set the following
system configuration parameters in the SA Web Client.

System Configuration Parameters for an APX to Unblock Jobs Table

System Configuration Parameter

Script Running Order


0 (default) disables the ability to unblock jobs
with an APX.
1 enables unblocking jobs with an APX.



Specifies the name of the program APX that will handle blocked jobs.

Enabling Job Approval for APXs

You must have the appropriate permissions to make changes to System Configuration
parameters. For more information on permissions, see the SA Administration Guide.

To create this type of APX, perform the following steps:

  1. Write a program APX that checks the blocked jobs and unblocks them using the SA API
    methods approveBlockedJob(), updateBlockedJob(), cancelScheduledJob() and
    findJobRefs(). These methods are the callbacks into SA that enable job approval
    integration. For details on writing APXs see "Creating Automation Platform Extensions
    (APX)" in the SA Platform Developer's Guide.

  2. Log in to the SA Web Client. For more information on the SA Web Client, see the SA
    User's Guide: Server Automation

  3. In the navigation pane, select Administration System Configuration. This displays the
    subcomponents of the SA platform.

  4. Under "Select a Product:", select Opsware. This displays the system configurations you
    can modify.

  5. Locate the entry for approval_integration.apx.enabled.

  6. Under the Value column, select the "Use value" button.

  7. In the text box next to the "Use value" button, enter a 1.

  8. Locate the entry for approval_integration.apx.uniquename.

  9. Under the Value column, select the "Use value" button.

  10. In the text box next to the "Use value" button, enter the unique name of your program
    APX that checks and unblocks blocked jobs.

  11. Select the Save button at the bottom of the page.

  12. Set up a mechanism to run this APX. For example, you could schedule this APX to run
    periodically to check for blocked APXs.

Disabling Job Approval for APXs

You must have the appropriate permissions to make changes to System Configuration
parameters. For more information on permissions, see the SA Administration Guide.

To disable the unblocking APX, set the value of approval_integration.apx.enabled to 0.
For details on setting this system configuration value, see Enabling Job Approval for APXs.


RPM Folders (9.02)

Restricting Access to RPM Folders

Starting in SA 9.02, you can ensure that your Linux managed servers only have access
to the set of RPMs in the SA Library that apply to each server. You simply specify in a
custom attribute the folders in the SA Library that the server has access to. All other
folders will be inaccessible to the server. This section describes how to set up these

With this new mechanism, you can mimic the common RedHat systems administration
paradigm of having multiple, distinct yum (Yellowdog Updater, Modified) repositories. This
gives you folder-level control over which versions of RPMs can be applied to a given server,
allowing you to precisely manage platform update versions, for example Red Hat Enterprise
Linux Advanced Platform Version 4 Update 5 versus Update 6.

This is not intended as a user-level access control mechanism, but rather to restrict the
library and folder view of a managed server from access to the full set of RPMs in the SA
Library. For information on user level folder access controls and folder permissions in the SA
Library, see the SA Administration Guide.

How the RPM Folder Restrictions Work

During remediation, if a server has one or more of these custom attributes defined, SA reads
the custom attribute values and only allows the managed server access to the RPMs in the SA
Library folders specified in the custom attributes and their subfolders. Subfolders of all the
specified folders are recursively searched for RPMs. All other folders are not accessible to the

Enabling RPM Folder Restrictions

To restrict a server or group of servers to a subset of RPMs in the SA Library, set a custom
attribute in the format described below on your managed server or at a location that will be
inherited by the server such as a device group, a software policy, a customer, a facility and so

These custom attributes follow the custom attribute inheritance rules. For example, if you set
a custom attribute at the facility level, the servers in that facility will inherit the custom

SA does not validate the SA Library folder paths you specify in these custom attributes so
make sure the folder paths you specify are correct.

For more information about custom attributes, see the SA User's Guide: Application

Custom Attribute Format

The custom attributes that restrict access to RPMs must be in the following format:


Where <name> is any user-defined alphanumeric string.
Specify a name that is descriptive and helps you remember the purpose of the
custom attribute. You can define multiple custom attributes as long as each
name is unique.


The following defines custom attributes that grant access only to the SA
Library directories:

/Redhat/AS4/en/x86_64/U5 and /Oracle/10/AS4/x86_64:


The custom attribute value can be multiple lines. The following defines custom
attributes that grant access only to the SA Library directories listed:

repo.restrict.as4u5=/Redhat/AS4/en/x86_64/U5 /Redhat/AS4/en/x86_64/U5-extras

Sun Solaris Moves to Oracle (9.02)

As of the 9.02 release, Oracle and Sun were in the process of
retiring the SunSolve web site and establishing a new Oracle support web site
for Solaris patches and patch information. Once this transition is complete,
HP will provide information about how to modify your solpatch_import.conf
file to ensure that Solaris patching with SA continues to work correctly.
This information will be posted on the standard HP support channels.
For more information on Solaris patching and the solpatch_import.conf file,
see the SA User Guide: Application Automation.

For more information, see the Knowledge Base Article KM1032711 at:

Back to the Table of Contents


This section describes the SA 9.04 installation procedure.

As with previous SA releases, all SA Core installations and upgrades must be performed by
HP Professional Services or HP-certified consultants. SA Satellite installations and upgrades
performed by customers continue to be supported.

General Information

Script Running Order

The pre-patch, database update and patch install scripts must be run in the following order:

SA Script Running Order - Upgrade Table

Upgrade From


Script Running Order



  1. patch_database.sh
  2. patch_opsware.sh
  3. patch_contents.sh
9.01 9.04
  1. patch_opsware.sh
  2. patch_contents.sh



  1. patch_opsware.sh
  2. patch_contents.sh
9.03 9.04
  1. patch_opsware.sh
  2. patch_contents.sh

SA Script Running Order - Rollback Table

Rollback From


Script Running Order



  1. patch_opsware.sh
  2. patch_database.sh



Database Schema Update Procedure

Required only if you have not previously applied the SA 9.01 patch. The script run
during this procedure makes required changes to the Model Repository including adding
required tables and objects. Perform the following tasks to install database updates:

  1. Before running the patch install script, perform steps below to ensure that the script
    20_truth_modify_truth_stats_job_90.sh is run during patch installation.

    This script modifies the TRUTH database users dba_job that collects schema statistics.

    Note: This is an optional script that fixes issues described in QCR1D: 93757.
    This script is run by the patch install script, patch_database.sh , only when
    you have made the following changes.

    1. Create the file:


      on the server on which you will run the patch install script, patch_database.sh .
    2. Edit optional_updates.conf and add this entry:


      When you run the patch install script patch_database.sh , it checks for the
      existence of optional_updates.conf, and if the file exists and contains the entry
      specified in step b, it runs the script 20_truth_modify_truth_stats_job_90.sh
      which then modifies the dba_job that collects schema statistics.

      If optional_updates.conf is not found, or if the
      truth_modify_truth_stats_job=1 entry is not found in the file, then the script
      20_truth_modify_truth_stats_job_90.sh will not be run.
  2. Mount the SA 9.04 distribution. Invoke patch_database.sh on the Model Repository host:

      <distro>/opsware_installer/patch_database.sh --verbose -r <response file>

      Where <response file> is the response file last used to install/upgrade the system.

      Usage: patch_database.sh [--verbose] -r <response file>

      patch_database.sh automatically detects if a database update is already
      installed and presents a corresponding menu:

    1. If the database update has not been previously applied, you see
      the following:
      Welcome to the Opsware Installer.
      It appears that you do not have a database update
      installed on this system.
      Press 'i' to proceed with patch installation.
      Press 's' to show patch contents.
      Press 'q' to quit.
      Selection: i
    2. Enter i at the prompt to begin the database update.
    3. If the database update has previously been applied, you see
      the following:

      Welcome to the Opsware Installer.
      It appears that you have installed or attempted
      to install a previous version of the database
      update on this system.
      Press 'u' to upgrade the patch to the current version.
      Press 'r' to remove this patch.
      Press 's' to show patch contents.
      Press 'q' to quit.
      Selection: u
      You chose to upgrade the patch. Continue? [y/n]: y

      Enter u at the prompt then Y to begin the database update.

  3. After you make your selection, the installer completes the new (or interrupted) installation.
    On completion, you see a screen similar to the following:

    [timestamp] Done with component Opsware SQL patches.

    [timestamp] ########################################################

    [timestamp] Opsware Installer ran successfully.

    [timestamp] ########################################################

Note: After running the patch_database.sh script, you may see the following error when running
the System Diagnostic test on your core:

Test Name: Model Repository Schema
Description: Verifies that the Data Access Engine's version of the schema matches
the Model Repository's version.
Component device: Data Access Engine (spin)
Test Results: The following tables differ between the Data Access Engine and the
Model Repository: local_data_centers, role_class_bridge.

This error is invalid and you can disregard it.

Patch Installation Procedure

Note: Before performing the tasks in this section ensure that you have completed the
tasks listed in Database Schema Update Procedure.

Perform the following tasks to install SA 9.04:

  1. Mount the SA 9.04 distribution. Invoke patch_opsware.sh on every host in the
    core/satellite facility:

    <distro>/opsware_installer/patch_opsware.sh --verbose

    Usage : patch_opsware.sh [--verbose]

    patch_opsware.sh automatically detects whether or not there is a patch
    already installed and presents a corresponding menu:

    1. Non-upgraded System : If your system has not been upgraded,
      you see the following menu:
      Welcome to the Opsware Installer. It appears that
      you do not have any patches installed on this system.
      Press 'i' to proceed with patch installation.
      Press 's' to show patch contents.
      Press 'q' to quit.
      Selection: i

      Enter i at the prompt to begin the installation.

    2. Previously Upgraded System : If an SA patch has already been installed
      successfully, when patch_opsware.sh is invoked from a newer patch
      release, you see the following menu:
      Welcome to the Opsware Installer. It appears that you have
      installed or attempted to install a previous version of
      the patch on this system.
      Press 'u' to upgrade the patch to the current version.
      Press 'r' to remove this patch.

      Press 's' to show patch contents.
      Press 'q' to quit.
      Selection: u

      Enter u at the prompt to begin the upgrade.

  2. After you make your selection, the installer completes the new (or interrupted)

The installer displays the following upon completion:

[<timestamp>] Done with component Opsware Patch.



[<timestamp>] Opsware Installer ran successfully.



Software Repository Content Upgrade

This section details upgrades to the software repository content on the upload
distribution (such as agent packages to be reconciled to managed servers).

General Information

 Note: Unlike core patches, Software Repository content upgrades cannot be rolled back.

Upgrading the First Core Content

  1. On the First Core Software Repository store ( word store ) host, invoke the upgrade

    <distro>/opsware_installer/patch_contents.sh --verbose -r <response file>

    where <response file> is the response file last used to install/upgrade the SA Core.

    The following menu is displayed:

    Welcome to the Opsware Installer. Please select the components
    to install.
    1 ( ) Software Repository - Content (install once per mesh)
    Enter a component number to toggle ('a' for all, 'n' for none).
    When ready, press 'c' to continue, or 'q' to quit.

    Enter either 1 or a and press c to begin the installation.

  2. If the Software Repository content image is not installed on the server, the following
    message will be displayed:

    [<timestamp>] There are no components to upgrade.
    [<timestamp>] Exiting Opsware Installer.

Rolling Back the Patch

To rollback SA 9.04 to SA 9.0, invoke the script:

<distro>/opsware_installer/patch_opsware.sh --verbose

If this is a patched system, the following will be displayed:

Welcome to the Opsware Installer. It appears that you have previously
completed installation of this patch on this system.
Press 'r' to remove this patch.
Press 's' to show patch contents.
Press 'q' to quit.

Enter r at the prompt to remove the patch.


Rolling Back the Database Schema Update

Note: If you created the optional file

with the entry truth_modify_truth_stats_job=1 (modifies the TRUTH database
users dba_job that collects schema statistics.) during the install process as described
in Step 1 of the Database Schema Update Procedure, you must ensure that the same
file is available during the rollback process.

To roll back the database schema update, enter this command:

<distro>/opsware_installer/patch_database.sh --verbose -r <response file>

Where <response file> is the response file last used to install/upgrade the system.

If the database has been updated, you see the following:

Welcome to the Opsware Installer. It appears that you have previously
completed the installation of this database update on this system.
Press 'r' to remove this patch.
Press 's' to show patch contents.
Press 'q' to quit.
Selection: r

Enter r at the prompt to begin the database schema update rollback.


Post-Patch Installation Tasks

Windows Server 2008 R2 x64

This section describes how to set up SA support for Windows Server 2008 R2 x64.

Required only if you have not set up SA support for Windows Server 2008 R2 x64
when you applied the SA 9.01 patch. SA 9.01 and later provide improved support for
Windows Server 2008 R2 x64. Windows Server 2008 R2 x64 now appears with its own
entries in the SA Client rather than as a subset of Windows Server 2008.

However, there are some tasks you must perform in order to migrate any Software Policies,
Application Configurations, packages (units), Patch Policies and/or OS Provisioning objects
you may already have set up for your server(s).

Migrating Software Policies, Application Configurations and/or Patch Policies is handled by
running a script, windows_2008_R2_fix_script.pyc , provided with SA 9.01 and later
in the directory:


The script is called windows_2008_R2_fix_script.pyc and is invoked as follows:

/opt/opsware/bin/python2 windows_2008_R2_fix_script.pyc [--mrl=<MRL_ID>|--listmrls|--help

 Note 1:


Note 2: It is very important that you ensure that the MRL(s) specified when you invoke this
migration script are correct. Once the script is invoked, migration begins immediately.
Providing the incorrect information when invoking this script can cause irreversible data
integrity errors.

The script has the following options:

Script Options Table



--listmrls, -l

List all Windows Server 2008 x64 MRLs (ID, Name and Media Path)


Migrate the MRL with the specified ID to the Windows Server 2008 R2 x64 platform.
Can be specified multiple times.

--help, -h

Display usage and help

Note: Migrated objects other than Patch Policies are not copied, they are attached to the new
Windows Server 2008 R2 x64 configuration.

For Patch Policies, Windows Server 2008 R2 x64 copies are created of Windows Server 2008 x64
Patch Policies containing R2 patches (x64 patch library).

The Windows Server 2008 x64 Patch Policies are then detached from the Windows Server 2008 R2 x64
servers and the equivalent Windows Server 2008 R2 x64 Patch Policy copies are attached to the
Windows Server 2008 R2 x64 servers.

Note: You can run windows_2008_R2_fix_script.pyc multiple times without issue. The changes
made by the script cannot be rolled back.

If a Windows Server 2008 x64 R2 server is in an unreachable state after the migration script is run,
data integrity errors may cause the server to appear in the Mismatched Server Platform list.

To resolved the mismatch error, do the following:

  1. Bring the server to MANAGED state.
  2. Run hardware registration on the server.



Software Policies

After migration completes, the Software Policy appears in the SA Client Navigation
pane under Library/By Type/Software Policies/Windows/Windows Server 2008 R2 x64
and Windows Server 2008 x64.

During migration, Software Policies are modified only if:

When processing policy items the script looks for the following types of objects:

If the script finds a policy item that has Windows Server 2008 x64 in the platform list it
will migrate that policy item to Windows Server 2008 R2 x64.

The order of items in the Software Policy is retained and remediation status remains

If the script identifies an existing Software Policy as a Windows Server 2008 R2 x64 policy,
it does not modify it during processing.


The script migrates only the packages that have Windows Server 2008 x64 in the platform
list and are included as policy item inside a Software Policy that is migrated by the script.

After migration, the package will appear in the SA Client under both the
Windows Server 2008 x64 and Windows Server 2008 R2 x64 folders in
Library/By Type/Packages/Windows.

The script does not take into account the package type. It looks for packages included in
migrated Software Policies that are attached to Windows Server 2008 x64. Server Module
Result objects, Windows Registry objects and Windows Services objects cannot be migrated
by the script because their platform associations cannot be changed.

Properties settings (including general, archived scripts, install parameters, install scripts,
uninstall parameters, uninstall scripts) are preserved.

Application Configurations

The migration script migrates an application configuration if:

During migration the script adds Windows Server 2008 R2 x64 to the application
configuration's platform list. The script also inspects all application configurations'
associated templates (CML templates) and if a template has Windows Server 2008 x64
in the platform list it is also migrated.

There is no undo option.

Patch Policies

During migration, the script appends R2 to the Patch Policy name. For example, for a
patch policy named 2008 XYZ Policy, the migration script creates a new
Windows Server 2008 R2 x64 policy named 2008 XYZ Policy R2 if:

Note: If a Windows Server 2008 R2 x64 policy named 2008 XYZ Policy R2 already exists,
the applicable patches will be added to it.

If Windows Server 2008 R2 x64 servers, or device groups containing
Windows Server 2008 R2 x64 servers, are attached to Windows Server 2008 x64 patch
policies, the migration script will detach these policies and attach the newly created or
updated equivalent Windows Server 2008 R2 x64 policies. Applicable Patch Policy
exceptions are also migrated.

If metadata associated with Windows Server 2008 R2 x64 patches has been modified
(for example: install/uninstall flags, pre/post install/uninstall scripts), that metadata will
be migrated.

Note: In some cases, for example supplemental patches, Microsoft patches may have
more than one version with the same name which causes those patches not to be
migrated when running the migration script. In these cases, you must manually
migrate the affected patches.

WindowsImageName Custom Attribute

The specification of the WindowsImageName custom attribute with
Windows Server 2008 R2 x64 is somewhat different from other platforms.

For Windows Server 2008 R2 x64, the expected values are:

Windows Server 2008 R2 SERVERDATACENTER
Windows Server 2008 R2 SERVERENTERPRISE
Windows Server 2008 R2 SERVERSTANDARD
Windows Server 2008 R2 SERVERWEB
Windows Server 2008 R2 SERVERWEBCORE

The populate-opsware-update-library Script

A new option, --no_w2k8r2, is provided for the populate-opsware-update-library
script and is used to specify that Windows Server 2008 R2 x64 patch binaries should
not be uploaded. For more information about the populate-opsware-update-library
script, see the SA User's Guide: Application Automation .

Windows Server CLI Installation

If you plan to install the SA Command-line Interface (OCLI) on a Windows Server after
upgrade to SA 9.04, you must update the Agent on that server to the latest version. Errors
occur during OCLI installation on Windows servers with earlier Agent versions.

Back to the Table of Contents


Known Issues

This section describes known issues for 9.0 through 9.04. The table lists issues first alphabetically by Subsystem, then numerically within each subsystem.

Known Issues for This Release

QCCR1D Symptom/Description Platform Subsystem Workaround


100660 Windows ADT login fails for administrators
that are not user Administrator due to security
controls for Windows UAC.
Windows Server 2008 using UAC Agent Deployment

Turn off UAC:

  1. In the Control Panel, click User Accounts.
  2. In the User Accounts window, click User
  3. In the User Accounts tasks window, click
    Turn User Account Control on or off.
  4. If UAC is currently configured in Admin
    Approval Mode, the User Account Control
    message appears. Click Continue.
  5. Clear the Use User Account Control (UAC)
    to help protect your computer check box,
    and then click OK.
  6. Click Restart Now to apply the change right
    away, or click Restart Later and close the
    User Accounts tasks window. After the
    workaround is performed, any user belonging
    to the Administrators group will be able to
    deploy agents.
107917 Failed SA agent installation returns
error message in the agent log file (%SystemDrive%\Windows\System32\
opsware-agent-installer- .log
Windows Agent Installer

Remove all the files from the following three directories,
if they exist, and reinstall the agent.

%SystemDrive%\Program Files\opsware\agent\lcpython15
\Lib\site-packages\win32c om\gen_py\




Windows servers running a pre-9.0 agent can
perform a scan on an upgraded 9.0 core but not
on a freshly installed 9.0 core because scanning
Windows utilities are retained on the upgraded
core but are absent from the freshly installed core.

Windows Agent

Upgrade the agent on the managed servers that you registered
with SA 9.0.


111593 Agent fails to install when there is a gateway problem, but the agent log reports that the installation was successful.

Windows Agent Installer

Make sure the gateway can be reached from the managed server.


Agent deployment fails several times due to timeout issues when the uudecode utility
is not installed on the machine to which the Agent is deployed.

Red Hat or SUSE Linux s390x Agent Deployment/Upgrade

Install the uudcode utility on the machine(s) to which Agents are to be deployed to facilitate Agent deployment.



Reprovisioning for Red Hat Enterprise Linux 6 with the ext4 file system is not yet supported.

Linux   None

Application Configuration

50099 Data-manipulation script that includes Japanese
characters in the filename and content fails
with errors.
Windows Application Configuration - Backend Grant Read-Write privileges for Client Features -
Manage Installed Configuration and Backups on Servers.
111765 You are unable to modify Application Configuration
value sets for all scopes (Configuration, Facility,
Customers) even when you have appropriate
Independent Application Configuration Grant Read-Write privilege for Client Features - Manage
Installed Configuration and Backups on Servers.

Application Deployment Manager

110220 When using a FileSystem Code Component in a
Delta Release for an Application, the Delta Release
will pick up file modifications and additions, but
not file deletions. In other words, a Delta Release
will not remove stale files.
Independent Application Deployment Manager


You can choose to use a Script component to delete stale files
when deploying a Delta Release.


Package Component file import (using the Import
Package feature) is unreliable for files that are larger
than 100MB.

When creating Application Deployment Manager Package Components, large
files may not upload successfully. You may see
an error message similar to:

Failed to upload installer.msi
(sent 238547 of419232 bytes).
IO Error: #2038

Independent Application Deployment Manager

Increasing the memory available to the SA Client should
allow for files up to 350MB to be uploaded using the
Application Deployment Manager. Larger files can be
uploaded using the Actions > Import Software menu
when editing a package in the Software Library.
To increase memory available to the SA Client, modify
the “max-heap-size”
parameter in /opt/opsware/occclient/jnlp.tmpl.
For example:

<j2se version="1.6" initial-heap-size="128m"

Note that max-heap-size can be adjusted up to ~1350MB
for the 32-bit JVM used by the SA Client.


When you export Application Deployment Manager Environment to a Device Group you receive the following error message:

"java.lang.RuntimeException: Unable to update the device group representing the target '[target name]': DeviceGroup or Server deleted during operation, try again."

Independent Application Deployment Manager Edit the target specified in the error message, and remove all servers that have been deleted from the inventory. Export the environment again.
113202 Application Deployment Manager fails to launch
when a non-default Oracle System ID is used
(SID is not “truth”). The installer should automatically
add the truth.sid to the da.conf file.
Independent Application Deployment Manager

To resolve the issue, perform the following steps:

  1. Stop Application Deployment Manager
    using the following command:

    /etc/init.d/opsware-sas stop da
  2. Add the truth.sid configuration parameter
    to the /etc/opt/opsware/da/da.conf file.
    For example:

  3. Restart Application Deployment Manager service:

    /etc/init.d/opsware-sas start da
115187 Application Deployment Manager fails to launch
after you upgrade from 7.8 to 9.0 in an Oracle
Real Application Clusters (RAC) environment.
Independent Application Deployment Manager

Perform the following steps after the upgrade :

  1. Run the following command to stop the
    Application Deployment Manager:

    /etc/init.d/opsware-sas stop da
  2. In the /etc/opt/opsware/da/da.conf file,
    remove the truth.sid configuration parameter.
    For example:

    truth.sid= <SIDname>
  3. Edit the following file:

  4. Locate the block that contains the
    connection.driver and
  5. Add the following string:

    <property name="connection.url">
    jdbc:oracle:thin:@ (DESCRIPTION =
    (HOST = host1)(PORT = 1521))
    (HOST = host2)(PORT = 1521))
    (METHOD = Preconnect) (RETRIES = 180)
    (DELAY = 5))))</property>

    Here, host1 and host1 are variables that represent
    the names of your database servers. Include one
    (ADDRESS = (PROTOCOL = TCP)(HOST = hostname)
    (PORT = 1521))
    specification for every database
    server in your environment.
  6. Run the following command to restart the Application
    Deployment Manager:

    /etc/init.d/opsware-sas start da
  7. Re-run the Opsware Installer—or, alternatively, invoke
    the following command to populate Application Deployment Manager baseline data:


Deployment into (or undeployment from) a
previously managed but now deactivated server
reports success. It should report a failure.

When a server is deactivated, all Policies are
detached, and all history is discarded.

Independent Application Deployment Manager Delete the server from all of its targets when it is deactivated.
The targets can be seen from the list of device groups to which
the server belongs.

You cannot add a Tier to an Application if the
Tier name contains certain special characters.

Specifically, the Add Tier dialog will appear
completely empty.

Independent Application Deployment Manager

Do not use the following characters in a Tier name:  >
(greater than), < (less than), or & (ampersand)

If you create a Tier using these characters, and you encounter
problems adding tiers, simply delete the problematic new
Tier from Application Deployment Manager
Administration screen.


After upgrading the Java plug-in for your browser
to version 1.6.0_22, the following error dialog
appears whenever the SA Client or Application
Deployment Manager is launched:

"The new Java Plug-In requires a recent version
of the FireFox browser (Firefox 3 or later)"

Independent Application Deployment Manager

Click OK to close the error dialog.

Alternatively, you can change the following setting in the
greprefs\all.js file (by default, c:\program files\hp bsa\launcher\gre\greprefs\all.js):

pref("security.enable_java", false);

This prevents the error dialog from being displayed but may
have other consequences. Be sure to restart the SA Client
after you make this change.


In the Google Chrome 10 browser, certain operations in the SA Client (for example: Help > About or Tools > Application Deployment Manager) work once and then become unresponsive. This is due to a known problem with Adobe Flash applications in the Chrome 10 browser.

Chromium project bug: http://code.google.com/p/chromium/issues/detail?id=79591

Independent Application Deployment Manager Use Chrome 11 or another supported browser.



APX session timeout is not correctly implemented.


Independent APX

To increase timeout for Web APX Proxy (Note: this must be
done at all the Slices on all the Cores):

  1. Edit /etc/opt/opsware/apxproxy/apxproxy.conf
    to specify both the session timeout and socket
    timeout. Make sure socket timeout is at least
    equal to session timeout. For example,


  2. Edit both /opt/opsware/apxhttpd/conf/httpd.conf.tmpl
    and /var/opt/opsware/ogfs/mnt/root/opt/opsware/
    to add a timeout directive.
    Add this property after the "Server" property. For example,

    imeOut 1200

    Remember, unlike apxproxy.conf, the timeout value in
    httpd.conf.tmpl is in seconds, not millisecon

  3. Restart the Core.

Audit and Remediation

102706 After a patch rollback, audits, patches and AppConfig,
software policies are missing from the Select
Compliance Columns dialog on an SA 7.81 Secondary
Core if the First Core is SA 7.80.
Independent Audit and Compliance The pick lists are empty because the search to fill them relies
on a new SA 7.81 search field that is not in the database
because of the rollback. In a Multi-master mesh, HP
recommends that you patch the primary core first, followed by
secondary cores and satellites, thus ensuring that the primary
core is at a higher version (such as SA 7.81 or higher) than the
secondary cores. If you must roll back the SA 7.81 patch in a
Multi-master Mesh, HP recommends that you roll back the
secondary cores and satellites first, then the primary core.
However, if you cannot rollback a secondary core(s), you can
restore the missing data by running the following on the 7.81
secondary core(s):
/opt/opsware/bin/python2 /var/opt/opsware/
OPSWpatch/OPSWspin/scripts/ QC94469_apply.pyc

BSA Essentials Dataminer


In multimaster environments, Application
Deployment data mismatches between SA and
BSA Essention can occurr if the data is replicated
across the Model Repository Multimaster
Component (vault) to where the BSA Essentials
Dataminer is installed within the first few
milliseconds of a minute.

Independent BSA Essentials Dataminer None.

Database Scanner for Oracle

88091 Database Scanner for Oracle binaries, which are
copied to a managed server during each
snapshot process, are not automatically removed.
Independent Database Scanner for Oracle

Remove the binary files:

  1. From the Navigation pane, select Device ->
    Servers -> All Managed Servers
  2. Right-click the managed server and select
    Run Script -> Select Script.
  3. In the Run Server Script window, click Select
    Script to display the Select Script dialog.
  4. In either the Browser Scripts tab or the Browse
    Folders tab, select the "post-uninstall script for
    Database scanner for Oracle [unix|win]" script
    and then click Select.
    To view this script, you must have privileges on
    the /Opsware/Tools/Server Modules
    " folder.
  5. In the Run Server Script window, click Next.
  6. Click Start Job in the Options pane. Do not specify
    any additional parameters.
  7. When the job successfully finishes, the files
    related to the Database Scanner for Oracle
    will no longer be on the cleaned managed server.




The status of an ASM Diskgroup shown in
the Properties view (for one database instance
only) is different than the status shown in the
Database Configuration Assistant (DBCA) view
(a CONNECTED status is displayed instead of a
MOUNTED status).

Independent Database Scanner for Oracle None.
Bug ID: 156909 / QCCR1D 68263 Free space in the tablespace view does not
match what is displayed in the Oracle
Enterprise Manager (OEM) tablespace.
Independent Database Scanner for Oracle


Note: There is an OEM bug about some tablespaces showing the
incorrect used size. The Database Scanner for Oracle gets the
tablespace used size directly from all of its data files, which
avoid the OEM bug.

Help System

132631 When you click the Help button in the Agent Deploy dialog box, the help system displays a blank page. Independent Help System Use the F1 help to get information about Agent Deployment.



Patch rollback of the SA 7.81 patch displays
a failure error:
(Failed to remove software
policy (8710001) ProtocolError:
<ProtocolError for
cogrpc.py: 404 Not found>

and fails to remove Storage Compliance
(which is a new feature and incompabile with
SA 7.80).

After reporting the error, rollback continues to
the next component. The rollback completes
successfully without other errors and cleans
up all patch-related files and folders on the core.


SA Installer

Manually remove Storage Compliance by running the following
command on one of the core servers:
/opt/opsware/bin/smtool --username=detuser
--password=<detuserpwd> --remove=com.opsware.server.
114346 ADT works after third try. Redhat Enterprise Linux 5 S390X , SuSE Enterprise Linux 10 S390X and SuSE Enterprise Linux 11 S390X Installer

Install uudecode utility.

114639 If you install additional Slice Component
bundle instances after patching the SA Core
to version 9.XX, wayscript versions are set to
version 9.0 rather than to the patch version.

SA Installer

In the SA Web Client:

  1. Log in as administrator (opsware admin user) and
    navigate to Environment -> Customer -> Opsware ->
    Custom Attributes -> CORD_OPSWwayscripts
  2. Identify the SA core server by checking the value field
    of the custom attribute CORD_OPSWway scripts.
  3. Log in to the SA Core server you identified in step 1
    and execute the following commands:
    cd /var/opt/opsware/OPSWpatch/OPSWwayscripts
  4. Apply any required hotfixes to the wayscripts.

ISM Tool


ISM tool fails to upload ISM into a software
policy because the tool mistakenly detects
the registry key HKLM\Software\
, causing it to
identify a Windows Server 2008 server as a
Windows Server 2008 x64 server.

Windows Server 2008 ISM Tool

If you are developing an ISM on a server that has this
registry key, temporarily rename the registry during
ISM development so that ISMtool will correctly identify
the server as a Windows Server 2008 server.

Model Repository

83813 Attempting to synchronize a Multimaster
Mesh conflict on a ServiceInstance fails
with the following type of error:
ERROR -- Unable to perform UPDATE!
spin.genericDatabase error:
'ORA-02291: integrity constraint (.)
violated - parent key not found
ORA-06512: at ........
(srvc_inst_id = :p3)' with args
'('20-OCT-2008 23:40:21',
'124970002', '3230002')'

Independent Model Repository

Run the patch script patch_database.sh ensuring
that the file optional_updates.conf is configured as
described in Database Schema Update Procedure
in the Installation section of these release notes.




When we upload a package like this
C:\Program Files\Opsware\ocli\scripts>
oupload -O "Windows 2008" -e gb2312
--pkgtype ZIP -d "/"  c:\download\testpkg中文.zip

we get an error
Name: exceptions.UnicodeEncodeError
Description: 'ascii' codec can't encode characters
in position 7-8: ordinal not
in range(128)

Win2008 Win2008 R2 OCLI None

OS Provisioning

91820 Remediation from a re-provision job might fail due to timeout. Linux OS Provisioning None

RAID deployment fails when the RAID
configuration is captured using ACU
version (linux5 boot image) for valid
RAID configurations on machines with SCSI
drives because the "pretty printing" of SCSI
drive bus values uses 0-based index instead
of 1-based index.

Red Hat Enterprise Server 5 OS Provisioning
  1. Perform captures with ACU Version
    (using boot images other than linux5) and deploy
  2. Modify the raid.hpacu.script custom attribute value for
    RAID Array Configuration on ACU Version: RAID policies to use the correct drive
    For example, modify this captured configuration:
    ; Array Specifications
    Array= A
    ; Array Drive Type is Parallel SCSI
    ; 1:0 (36.4 GB), 1:1 (36.4 GB), 1:2 (36.4 GB),
    1:3 (36.4 GB),
    1:4 (36.4 GB), 1:5 (36.4 GB)
    Drive= 1:0, 1:1, 1:2, 1:3, 1:4, 1:5
    to the following:
    ; Array Specifications
    Array= A
    ; Array Drive Type is Parallel SCSI
    ; 2:0 (36.4 GB), 2:1 (36.4 GB), 2:2 (36.4 GB),
    2:3 (36.4 GB),
    2:4 (36.4 GB), 2:5 (36.4 GB)
    Drive= 2:0, 2:1, 2:2, 2:3, 2:4, 2:5
102830 Cannot modify or enter a timeout value
for pre/post remediate scripts while creating
a new OS Sequence.
Independent OS Provisioning - OCC - Client None.

After a server is provisioned using a RedHat
DHCP-LESS image in the VLAN, attempting to
reprovision the server causes the server to reboot,
after which the reprovision process fails at the
Anaconda Configure TCP/IP window, prompting
for network information.

Independent OS Provisioning - OCC - Client None.

When booting a target server using the Linux
boot CD in a DHCP-less network, specifying
an IP address already in use by another host
will prevent the target server from successfully
registering with the SA core. No network
check/warning error is displayed.

Red Hat Linux OS Provisioning - OCC - Client Make sure the IP address you specify is available.

After you choose Windows as the OS Family, you
cannot use the Manage Boot Client (MBC) to create
winpexx-ogfs server records in the MBC Single
Form because winpe32-ogfs and winpe64-ogfs
types are not displayed in the PXE image
drop-down box.

Windows OS Provisioning - Backend None.

When RAID deployment fails after the RAID
controller configuration has been cleared,
subsequent RAID captures or deployments
will fail unless RAID is first configured manually.

The following error displays:
Exit status: 1280

Error message from ACU: ERROR: (2821)
No controllers detected.

Independent OS Provisioning - Backend

Manually set the RAID controller configuration:

  1. Restart the server and press F8 when prompted.
  2. Create logical drive(s).
  3. Assign physical disks and RAID level.


After the RAID controller has been manually configured,
SA can be used to capture and deploy RAID configurations on
the machine.

104739 During a network boot of the server, the following
error displays:
"No driver found" screen appears:
"Unable to find any devices of the type
needed for this installation type.
Would you like to manually select your
driver or use a driver disk? [Select driver]
[Use a driver disk] [Back]
Red Hat Enterprise Server IA64 OS Provisioning The missing driver is not required. Press F12 to bypass the driver.

Assign Customer OS Build Plan content script fails if
customer names contain quote characters.

Windows OS Provisioning Backend Specify the customer ID instead of the actual customer name.

In some environments, when writing I18N content to
files from OGFS to WinPE, data and files that contain non-ASCII characters might be invalid.

Windows OS Provisioning Backend Use only ASCII characters if possible.

When you upgrade, unless you have customized the bm.reprovision_attributes_to_preserve system
configuration value, your custom values will not be
replaced by the new values required for this SA release -
instead, old values are retained.

Independent OS Provisioning Re-enter your values by appending them to this setting
on the SA Web Client

The Cannot access target server over OGFS
error occurs randomly on a server while running an
OS Build Plan on multiple servers.

Solaris OS Provisioning None.

Run OS Sequence does not escalate device group
privilege. Run an OS Sequence that has an attached
device group results in an exception and the job
is not created.

Independent OS Provisioning Enable the Manage Public Device Group privilege for the user
group on either the Client Features tab or Other tab.

When provisioning Windows Server 2003 or 2008
using an OS Sequence to a non-C drive using a
WIM image:

  • Provisioning works for Windows Server
    2003 OS Media.
  • Provisioning fails for Windows Server
    2003 WIM and Windows Server 2008
    OS Media and WIM.
    When provisioning Windows Server 2003
    or 2008 using OS Build Plans to
    non-C drives, Windows 2003 & 2008 OS
    Media installs are supported, but Windows
    2003 & 2008 WIM installs are not supported.


OS Provisioning Backend

Windows Server 2003


When performing OS provisioning using
Application Deployment Automation, if the SA OS
Sequence in use includes a device group and
multiple servers are provisioned simultaneously,
some of those server provisioning jobs will fail with
the following error:
Unexpected general exception: com.opsware.device.DeviceGroupVO.modifiedDate
is set to the illegal value.

Linux, Solaris, Windows OS Provisioning Do not include any device groups in your OS Sequence.

Provisioned machines using MBC may continually reboot
into the un-provisioned server pool after initial provisioning
because the sequence_id and MAC link were not removed.


OS Provisioning - MBC Red Hat Linux After Solaris x86 provisioning is completed, manually:
  1. Delete the link file (the filename is equal to the target server
    MAC address) from the core's DHCP server's /opt/opsware/boot/tftpboot/pxelinux.cfg directory.
  2. If set, remove the sequence_id custom attribute
    from the server.

After migration, Windows Server 2008 R2 x64 servers
are listed incorrectly as Windows Server 2008 x64 in the
SA Web Client, but correctly as Windows Server 2008
R2 x64 in the SA Client.

Windows Server 2008 R2 x64 OS Provisioning None.

SA fails to complete OS provisioning if the net or subnet from which the machine obtains its IP address does not have PTR records associated with the IP address.

Red Hat Linux 4 and 5 Power OS Provisioning Make sure that there are PTR records associated with the IP address or
specified in /etc/hosts on the OS provisioning DHCP server.

Provisioning an unmanaged server and bringing it into the Managed Server Pool in a DHCP-less environment (using the linux6 option and HPSA_linux_boot_cd) does not work correctly.

Linux OS Provisioning None
132825 SA loads the stage2 image from the CD instead of the NFS.
Red Hat Linux 6 OS Provisioning Eject the CD after you perform OS Provisioning.

If you have not installed an Agent Gateway on the server hosting the OS Provisioning components (Boot Server, Media Server), running DHCPless provisioning using HPSAlinux_boot_cd.iso results in an error (DHCPOptions.ini file not found).

Red Hat

ESXi DHCP-less provisioning

OS Provisioning

Follow these instructions:

  1. Launch the DHCPless provisioning wizard by starting the HPSAlinux_boot_cd.iso.
  2. Choose Static Network Configuration.
  3. Enter the OS Provisioning Boot Slice as the Server IP.
  4. Enter the Opsware Management Gateway port (3003) instead of the Agent Gateway port.
  5. Click Finish.

After you have completed these steps, your OGFS-agent will register to the core.

Patch Management for Solaris


Although the reboot is performed correctly, when you
preview remediating a patch policy on a server, or view
the job status for a patch policy that is already
remediated, the reboot setting might incorrectly
display “Install and Reboot Later” when it should
display “Install and Reboot”.

Solaris Patch Management - Solaris A workaround is not required because the reboot is performed correctly,
even though the display may be incorrect.

Importing clusters with old names using
the solpatch_import command will fail because
Oracle has renamed their Solaris patch clusters -
the clusters in your SALibrary may not match the
cluster names from Oracle on Sunsolve.

SunOS 5.6 - 5.10 and SunOS 5.10 x86 Patch Management - Solaris Download the latest supplement file from HP LNc. For complete
instructions, see “Obtaining the Solaris Patch Supplementary
Data File” in the SA User Guide: Application Automation.

The solpatch_import –filter option does
not display recommended and/or security
patches if they had previously been marked
obsolete. This became an issue on June 4,
2010 when Oracle changed the criteria for
recommended and security patches
(described here: http://blogs.sun.com/patch/

Solaris Patch Management - Solaris Users with an existing metadata database (solpatchdb) must
delete the solpatchdb.zip, solpatchdb-old.zip and
files and run create_db
to have support for recommended obsolete patches.

You must recreate the Solaris patch metadata database
(solpatchdb) if the following are true:
  1. You use the solpatch_import –filter option.
  2. You have run solpatch_import –update_db on
    June 4, 2010 or later.

After you have installed SA 9.01, perform these tasks to recreate
the metadata database (solpatchdb):
  1. Log in to the SA Client.
  2. Select Library in the Navigation pane.
  3. Select By Folder.
  4. Navigate to /Opsware/Tools/Solaris Patching.
  5. Delete the following files:
    • solpatchdb.zip
    • solpatchdb-old.zip
    • solpatchdb_supplement.zip

Follow the steps to create a new metadata database (solpatchdb)
as described in the SA User Guide: Application Automation,
Patch Management for Solaris.

Patch Management for Windows


If a patch policy contains one or
more superseded patches, the
number of total rules counted after
remediating or patch installation
is incorrect. Note that the
compliance state of the server is
accurate before and after remediating.

Windows Patch Management - Windows - Backend None.

Automatically installing recommended
Microsoft patches Q934041 (2000) and
Q924883 (MS07-014) fails. Manually
installing the patches results in a
Non-Compliant server status and a
dialog that is displayed:

Update has already been applied or is
included in an update that has already
been applied.

Windows Patch Management - Windows - Backend Since the patch is not required, set a “never install” exception on
the patches.

Windows Patch 944036 (installer for
IE 8) reports install failure (and returns
a non-zero exit code) on Windows Server
2008 x64 managed servers, even though
the patch is installed correctly.
Subsequent patch and compliance
scans will indicate the patch is installed
and compliant.

Windows Server 2008 x64 Patch Management - Windows - Backend A workaround is not required because the patch job succeeded,
even though an error displayed.

If you try to install the March 2010
(or later) MBSA patch database, and
then attempt to install MS10-015
(KB977165) and MS10-021 (KB979683)
on to a Windows Server 2008 x86 using
a Windows Patch policy, the Patch install
job results will incorrectly indicate success.
After a patch compliance scan, SA will still
report the patches as recommended for
the server, and the server will be listed
as non-compliant.

Windows Server 2008 x86 Patch Management - Windows - Backend
  1. To install these patches, import the April 2010 (or later)
    version of the BSA Essentials Network patch supplement
    from the BSA Essentials Network on to your SA core server.
  2. Visit http://support.microsoft.com/kb/980966/ to download
    KernelSystemStateCheck.exe to determine whether the
    patch can be installed on your Windows Server 2008 (x86)
    managed servers.
  3. Contact HP Server Automation Support in order to get this file
    qc110257.pyc”. (The Quality Center bug report number is
    QCCR1D 110257.)
  4. On the SA core, copy qc110257.pyc to the SA core’s Data
    Access Engine (spin) server.
  5. As root on the SA Data Access Engine (spin) server, execute
    the following command:

    # /opt/opsware/bin/python2 qc110257.pyc

  6. Assuming Microsoft's KernelSystemStateCheck.exe utility reports a pass result, use the ad-hoc Install Patch task window to install the version of MS10-015 (KB977165) that has a file name of
    Windows6.0-KB977165-x86.msu, and the version of MS10-021
    (KB979683) that has a file name of Windows
Note: The Install Patch job progress may show “Was Not Installed” or
“side effect” messages. These progress messages may not be accurate.
The true indicator of whether these patches installed or not is when after the
Install Patch job completes (with reboot), MS10-015 (KB977165) and
MS10-021 (KB979683) are no longer recommended, and the compliance
indicators for these patches no longer show a red X.

Note: The SA Client will show the mpsyschk.exe version of these patches as
recommended or installed.

Attempts to install the patch for
KB944036 (Installer for IE8) using SA will fail.


Windows Server 2008 x86


Patch Management - Windows - Backend Log on to the managed server and install the patch for KB944036 manually.

After remediating the vendor recommended
policy on a Windows managed server,
the server's recommended patch list shows
additional patches that need to be installed,
requiring the vendor recommended policy
to be remediated again. This sometimes
occurs when older patches introduce
problems that newer patches already fixed.

Windows Patch Management - Windows - Backend None.

SA Client (Framework)


The SA Client cannot be installed under
a localized (I18N) directory if the directory
path contains non-ascii characters.
Windows SA Client Framework Install the SA Client Launcher in a path containing only ascii characters.
115403 The SA Client becomes unresponsive when any of the following items is launched for the first time: Application Deployment, Web Automation Platform Extension (APX) processes (including OS Build Plans and HP Virtualization), and reports. Windows SA Client Framework Use the Applications tab in the Windows Task Manager to stop and restart the SA Client.

SA Client (Search)

66448 Some discovery dates for SAN arrays,
NAS filers, and switches will not display
as expected, although they are
technically correct, if the user profile is
set to a non-UTC timezone for Storage
System Discovery Date.
Independent SA Client (Search) None.

SA Command Center - Client


User’s  preferred  datetime format is:
“星期五 十月 22, 2010 15:16 CST”, but in
the SA Web client, all dates and times are
displayed as “Fri Oct 22,2010 14:04 CST”

Win2008 Win2008 R2 OCC Client Framework None

SA Comand Center - Web


Chinese Date format: Commonly used date
formats, like yyyy ’year’ mm ‘month’ dd ‘date’
and ‘yyyy-mm-dd’ are not listed in the user
profile setting, so users cannot select a
favorite date format.

Win2008 Win2008 R2 OCC Web None

SA-NA Integration


SA 7.8x and SA 9.x with NA7.5x integration

Independent SA/NA Integration

Perform the following actions:

  1. In the jboss_wrapper.conf file, comment out the
    following lines: #wrapper.java.additional.6=-Dorg.omg.



  2. Restart truecontrol.

SA-OO Integration


The SA/OO Integration feature is not
available until after you import the required
OO SDK Client Certificate.

Note: OO SDK Client certificates support
different versions of OO. SA 9.01 contains
an OO SDK Client Certificate for OO versions
7.51, 7.6, and 9.0. Make sure you have a
certificate that is compatible with
your SA version.

Independent SA/OO Integration If you have a mesh core containing one master core and one or
more slave cores, complete the following steps for the Web
Services Data Access Engine (twist) component on the master
core and on all slave cores.

If you have a sliced core installation containing one or more slices,
complete the following steps for the Web Services Data Access
Engine (twist) for each slice. Use the following procedure to
import the certificate:
  1. Enter the following command to stop the twist
    /etc/init.d/opsware-sas stop twist
  2. Enter the following command to export the OO
    Central Certificate:

    -exportcert -alias pascert -file
    /tmp/oocentral.crt -keystore

  3. Import the OO Central Certificate to the SA JRE Keystore.
    The JRE keystore default password is changeit.

    -importcert -alias pas -file
    /tmp/oocentral.crt -keystore /opt/opsware/jdk1.6/jre/lib/security/cacerts

  4. Make sure there are no errors when you entered the
    previous commands.
  5. Enter the following command to make sure the
    certificate was imported successfully:
    –list –alias pas –keystore

    Example output:
    pas, Feb 3, 2010, trustedCertEntry,
    Certificate fingerprint (MD5):
  6. Enter the following command to start the twist:
    /etc/init.d/opsware-sas start twist

OO servers use a certificate that is bundled with SA 9.10 and that is used to connect SA to OO. This certificate expires May 21, 2011. As of today, a newer OO certificate is not available to bundle in SA.

The certificate will be updated when you apply the next OO patch, but, as a consequence, the SA OO integration will fail. If this happens, you must manually import the certificate into SA.

NOTE: If you do not update OO, the integration will continue to work.


Independent SA-OO

To manually install the certificate:

  1. Stop the Web Services Data Access Engine.
  2. Transfer the OO certificate to SA:
    1. /opt/opsware/jdk1.6/jre/bin/keytool -exportcert -alias pascert -file /tmp/oocentral.crt -keystore /var/opt/opsware/twist/oocert
    2. /opt/opsware/jdk1.6/jre/bin/keytool -importcert -alias pas -file /tmp/oocentral.crt -keystore /opt/opsware/jdk1.6/jre/lib/security/cacerts
  3. Check that the OO Central Certificate was imported successfully:
    1. /opt/opsware/jdk1.6/jre/bin/keytool -list -alias pas -keystore /opt/opsware/jdk1.6/jre/lib/security/cacerts
  4. Start the Web Services Data Access Engine.

When a new OO certificate becomes available, use the following process to install it:

  1. Stop the Web Services Data Access Engine.
  2. Transfer the OO certificate to SA:
    1. Manually obtain the new OO certificate.
    2. Save it in: /tmp/oocentral.crt
    3. Enter the following command:

      /opt/opsware/jdk1.6/jre/bin/keytool -importcert -alias oocentral -file /tmp/oocentral.crt -keystore /opt/opsware/jdk1.6/jre/lib/security/cacerts

  3. Check that the OO Central Certificate was imported successfully:
    /opt/opsware/jdk1.6/jre/bin/keytool -list -alias oocentral -keystore /opt/opsware/jdk1.6/jre/lib/security/cacerts
  4. Start the Web Services Data Access Engine.

If you follow this second process, the new and old certificates can coexist on the server. Co-existence might be useful if SA integration with an older OO is required.

If you want to use the same alias name (pas alias), you must delete the older certificate first:

/opt/opsware/jdk1.6/jre/bin/keytool -delete -alias pas -keystore /opt/opsware/jdk1.6/jre/lib/security/cacerts
/opt/opsware/jdk1.6/jre/bin/keytool -importcert -alias pas -file /tmp/oocentral.crt -keystore /opt/opsware/jdk1.6/jre/lib/security/cacerts

SA-SAR Reports


In the SA Client in an NA-enabeld core,
if you run the Connections by Network
Device report and set the parameter to
Device Name Equals [Any Value], the search
returns no results.

Independent SA Client Reporting Run the report using the following parameters:

Device Contains
107293 Scheduled reports exported to .xls do
not display charts or graphs
(“Unsupported Image error” is displayed
instead). However, tables are sent correctly.
Graphs are not visible in the .xls file, but the
report should not display empty image blocks.
Independent SA Client Reporting None.

The “Application Deployment” and “Patch”
folders and their reports in the BSA
Essentials/SAR Client 2.0/2.01 installation
patch are missing. These folder definitions
are required to view the Application
Deployment and Windows patch reports.

Independent SA Client Reporting After you complete the installation process for BSA Essentials
2.0/2.01 patch and download content from the BSA Essentials
Network for the product/stream you subscribe to, complete
the following steps:

Log in to a BSA Essentials core server.

  1. Change your user to become the BSA Essentials
    super user on the server:
    su - ombd
  2. Enter the following commands:

    cd /opt/opsware/omdb/deploy/birt.war
    cp report_def.xml report_def_org.xml
    vi report_def.xml
  3. Add the following two lines in the section of the



    Example: <folder name="reports">




    application_deployment_reports< /





    <parent>none< /parent>

    < /folder>

  4. Save the report_def.xml file.
  5. Launch the BSA Essentials Java Client.
  6. Click on the Reports folder to see the
    “Application Deployment” folder and
    “Patch” folders.

SA Web Client


Internet Explorer enhanced with Security
Configuration (IE ESC) that is enabled to
access the SA Web Client blocks some features
of SA Web, such as the search function.


Independent SA Web Client There are two solutions to this issue:
1. Add the SAS Web core URL to IE's trusted sites list.
When using IE with ESC enabled to access the
SA Web Client core login page, you will be asked
whether or not to trust the core web site. You must
click the Add button in order to add the core web site
to the list of trusted sites.
To Manually add the core URL to the trusted sites list,
in IE select Tools -> Security -> Trusted Sites.
Enter the entire URL (for example,
and then click Add. Restart your browser to ensure all new
settings are accepted.
2. Disable IE ESC altogether.
Go to the Server Manager (the first icon near the
Start Menu on most systems, or the top left hand side
icon on all configurations). The Server Manager view
should be automatically selected on the left side panel.
On the right side panel, there is a Group label named
Security Information. On the right hand side of the pane,
in Security Information, click the link named Configure
IE ESC. For both Administrator and Users, select Off
and then click OK. Restart your browser. IE ESC is
now disabled.



In some cases, in the SA Web Client Manage
Gateway page, changes to bandwidth throttling
values between two gateways do not persist.

Independent Satellites

You must apply any bandwidth changes between
gateways on the Core
Gateways only. Changes made on other gateways
will not take effect.


Network scans to a satellite realm fail for
hosts with the error:
XML document structures must start
and end within the same entity

Windows Satellites In the SA Client Options select Tools -> Options
-> Unmanaged Servers -> Advanced
and remove
the argument -S %GATEWAY_IP% from the NMAP
parameters. The network scan should complete

Script Execution


Exporting a Run Server Script Job output
containing multi-byte characters
(Japanese/Korean) to .csv results in question
marks in place of the multi-byte characters.

Windows Script Execution Export the job results in .txt format to eliminate the
garbled text.

SE Connector


There is no Target and Target Volume
information displayed in the storage volume
access path view for a LUN

Independent SE Connector None

When you perform a provisioning operation
for an HP EVA array (such as create, delete,
or modify a volume or pool), the changes for
the volume or pool might not be immediately
available in the corresponding Inventory view
in SA after running the "Update from Storage
Essentials" process.

Independent SE Connector After 30 minutes has lapsed, run the "Update from
Storage Essentials" process again. See the Storage
Essentials SRM Software User Guide
for information
about provisioning EVA arrays.

When a server on which SE Connector is
running is directly deactivated and deleted,
selecting Administration -> Storage Scanners ->
<The names of the SE Scanner on "Host">

shows stale entries of Storage scanners in the
Scanner panel. The stale entries count will
increase, depending on how many times the
server is deactivated and deleted from the core.

Independent SE Connector Manually delete the inactive Storage Scanner entries
from the Storage Scanner panel by using the Remove
menu option provided for each entry.

Server Automation Installer


Restoring OS Provisioning Stage 2 images
fails on SUSE Enterprise Linux 9, which is a
deprecated platform.

SUSE Enterprise Linux 9 Installer You can restore the OS Provisioning Stage 2 images by
manually running the restore_stage2.pyc script. This
script is located in:

Software Management


You cannot set the timeout value for the time
it takes to install or remove software or execute
scripts to anything other than the default value
of 5 hours - the job times out at 5 hours.
This timeout value is specified by
"way.remediate.action_timeout" in the
SA Web Client.

The job fails with the message "The request
to retrieve information from the Agent failed
because it timed out. If the problem persists,
please contact your HP Server Automation

Independent Software Management None

After performing a software remediation, the
compliance status might incorrectly show servers
as being out of compliance, because there is a
caching delay in the Web Services Data Access
Engine (twist).

Independent Software Management Run a Software Policy Compliance scan. This will show
the correct compliance status. For more information,
see "Software Compliance" and "The Software Policy
Compliance Scan" in the SA User Guide: Application

Software Compliance scan status displays a Scan
Failed status after attaching and remediating a
software policy if the file solpatchdb.zip (the solaris
metadata database) is missing.

Solaris Software Management - API Compliance Use solpatch_import to create the metadata database.
See the Patch Management for Solaris in the
SA User Guide: Application Automation
for more
information about solpatch_import.

If you run a large remediate job (for example,
500 servers), you might encounter a Web
Services Data Access Engine (twist) cache
full exception while running compliance
across the servers.

Independent Software Management - API Compliance Increase the cache size.

When using WebService API to invoke
SoftwarePolicyService.create(), if you set the
RPM package in the installable item list by using setInstallableItemData(), the install list is
not created.

Independent Software Management - API Software Policy Use UAPI or webServiceAPI by calling

Migrating a Windows Server 2008 R2 x64 server,
attached to a dynamic device group with the rule
Operating System=Windows Server 2008 x64
specified, prevents all Application Configurations,
remediated using a Software Policy, from being
detached from the server.

Windows Server 2008 R2 x64 Software Management None

Storage Host Agent Extension


LUNs that are multipathed by EMC PowerPath
are shown as both "ROOT" and "LUN" in the
Inventory -> Storage -> Volumes Panel
alongside LUNs that are correctly displayed.
The SCSI Bus number provided by PowerPath
(using the powermt command) does not match
the bus number of the disks (LUNs).

Windows Storage Host Agent Extension None

The Server -> Relationships -> SAN Switches
panel on a virtual server is empty/only displays
SAN switches to which the given server is
directly connected.
In some cases, a server may depend on SAN
switches that are not displayed in this panel.
For example, a virtual server may be using
storage allocated from a hypervisor that was
allocated storage from a SAN.

Independent Database Scanner for Oracle None.

When you run the storage snapshot specification,
the disk capacity information is changed in the
Inventory -> Storage -> Disk panel. This occurs
if there is a mismatch in the disk names, as
reported by the hardware registration script
and the storage snapshot specification.

Windows 2008 Storage Host Agent Extension Reboot the server after changing disk information
(such as installing or uninstalling multipathing software,
presenting new LUNs, deleting LUNs, and so on),
and run the hardware registration before running
the storage snapshot specification.

An EMC Symmetrix array that is discovered
through SE Connector can report more than
one storage volume with the same LUN number
presented to a managed server. Running the
storage snapshot specification on the managed
server will succeed; however, the Inventory
-> Storage -> File Systems
and Inventory
-> Storage -> Managed Software
will be empty. In addition, some host volumes
with a LUN service type will not be displayed
in the Storage -> Inventory -> Volumes panel.

Independent Storage Host Agent Extension None

The right-hand panel under
Inventory -> Storage -> Volumes does not
display the supply chain and composition
information properly (or the information is
missing altogether) for some volumes that
were created out of LUNs

AIX Storage Host Agent Extension Delete the stale volumes on the AIX managed server and
run the storage inventory snapshot specification.

For managed servers with mirrored volumes,
if one of the disks that is part of a mirrored
volume fails or is removed, the state of the
volume is shown as "Failed Redundancy"
in the Disks Management panel. However,
in the Inventory -> Storage -> Volumes panel
for the managed server, the status of this
volume is shown as "OK", even after running
storage snapshot specifications.

Windows 2008 Storage Host Agent Extension None

Running a storage snapshot specification on
unsupported ESX 3.0.x servers returns an error
message that indicates unsupported namespace
in content of SOAP body. Storage related
information for ESX 3.0.x is not stored and displayed
in the SA Client.

VMware ESX 3.0.x Storage Host Agent Extension None

Host Storage Inventory does not support VMware
servers that have VMDK on NFS datastore. Therefore,
no storage information will be collected on VMWare
servers with this configuration.

All VMware servers Storage Host Agent Extension None
Bug ID: 149406 / QCCR1D 60760

Solaris LVM RAID on Soft Partition on slices stops
responding, resulting in a defective storage supply

Independent Storage Host Agent Extension None
Bug ID: 149707 / QCCR1D 61061

The SNIA v1 HBAAPI Extension reports two single
port cards when a single dual port card is present
in a multi-port card.

Independent Storage Host Agent Extension None
Bug ID: 151921 / QCCR1D 63275

When you add a mirror to concatenated or stripe,
there is no distinction between the volume types
"Mirror Concatenated" and "Mirror Striped" in the
Volume Manager labels. Note that
"Mirrored Concatenated" and "Mirror Striped" are
distinct on the volume manager on the host, such
as on the Veritas Volume Manager.

Independent Storage Host Agent Extension None. The type of volume manager might not match the
native tool, such as the Veritas Volume Manager.
The STORAGE_TYPE value is the immediate node
in the supply graph, which is the storage type of the
most decendent volume.
Bug ID: 152016 / QCCR1D 63370

The value stored in
different format on Solaris 5.10 than on Solaris 5.8
and 5.9. The different format for 5.10 causes a
broken storage supply chain on affected servers.

Unix Storage Host Agent Extension Check the version number in the /etc/format.dat file on
the server. If it is less than 1.28, update the file.
Bug ID: 152942 / QCCR1D 64296

On a Windows 2003 server with the SNIA library
from QLogic HBAAPI, Fibre Channel
Adapter and storage volume information might
not be discovered by the Storage Host Agent
Extension, causing fibreproxy.exe to stop

Windows Storage Host Agent Extension For Windows Server 2003 and Microsoft Windows 2000
operating systems, use the native Microsoft SNIA library
instead of the SNIA that is provided by the QLogic driver.
Download the Fibre Channel Information Tool to add the
Microsoft HBAAPI support to the operating system.
For Windows 2003 SP1 or later, the Microsoft HBAAPI
support is built in. If the SNIA's version of hbaapi.dll is
installed on the operating system, remove it.
Bug ID: 154418 / QCCR1D 65772

When you snapshot a Unix server that has a
QLogic driver installed, there is no:
FC adapter information in the Hardware view.
Composition and connectivity information for any
SAN volume in the Volumes pane.

Independent Storage Host Agent Extension Install patches 108434 and 108435 on Solaris 8 SPARC
servers. The Storage Host Agent Extension on Solaris
5.8 SPARC requires these patches.
Note: There is no known workaround for Red Hat 3 or
Red Hat 4 servers using QLogic controllers.
Bug ID: 154971 / QCCR1D 66325

Veritas Storage Foundation 4.3 with QLogic results in invalid fibre proxy SCSI
addresses. The SAN storage volume displays
both LUN and Root as the Service Type. There
are two lines for the physical drives: One line
displays LUN and the other displays Root.

Independent Storage Host Agent Extension None
Bug ID: 155476 / QCCR1D 66830 The file system is not displayed on the server
storage file system panel when the partition and
format on the Windows server is mounted to an
empty NTFS folder. There is no support for mounting
Windows 32 file systems on non-drive letter locations.
Windows Storage Host Agent Extension


Note: The Storage Host Agent Extension does not report file
systems that have non-drive letter mount points.
The Storage Host Agent Extension does not report file systems
that have multiple mount points.

Bug ID: 157044 / QCCR1D 68398

Fibreproxy is broken on Windows 2000 SP4 server
with a QLA2310 HBA and vendor driver version A storage inventory snapshot does not
gather and supply complete data, including storage
volume and FCA information.

Windows Storage Host Agent Extension None
Bug ID: 157579 / QCCR1D 68933

When you run take a Storage Host Agent Extension
snapshot by running fibreproxy on a Windows server
where Emulex LP850, LP952, LP9002, or LP9402 is
installed, three FibreChannelTargetMappings are
returned, two of which are duplicates. This symptom
does not occur with Emulex driver 1.30a9.

Windows Storage Host Agent Extension None
Bug ID: 158923 / QCCR1D 70277

If you run the chpath command as shown below to
take a Storage Host Agent Extension snapshot for
each available path to the device, all the MPIO paths
to a logical device become disabled. In this state,
the system calls used by the diskproxy and mpioproxy
will stop responding.
chpath -l hdisk2 -p fscsi0 -s disable xx

AIX Storage Host Agent Extension None
Bug ID: 159156 / QCCR1D 70510

After you update a LUN mapping (and remove the
initiator ports) from a mounted SAN volume on a
server, the old LUN mapping information still
displays in the SAN array volume view and in the
server storage volume view. An additional access
path is displayed in the SAN array volume view
(Access Path subview) for the volume for which
LUN mapping was removed. The access path
that shows no initiator device and/or initiator port
information is the correct one. The incorrect access
path is removed from the display when the next
Storage Host Agent Extension snapshot is run.

independent Storage Host Agent Extension Take a snapshot of the server to which the volume was
mapped or partitioned.
Bug ID: 159580 / QCCR1D 70934

The SAV displays incorrect information after adding
a zone to a fabric. The zone is not associated to the
correct server/port/WWN.

independent Storage Host Agent Extension None
Bug ID: 164951 / QCCR1D 76305

The multipath information is not reported correctly
for a server that has HP-UX 11iv2 OS installed and
Veritas DMP managing the multipathing in the
SA Client. The SNIA library does not support HBA_GetFcpTargetMappingsV2r.

HP-UX 11iv2 Storage Host Agent Extension None
Bug ID: 168716 / QCCR1D 80070

On servers running AIX 5.2 with PCI-X Fibre
Channel Adapters, the supply chain does not
display after taking an inventory snapshot.

Independent Storage Host Agent Extension None
Bug ID:168889 / QCCR1D 80243

If you disable a volume in Veritas DMP and
subsequently take a new Storage Host Agent
Extension snapshot, it appears as if the the
updated volume is still managed by Veritas DMP.

Independent Storage Host Agent Extension When constructing LVM modules on the HP-UX 11.31 platform,
use agile DSF devices. There is no workaround for other platforms.
Bug ID: 167103 / QCCR1D 78457 If you perform a core upgrade to SA 7.50 and
ASAS 7.50 and then run the customer extension
to upgrade a Storage Host Agent Extension on
the host, the host disappears from the INTERFACE
table and the host's STORAGE_DRIVE does not
appear in the STORAGE_COMPONENT table.
Independent Storage Host Agent Extension It may take one to two hours for the host and drives to repopulate
their tables. Verify that the host is present in the INTERFACE
table and that the STORAGE_DRIVE element is present in the


90019 If a system has more than one virtual network
with the same name, even if those networks
are managed by different hypervisors,
scanning for virtual servers fails due to
a violation of unique name constraints.
Windows Server 2008/Hyper-V Vritualization Do not use duplicate virtual network names.
106085 If your Hyper-V server has more than one IP
address, SA might change the Management
IP address from the one you registered to one
of the other IP addresses.
Windows Server 2008 pre-R2 server Vritualization - Hyper-V To prevent this problem, you need to manage your
Windows 2008 pre-R2 server from a Windows 2008
R2 server and make sure the option to allow the
management operating system to share the network
adapter is not selected. The following gives the basic
steps to accomplish this, however, see your Microsoft
Hyper-V documentation for complete details. More
information may also be available by searching the internet
for "New in Hyper-V Windows Server 2008 R2" and
"Hyper-V Remote Management: You do not have the required
privileges to complete this task."
Make sure the administrators on the pre-R2 and R2 servers
have the same password.
Log on to the R2 server and start the Hyper-V Manager applet.
Right-click on the Hyper-V Manager and select Connect to Server.
In the Select Computer window, select the "Another Computer"
radio button and enter the name of the pre-R2 server.
An icon for the pre-R2 server will appear in Hyper-V Manager.
Select the icon for the pre-R2 server and open the Virtual
Network Manager.
Highlight the NIC whose configuration you need to change.
Under the Connection type, unselect "Allow management
operating system to share this network adapter."
Click OK.
104418 The reported OS property text for ESX servers
is inconsistent between direct (SA Agent) and
indirect managed (vCenter) cases.
VMware ESX (all versions) Vritualization - Backend (VMware) None
105999 After cloning an SA-managed virtual machine, when
the clone starts up for the first time but cannot obtain
network connectivity, agent revival will fail to create a
new server record for the cloned MVM.
Independent Virtualization - Backend (VMWare) Restart the agent on the cloned machine after network
issues are resolved and the agent will correctly register
as a cloned MVM.
106909 Clone Virtual Machine job will fail the Registering
Server step if the Windows Shutdown Event Tracker
is enabled on the source virtual machine. This is
because the Shutdown Event Tracker waits for user
input before it completes rebooting, so the SA Agent
registration cannot complete.
Windows Vritualization Disable the Shutdown Event Tracker on the clone
source virtual server. Windows 2003 x64 cloning
requires a manual reset to resume virtual machine
images customization.
109887 The snapshot view is not available on an ESX server
that is managed by vCenter.
Red Hat Linux Vritualization Manage ESX directly snapshot view.
110035 When a hypervisor that is dual-managed (through
Virtualization Service and SA Agent) loses one of its
management paths (such as when. the Virtualization
Manager or VCenter is removed from SA), the Login
Credentials panel does not display in the server
browser panel and the hypervisor credentials do not
display in the Properties view.
VMWare ESXi Vritualization Right-click on the hypervisor, select "Refresh Server",
and then press F5 (Refresh) to refresh the client so that
the Login Credentials panel displays in the server browser.
111307 If you add an ESXi server with larger hardware
configuration data, the add operation suspends
ESXi Virtualization - Backend (VMWare) Reconfigure the server with fewer CPU counts in hardware
111780 Hypervisors are not loading. Windows Virtual Center Check that the hypervisor version you are using is supported.
Or check to see if the hypervisor is in a NOT RESPONDING state.
111789 Adding two vCenters concurrently results in
one of the automatically triggered reload data
to suspend processing.
Independent Virtualization - Backend (VMWare) Add the vCenters separately.
111922 The Create Virtual Machine operation on an
SA managed ESX 3.5 server fails with an
error message of com.vmware.vim25.
ESX 3.5 Virtualization - Backend (VMWare)

After the SA 7.5 release, one of the VMM library jar files
was changed from OPSWvmm-vmware.jar to
vmm-vmware.jar. When an upgrade is performed from
SA 7.5 directly to SA 9.0, or from SA 7.5 to SA 7.8 to SA 9.0,
and any virtualization operation is invoked on the ESX
hypervisors, the VMM package gets remediated first with
the new package but the OPSWvmm-vmware.jar file is
left untouched. This causes the consecutive virtual
machine create operations to fail.
The following workaround is intended for any ESX hypervisor
that is managed by an Agent in SA and whose virtualization
aspect will still be handled through the same route (not via VS)
in SA 9.0.

    1. Create a script.
      1. From the Navigation pane, select Library -> By Type -> Scripts ->
      2. From the Actions menu, select New and then enter the following
        Name: Clean VMM on ESX
        Location: Select Package Repository -> All VMWare Linux ->
        VMWARE ESX Server <any version>
        Script Content:
        1. unlink /opt/opsware/vmm/lib/OPSWvmm-vmware.jar >
        /dev/null 2>&1
      3. Description: Enter a brief description, as necessary.
      4. Leave the defaults for the remaining fields and then select
        File -> Save to save and close the window.<
    2. Create a dynamic device group and add the target servers
      to this device group.
    3. Run the script on the servers in the device group created above.

    Note: This script can be used on all ESX versions.
    There is no need to duplicate it in different packages
    or to create a separate device group for each hypervisor version.

111972 Create Virtual Machine fails on a directly
managed ESX hypervisor if the virtual
machine's datastore name contains
special characters.
ESX Virtualization - Backend (VMWare) Change the datastore name so that it does not contain
special characters.
116276 After an SA Agent is installed and before
hardware registration has completed,
you can create or modify a virtual machine
with a memory value that is larger than the
hypervisor's physical memory. The job
completes successfully.
Windows 2008, Windows 2008 R2 Vritualization -
Run a full hardware registration on the Windows server.
After hardware registration is completed,
SA will not allow you to use memory that is
greater than the maximum memory allowed on a
virtual machine for the actions to create and modify a
virtual machine.

Web Services Data Access Engine

111039 An out-of-memory error is encountered in
the Web Services Data Access Engine
Red Hat Linux/Solaris Web Services Data Access Engine (twist) The default maximum heap size for Web Services
Data Access Engine has been increased to
2560MB from 1280MB.

The Web Services Data Access Engine
does not start and records the error:

Could not reserve enough space for object
heap in:

The default maximum JVM heap size has
been increased to 2560 MB, and as a result,
the Web Services Data Access Engine (twist)
does not start properly on Linux AS3 32-bit
systems due to a two-gigabyte memory limit
for a single process running on JVM on 32-bit

Platform: Red Hat Enterprise
Linux AS3
Web Services Data Access Engine (twist)

Before upgrading, edit the file:

and add the following entry:
twist.mxMem=<memory size in Megabytes>
The value must be 2000 megabytes or less.
Example: twist.mxMem=1960m

Back to the Table of Contents


Fixed Issues For This Release

This section describes fixed issues for this release. The table lists issues first by subsystem, then numerically within each subsystem.

QCCR1D Symptom/Description Platform


98394 Scan button remains enabled when you enter an explicit negative IP address. Independent
111306 In some environments, output results from running the oglib.unix.unix_common.cmdCaptureBuf() script might be invalid. Unix

Agent erroneously goes into revive mode on SA core components.

Resolution: To ensure that your core cloning operation is successful, before you create the clone, update the agent on the core to the version included with the 9.04 patch.

Linux; VMware
114067 Agent Deployment dialog shows the following message when either the user name or password is incorrect:
"Deployment complete, 1 host succeeded, 0 failed" 
114986 Search function produces invalid result. Independent
116227 Migration script output should be automatically placed into a log file. Windows Server 2008 R2 x64
120878 The agent crypto directory should not be readable by all users. Windows
121520 SA Web client returns an exception when you use an incorrect password during Windows agent deployment.  Windows
122051 In the SA Web client, range scans sometimes fail to scan complete address ranges. For example, the IP selection range  fails to scan addresses .251 .252 .253 .254 in the last octet. Independent
123048 Add support for AIX 7 as a managed platform. AIX
123098 Creation of a HyperV Linked Clone fails.  Windows Server 2008 R2 x64
129597 Agent installation fails for Japan locale when you install as a non-root user. Linux/Unix
129660 Network speed is reported as UNKNOWN for RHEL 6 x86_64.  Linux
129733 Add support for Citrix XenServer 5. Citrix XenServer 5
129953 Sometimes, you receive a return code of 128 when you run the .bat and powershell scripts on some Windows servers, even when the script runs correctly. Windows
129975 Agent cache fails to start, returning the following error: "Address already in use." Linux/Unix (supported for SA install)
130277 Enhanced MRL display and MRL selection confirmation requested for 2008 R2 Migration script. Windows Server 2008 R2 x64
130472 Agent does not start after it is installed. Win 2008, ESX 4.1, RHEL 5.6
131316 GUI reports a negative size for disk drives that are greater than one terabyte (TB). Solaris x86_64
131898 Agent upgrade replaces the R2 agent with a non-R2 agent. Windows 2008 R2
132110 In the Japanese locale, you might receive the following UnicodeDecodeError: 'ascii' codec can't decode byte 0xe3 in position 15: ordinal not in range(128) Windows
132422 After running the Windows 2008 R2 migration script on a server, SA does not reflect its upgrade status when displaying the server information. Windows Server 2008 R2 x64

Application Configuration

129446 Add the ability to disable snapshots during an application configuration push. Core

Application Deployment Manager

111925 A deployment that included a Configuration File component failed without any warning or error when attempting to place a file in a directory that had not been created in advance. Independent
Code components install files into the "Default Install Path" specified in Application Deployment Manager UI. This enhancement adds the ability to force a directory prefix (called a Base Directory, and controlled by the Application Deployment administrator) for use in combination with the "Default Install Path" setting. Independent
Using Application Deployment and HP OO together, it is possible to both trigger Application Deployment jobs using HP OO and to have Application Deployment jobs trigger HP OO flows. Matching up log files from both products can be challenging. This enhancement adds logging of the Application Deployment job comment (which can be used as a marker when starting jobs from HP OO) and the ability to match Application Job steps to their parent jobs by logging the Application Deployment job ID with each job step. Independent

APX Framework

122408 SA Web Client displays an error when you run a Web APX application. Windows

APX Tool

112395 When you run a task fraction APX application of a server in the Solaris core, you receive a standard error notice. Solaris

Audit and Compliance

119274 The opsware.swprov.doer script does not function correctly for application compliance and controller semaphores. Independent
132059 Add the SA 7.82 audit-reporting capability to this release. Independent

BSAE Integration

131229 Discovered Software reports are not setting the END_DATE parameter to the year 4000. Independent

Command Engine

117552 Add HP-UX patching support for HP-UX 11.11. HPUX 11.11

Database Scanner for Oracle (Storage)

123008 In order to monitor an Oracle 11G database with the SA Oracle Database Scanner, the XML DB and DBMS_NETWORK_ACL_ADMIN package must exist in the database.  The SA Oracle DB Scanner needs access to these objects in order to grant privileges and access for itself. If the objects do not exist, then the "pamuserprivilege.sql" script cannot complete its tasks and the DB Scanner cannot be run.   An application may or may not install these objects in its Oracle 11G database. Independent

Device Groups

111106 When you export Application Deployment Manager Environment to a Device Group
you receive the following error message:
"java.lang.RuntimeException: Unable to update the device
group representing the target '[targe name]': DeviceGroup or Server
deleted during operation, try again."
111582 A null-pointer exception is logged to the java console when you selects a device in the Dynamic Group Device Membership content pane. Independent
120093 Device Groups cannot parse customer names that include commas. Independent
122303 Dynamic Group permission issue does not allow you to view device members. Independent

Global Filesystem/Shell

117781 Under certain circumstances, Global Shell functions slow down. Independent
122265 Add the ability to disable stream logging across all cores. Core


130678 Certain syncbot packages that are still bundled as part of the distribution are no longer relevant and should be deleted. Independent

Model Repository

132776 Oracle database deadlocks during an audit results calculation. Independent

SA Command Center Framework

130081 On some occasions, the Data Access Engine (spin) and the Command Engine (waybot) processes consume multi-gigabyte RAM resources. As a result of this increased consumption, the processes can bind the CPU and the Web Services Data Access Engine (twist) runs out of heap space and must be restarted.  Windows

OS Provisioning

120085 The OS Provisioning configuration APX displays a "file or directory not found" exception. HP-UX
122206 The build script cannot verify that the second-stage installer matches the requested OS version. RHEL6 x86 and x86_64
122248 Reprovisioning fails for RHEL 6 that contains an ext4 file system. Linux
122522 The buildmgr process might run out of file descriptors if TCP connections are made to port 1017 from a server that is still being tracked by the buildmgr process.  Linux
122845 The Windows_2008_R2_fix_script.pyc upgrade script does not run correctly. Windows Server 2008 R2 x64
129492 Winpe image does not contain vmxnet3 drivers. Windows
129588 OS Provisioning fails on OEL and CentOS. OEL 4,5 i386 and x86_64 ; CentOS 5 i386 and x86_64
129840 The import_media command fails. Windows 2008 R2 SP1
129925 During CD boot up, SA erroneously displays an interactive interface. RHEL6 SoS
130053 The Run OS Build Plan job launches, but with a negative job reference. Windows
130420 The manage_boot_clients_script randomly creates Manage Boot Client utility (MBC) records using the SHORTNAME value instead of the fully-qualified domain name (FQDM) value. Windows
130517 Add Jumpstart support for the Oracle/Sun T3-1 server. Solaris 10 SPARC
131268 During DHCP-less provisioning, SA erroneously displays an interactive interface. RHEL 3,4,5,6
131574 Winpe image does not contain the following disk driver: BL465c G7 - SAN card: Emulex FcOE NC551i. Windows
132345 Trying to boot an IA64 server from a boot cd causes  kernel issues. Linux
132353 When performing OS Provisioning from a Red Hat Enterprise Linux 6 host, if the media CD is mounted, Red Hat 6 will load Stage 2 images from the CD even if  an NFS share for the images has been specified in the kickstart.cfg file. Red Hat 6 (x86 & X64)
132504 Invalid Parameters error occurs while uploading packages. ESX4

Patch Management

95545 If you start a remediation under the following conditions, the server will not reboot:
* Reboot specified by individual software items.
* Patch products with reboot specified during install and uninstall.
112336 The solpatch_import create DB command fails for a DVD image on a fresh core install because the solpatch+import dir does not exist in /var/opt/opsware/. Solaris
114417 If the custom attribute is not set, SA is unable to remediate some patches. HP-UX

SA is not rebooting a server when remediating a patch that requires a reboot.


Remediation of RHN imported policies may fail with dependency errors.

Red Hat Platforms
129995 The AIX and HPUX patch UIs erroneously display the same fields as the Solaris patch UI.  AIX, HPUX
131100 When you run the solpatch_import script you receive the following error:
"Global name 'DEFAULT_PATCH_SIGNED_URL' is not defined."

In rare cases, running the R2 migration script does not result in supplemental patch database migration.

Resolution: Migrate the supplemental patch database manually, or call HP Support for more information.

Windows Server R2 X64

Power Shell Integration

88778 Character properties are not displayed when you run a powershell script. Windows 2008

Product Functionality


Script output not displayed correctly for a script that echoes special characters on a I18N windows server.


Server Management

129958 MAC address field is empty in the Server Browser > Information > Properties window. Windows 2008 R2 SP1
130573 Search function produces invalid result. Independent

Server Module

119945 Add RHEL 6 X86_64 to SMO support. Independent
119946 Add RHEL 6 to SMO support. Independent

Software Management

117057 Ad-hoc scripts are not executed on a multimaster environment. Independent
120520 There is a mismatch between the total number of filesets within a bundle and the number of filesets SA reports in the Compliance tab. HP-UX
131569 When using a parent folder with more than 1000 subfolders, the Repo.restrict script throws the following exception: ORA-01795.  Independent
131703 If you remediate a software policy that was already remediated, SA uninstalls the RPM and its dependency. Linux

Software Repository

121952 Satellite cache cleanup fails when it finds a package it cannot identify. Linux
129410 Oupload process fails and displays the following error when uploading a Lightweight Presentation Protocol (LPP) file:
"Invalid LPP file" error.
129666 A garbage collection job in the Software Repository (word) fails to function correctly and results in the accumulation of an excessive number of Data Access Engine (spin) requests, impacting performance and resulting in the accumulation of an excessive number of garbage data in the database (truth). Independent
130116 Unable to upload custom Solaris patch clusters. Independent

Web Services Data Access Engine

120354 The recalc Device calculates memberships for private dynamic device groups created by deleted users. Independent
122834 Include the Web Services Data Engine entity-bean cache monitoring tool in the SA product distribution. Independent

Various activities fail when the Web Services Data Access Engine performs resource-intensive operations, such as audits involving a large number of devices.

130079 Web Services Data Access Engine fails when it tries to load and process an excessively large XML results set. Core
130303 Red Hat Network (RHN) channel-based RPM remediation result set does not scale correctly. Core

Exporting audit results with a python script fails due to an invalid value in the content length of the HTTP header.



Back to the Table of Contents


Fixed Issues for 9.0 Through 9.03

This section describes issues that were fixed in 9.0, 9.01, 9.02, and 9.03. The table lists issues first by subsystem, then numerically within each subsystem.


QCCR1D Symptom/Description Platform


44941 SearchService.getObjRefs is returning non-readable object refs. Independent

Cannot specify multiple LDAP servers for redundancy.

Support needed for external authentication redundancy for LDAP servers in twistOverrides.conf file.



70222 Windows agents do not update their opswgw.args file. Windows
74021 The agent installer should detect when it is communicating with a new core. Independent
74339 Remove SSLv2 handshake from the Agent. Independent

Agent Deployment/Upgrade - Backend

102401 Duplicate MAC addresses for certain devices prevent the agent from installing and prevent hardware registration. An error message like the following occurs: ERROR: spin.notUniqueInDatabase - More than one Server found with interface hw_addr '33:50:6F:45:30:30' Independent
108132 The Add Hypervisor Progress window displays an error message indicating that the job is completed and that the status of the job is failed. Windows
111496 The dormant Agent fails to connect to a core. Unix, Windows
111807 A Unix script with environment variables, which is run by SA, does not return the same values that run on the managed server. All Unix (AIX, HP-UX, Solaris, Linux)
111970 Agent Tools Python Opsware API Access fails to install on VMware ESX servers. VMware
113031 Control Panel of the agent installer displays 0 bytes. Windows

Discrepancy between cpu_family reported by different Agents on the same hardware.

Unlike Windows, the cpu_family name reported by the Agent on Linux does not distinguish between 32bit (x86) and 64bit (x64) CPU family names.
112564 Agent Install fails because of an Agent Gateway check fail. Windows
113351 Windows Server 2008 R2 does not display an OS Version in the server record. Windows Server 2008 R2
115710 C runtime library runtime error displayed by Opsware agent. Windows 2008 x64 and Windows 2008 R2
115849 When no options are given on the agent-installer command line, the -h option is not displayed in an error message. Independent
117436 Requested support for passwordless SSH for agent deployment tool (ADT) during agent deployment. Independent
117535 Agent reports the OS version as Linux Unknown instead of the correct OS version. OEL 4.4 i386 and OEL 4.4 x 86_64
117828 Requested agent installer support for filesystems larger than 2 Terrabytes. Unix
118171 Agent Deployment (including staging the Agent binary to the server through the WAN using SA push) is very slow.

Application Configuration

114142 Discrepancy between cpu_family reported by different Agents on the same hardware.  Linux
61445 When parsing or applying CML templates, the parser exceptions are not helpful. One error included the error message "Error on line: Null". Independent
70119 When you click Save, the state of the editor will be lost and all nodes will be expanded. Independent
76553 The Undo action for the Configuration Template properties Content tab does not work. Independent
80888 The iis-web.tpl: encoding value from the .config file is overwritten by the Agent encoding value. Independent
106203 XML elements with single CDATA elements are not supported. Independent
111027 When loading an application configuration in a software policy, the application configuration must support all versions of all operating systems that the parent software policy supports. This does not apply to .zip files RPM's because they can support a single instance of RHEL, instead of every version the software policy supports. There is no parity between application configurations and virtually every other item in a software policy. Independent
111359 Comments and new lines in XML file are not displayed in XML preview even when the preserve format option is active. Independent
113689 There is infinite loop behavior when previewing a file with a CML containing an unstable loop. Independent
111558 Unable to create localization files from folder. Independent
111765 Unable to modify application configuration value sets for all scopes (Configuration Facility Customers). Independent
111819 Error message is incorrect after you set a previously scheduled job's date/time to a lapsed date/time. Independent
111851 Some servers fail during Configuration Compliance with an “integrity constraint" error. Independent
111992 The session_id in the compliance_summary table is null when running compliance for a software policy containing an application configuration. Independent
112119 The configuration table cell editor does not enforce character limitation and naming constraints. Independent
112121 The templates table cell editor does not enforce character limitation and naming constraints. Independent
113689 There is infinite loop behavior when previewing a file with a CML containing an unstable loop. Independent
114041 The Configured Applications tree does not get updated when attaching a software policy. Independent
114398 When attaching a software policy that contains an application configuration to a group, the Configured Applications tree is not updated. Independent

Application Deployment Manager

104590 Validate length of string fields before writing to avoid Oracle errors or multi-master restrictions – long strings result in errors. Independent
107544 Double-clicking in the Type column for a parameter results in an empty edited dialog that causes an error when you click OK. Independent
109343 Deleting a version leaves an empty version folder in SA Library Independent
110134 You could create and start a deployment job using a target that contained an empty tier. The Jobs log reported that the deployment job was successful, even though it did not do anything. Independent
110852 When you create or modify a Software Policy, Software Package, or Application Configuration component, you can search for pertinent library items and then select the one that you want to use. Previously, if your search returned no items that matched the platform of the tier, there would be no indication why the search results table was empty. Independent
110875 “Save Changes” dialog appears when there are no pending changes Independent
111038 On the Deployment screen, the following fields in the right panel should remain blank until you select a version and a target: Parameters, Changes, Comment, Rolling Deployment, and Scheduling. Previously, the settings used in a previous deployment editing session were not cleared. Independent
 111103, 111128 When adding or editing a parameter, if you entered more than 4000 characters in certain fields (Name, Value, Description, or Target Value), a cryptic error message would appear when you tried to save your changes. Independent

When exporting an Application Deployment Manager environment to a device group with targets that contain servers that have been deleted, you received the following error message:

“java.lang.RuntimeException: Unable to update the device group representing the target '[target name]': DeviceGroup or Server deleted during operation, try again.”

111121 Server-specific special variables (such as Server Name or Server ID) and tier-specific special variables (such as Server names for Tier “Tomcat 6.0.20” or Server IDs for Tier “Tomcat 6.0.20”) should never appear in the list of available special variables used to define the values of parameters used by the Pre-Deployment and Post-Deployment flows for an environment. Previously, these special variables were available in this context. Independent
111218 When you selected an item on the Jobs screen, the items would be re-sorted, and the selected item would move somewhere else—possibly out of view. Independent
111223 If you attempt to create a new environment or modify an existing environment, and that operation fails, the Environments page does not refresh—which makes it appear that your operation was successful when, in fact, it was not. Independent
111236 On the Applications screen, deleting a tier that contained one or more components corrupted other tiers. Independent
111325 On the Deployment screen, the tool-tip that appears when you mouse over the Select Target drop-down menu incorrectly displays the name of the last selected target when the label displayed is “No Targets” or “Select Target.” Independent
111398 The Manage Targets dialog enables you to select multiple targets and move them from one group to another. Previously, only one item was moved. Independent
111500 UI exception occurs when a user who does not have permission to Create Applications or Manage Application Deployment attempts to drill-down from the Jobs screen Independent

“Server and policy platform mismatch” error occurs at deployment time when using tier policy
If the server platform did not match the platform of the policy associated with the tier, a deployment job was started, but it immediately failed. This was inconvenient, since the mismatch should have been reported earlier.

Resolution: You are now warned that the job will fail because the platforms do not match. See z_HPBlueparatextefault

If you cancelled a job that just started, the confirmation dialog contained a message that said:  “Are you sure you want to cancel job?”

Resolution: Confirmation message now reads, “Are you sure that you want to cancel the selected job?” if the job ID is not yet available.

Backup and rollback scripts for large Code components were failing, because the default timeout for these scripts was very short.

Resolution: You can now configure the timeout when you specify the Code component. The default setting is 3600 seconds (one hour). See “Code Components” under “Types of Components” in the Application Deployment Manager User Guide.

The Windows Backup and Rollback scripts were not handling directory hierarchies correctly
For full releases, the Windows Backup script backed up files into multiple places and created too many files when the Source Directory had subdirectories. For delta releases, it did not back up files in subdirectories correctly.

Resolution: Both the Backup and Rollback scripts now work correctly.

Windows backup and rollback scripts don't work properly if drive letter is not specified for the Default Install Path.

Resolution: Application Deployment Manager correctly resolves the path, adding the default drive letter to the beginning.

Parameters grid on the Deployment screen should show components like the Component Editor does so that you can see where parameters come from.

Resolution: The Parameters panel on the Deployment screen now contains a Component column.

Parameter values were incorrect if an application included more than one OO Flow component.

Resolution: Parameters now have correct values no matter how many OO Flow components are included.

If two or more environments contain targets with identical names, the incorrect environment is sometimes shown in the Parameter Editor dialog.

Resolution: Application Deployment Manager now requires that all targets have unique names.

Application Deployment Manager should warn users in the Job Step output when a Script component times out. There is no indication in the Output area of the job Step details window that a timeout had occurred. This is the window that is displayed when you double-click a job step on the Jobs screen (or in the Debugger) or when you drill-down from the Job details window.

( The Output area in the job Step details window now indicates the reason that a Script component fails.)


Any SA job can be blocked pending approval. Application Deployment Manager deployment jobs are subject to this blocking. Previously, if an Application Deployment Manager deployment job failed because it was blocked pending approval, no message to that effect was displayed.

Resolution:  Application Deployment Manager now reports that the job is blocked and waits until it is either approved or disapproved.

When you used a special variable in a parameter to refer to a server, any output that contains the server name would show the SA name for that server, not the host name.

Resolution: Three new special variables were added: server.hostname, deploy.servers.hostnames, and {tier["<name>"].server.hostnames}. You can use these variables when you define parameter values.

You can add deactivated servers to a target, but you cannot deploy to them.

Resolution:  You can no longer add deactivated servers to a target.

The Filter box in the Select Targets dialog enables you to show only those servers whose platform matches the selected version. Previously, if you selected the Filter box, and there were no valid servers to choose from, you would see a cryptic error message.

Resolution: If there are no valid servers, an empty tree is displayed.

tar options used by Application Deployment Manager are not valid on all platforms.

Resolution: Code components can now be successfully deployed on all supported platforms.

Backup step on Solaris platforms incorrectly reported “nothing to back up” when a backup was, in fact, performed.

Resolution: The Backup script for UNIX code components was repaired.

Code component changes list are sorted.

Resolution: The list is now sorted hierarchically (and alphabetically at each layer in the directory structure).

Long Application Configuration names do not display correctly in Application Deployment Manager.

Resolution: The name is now truncated to fit in the column. You can see the complete name in the tool tip that appears when you mouse over the name in the table.
113603 The underscore character is not displayed in the Select Policy, Select Package, or Select OO Flow dialogs Independent

Previously, you could add the same user or group to the list on the Permissions tab for applications and environments. Users and groups that have already been added to the list are removed from the drop-down list of available choices.

Resolution: Users and groups that have already been added to the list are removed from the drop-down list of available choices.
113283 Name of “Revert” button is inconsistent. . The name of this button is now “Revert [item]” in all contexts. Independent

tar options used by Application Deployment Manager are not valid on all platforms.

Resolution: Code components can now be successfully deployed on all supported platforms.

Backup step on Solaris platforms incorrectly reported “nothing to back up” when a backup was, in fact, performed.

Resolution: The Backup script for UNIX code components was repaired.

Code component changes list are sorted.

Resolution: The list is now sorted hierarchically (and alphabetically at each layer in the directory structure).

Long Application Configuration names do not display correctly in Application Deployment Manager.

Resolution: The name is now truncated to fit in the column. You can see the complete name in the tool tip that appears when you mouse over the name in the table.
113603 The underscore character is not displayed in the Select Policy, Select Package, or Select OO Flow dialogs Independent

Previously, you could add the same user or group to the list on the Permissions tab for applications and environments. Users and groups that have already been added to the list are removed from the drop-down list of available choices.

Resolution: Users and groups that have already been added to the list are removed from the drop-down list of available choices.
113283 Name of “Revert” button is inconsistent. . The name of this button is now “Revert [item]” in all contexts. Independent

In the Edit Application and Edit Environment dialogs, there was no distinction between an individual user and a user group in the table on the Permissions tab. There is now a Type column that says User or Group


Previously, the Add Servers to Target dialog listed servers running ESX and servers in the “Unknown” OS category when you were adding servers to a Windows tier. Only Windows OS servers are listed for Windows tiers; only UNIX servers are listed for UNIX tiers.

Resolution:  Only Windows OS servers are listed for Windows tiers; only UNIX servers are listed for UNIX tiers.
 113911, 114664, 114856

Previously, if a job failed because the registry key is invalid, the job did not complete with failure status.
All registry key names and values are now carefully validated when components are saved.

Resolution:. All registry key names and values are now carefully validated when you save the component.
 113965, 115706 Previously, when a Code component was deployed with the Filesystem source type,  symlinks were not preserved or recreated on the targets. The symlinks are now preserved. Independent

Searching for an OO Flow with no characters in the Search box fails.
Previously, if you clicked the Search button in the Select OO Flow dialog, and you had not entered anything in the text box, the search would time out without returning any items.

Resolution: Fixed. This search matches full words in the OO Flow name. If you do not enter anything in the “Full word” box, you are now warned that searching without supplying a full word could take minutes. The timeout was also increased to 18 minutes. If no items are found that contain your search word, you now get a message to that effect.

Previously, binary registry key values in the Add Value dialog box were displayed as hexadecimal.

Binary keys are now displayed in binary.

Previously, if you initiated roll back or undeploy of a version that was older than the most recently deployed version of the same application, you were not warned about or prevented from doing that. This is dangerous and strongly discouraged.
Now, you are warned if you attempt to roll back or undeploy an older version. You must confirm your intention to proceed.

Resolution: Now, you are warned if you attempt to roll back or undeploy an older version. You must confirm your intention to proceed.

 In a Windows Registry component, if you specified the value of a DWORD type key using decimal characters, the key would not be created. Only hexadecimal characters worked.

Decimal values are now converted to hexadecimal. DWORD type keys are now validated when you save the component.

If Application Deployment Manager is stopped, any deployment jobs that were running at the time never complete and appear to be IN_PROGRESS in perpetuity.

Resolution: Fixed. If Application Deployment Manager stops and restarts, any deployment jobs that were in progress are examined to determine what action needs to be taken. If a job step was in progress when the ADM stopped, the job is marked FAILED and rollback is initiated. If all job steps were successfully completed, the job can be marked Completed.

Need horizontal scroll bar in “Add Servers to Target” dialog.
When you opened a hierarchy of Device Groups—such as Public : Opsware : Operating System : All Linux : All Linux Red Hat—you could not see the full names of the child device groups, because they were truncated and there is no horizontal scroll bar

115184 Server count resets to 1 in Rolling Deployment settings update Independent

“Failure parsing template” error reported after an Application Configuration is selected.
When you selected an Application Configuration, if Application Deployment Manager failed to parse the template used with the Application Configuration, and cryptic error messages were reported.

Resolution: The ADM now parses properly formed Application Configuration templates correctly. If a failure occurs, a more meaningful error message is displayed.

Should not be able to select the same Package more than once.

Resolution: You can only select a Package once.

Incorrect Job ID referenced in confirmation message for rollback or undeploy
When trying to roll back or undeploy a version with OO Flow or Configuration File components, the following confirmation message is displayed:

Are you sure you want to rollback job '0'?’

Say that you scheduled a deployment job to stage immediately but cut over at a different time. Later, you changed your mind and modified the scheduled cut over time to be on a different date.

The time displayed in the “Wait for Cut Over Time” job step was different than the time displayed in the Reschedule Job dialog, and this was confusing

Previously, if you deleted a release, you could not ever use its name again. You can now recycle release names.

Resolution: You can now recycle release names

ADM experiences memory problems when there are many Code component changes to show
When creating a new version of a full release, if you selected “Show Code Component Changes,” and there was a very large number of files included in the Code components, you might see cryptic “out of memory” error messages.

Resolution: The number of files in a Code component is now limited to 100,000 for a full release.
115949 The Parameter Values dialog is not rendering correctly. Resolution:  The Value field is now limited to 300 characters, and you can use the arrow keys to display additional character. Independent

When you create or modify a lifecycle, the list of Available Environments is not sorted, causing problems if numerous environments are listed.

(The list is now sorted alphabetically by name.)


The following misleading message appears in a pop-up dialog box after the job started when the“Show Jobs screen when deployment starts” option is not selected:

“One or more deployments have been scheduled. View results in the Jobs tab.”

This message is incorrect. At this point, the job is actually running and is no longer in the Scheduled state.

(The message now reads: “One or more deployments have been started.”)


RPM and MSI packages were imported as type ZIP. The name of the “Import Package” tool used when specifying a Package component is confusing, particularly in the following scenario:

  • If an RPM or MSI file is added to a Package component using the the “Add Package” tool, that RPM or MSI file is copied to the “Default Installation Path” on the target server during deployment.
  • If an RPM or MSI file is added to a Package component using the “Import Package” tool, however, the ZIP file containing the RPM or MSI file is copied to the “Default Installation Path” on the target machine during deployment.

(The name of the button was changed to “Create ZIP Package from Files.”)


On the Deployment screen, you should not be able to select a Target in an Environment that is not part of the Lifecycle associated with the specified Version.

( Now, only those Targets that belong to Environments that are part of the Lifecycle associated with the specified Version are available.)


Symptom: Occasionally, the following refresh error message is displayed when the Step details dialog is open while a job is running, and the job failed:
“A data refresh failure has occurred. No further refreshes will occur.”

(The Step details window is now dynamically refreshed to reflect any status changes that occur until the job runs to completion.)


When a non-superuser with View All Jobs permission, but no Create Applications or Manage Application Deployment permission, views a job that they do not own, the Job Steps and Parameters tables were empty.

(Both the Job Steps and Parameters tables now show the correct information for the job.)


Automatic backup steps for some components are failing due to timeout errors.

( The timeout for backup steps was increased from 5 to 60 minutes.)

116883, 117774

In the case where an Environment contained some targets that were suitable for the specified Version and some that were not suitable, the Environment name was “grayed out” in the Select Targets dialog in the Deployment screen. This made it appear that no Targets in that Environment were available when, in fact, some were available.

(All Environments that contain suitable targets are now shown as available.)


When you create a new deployment on the Deployment screen, the Stage selection should be “Now,” and the Cut Over time should be “Immediately” by default. Instead, the values from the previous deployment are selected - they are not reset.

(The correct default values are now selected.)


Scripts were not consistently updated during a Patch Upgrade. Some “out of the box” backup and rollback scripts were not properly updated after an SA patch was installed.

(All scripts are now updated when a patch is applied.)




APX session timeout is not correctly implemented.

To increase timeout for Web APX Proxy (Note: this must be done at all the Slices on all the Cores):

1. Edit /etc/opt/opsware/apxproxy/apxproxy.conf to specify both the session timeout and socket timeout. Make sure socket timeout is at least equal to session timeout. For example,


2) Edit both /opt/opsware/apxhttpd/conf/httpd.conf.tmpl and /var/opt/opsware/ogfs/mnt/root/opt/opsware/apxhttpd/conf/httpd.conf.tmpl to add a timeout directive. Add this property after the "Server" property. For example,

TimeOut 1200

Remember, unlike apxproxy.conf, the timeout value in httpd.conf.tmpl is in seconds, not milliseconds.

3) Restart the Core.


Audit and Compliance


55463 Hardware audit of CPU should include stepping to allow for CPU comparisons.. Independent

Audit and Remediation


81358 There is “hex_ntop failed” data for a snapshot on IIS Metabase object. Windows
55465 It should be possible to flag Windows Registry audits as non-case sensitive. Independent
69863 Audits that have several hundred thousand audit results can cause the Web Services Data Access Engine (twist) to crash. Independent
89044 An audit run on a large number of servers (+150) may not complete successfully due to memory issues. Independent
92932 Snapshot specification job fails with a legacy exception on a Windows XP server.
The following error is displayed:
An error occurred during the audit.
Resolution Steps: Please see the additional messages for more information. If this does not resolve the issue, contact your Opsware administrator. Legacy Error Code: wayscripts.auditGenericError msg= All member snapshots in a Snapshot template failed.
105021 The Audit Results browser contains miscellaneous, invalid characters (such as " : 0 ") that should be removed. Independent
105146 In the Audit Policy window, in the Properties Name, the text field should be enabled and prompt for input when you select New to create an audit policy. Independent
108616 When you rename an instance of compliance check, the new name displays in the lower pane, while the old (previous) name displays in the top pane. Independent
110611 A snapshot with the perform inventory option shows no warning to upgrade the Agent when selecting items that are not supported by an old Agent version (SMOs). Independent
110811 The compare .config file audit did not detect differences when comparing link files. Unix
111682 The View button and Contents panel do not display for the "Application Configurations" rule in the Snapshot Specification window. No application configuration rule can be added for the snapshot. Independent
111791 The stempcache directory is not automatically cleaned up when there is an audit failure. Independent
113305 Move Compliance view in Management Policies panel. Independent
116286 When renaming and saving an instance of a compliance check in the Audit Policy or Audit Task browser, the new name does not display when you reopen the browser. Independent
116514 Dataminer will not mine CIS 1.5 audit results. Independent

Command Engine


If the Command Engine is too busy or otherwise unavailable, PENDING jobs cannot be run, however, when the Command Engine is available again, the missed PENDING jobs run, regardless of how old they might be.

PENDING jobs now have a default limit of 600 seconds after which they are considered stale jobs and will not be run when the Command Engine becomes available again. (This limit is configurable but you must contact your SA Support Representative to change the default time.) For example, you have a one-time job that is scheduled to run at a future date and time. When it is time for the job to run, the Command Engine is down. When the Command Engine comes back up, the PENDING jobs are inspected, to check whether or not the job should run based on when the job was scheduled versus the current time, and if too much time has passed (600 seconds by default), the job is not run.




109998 Multimaster conflicts are created when creating OS Installation Profiles for RHEL ES 3 or SunOS 5.9 under very specific circumstances. RHEL ES 3, SunOS 5.9
112878 The pytz library is not usable from an APX due to root-only file privileges.


116991 Debugging files are unusable. Solaris
117105 At least two Python C modules fail to compile for reentrancy. Solaris

Custom Fields

70320 Searching for servers using custom fields as search parameters in the SA Client, the SA Web Client, and the Command Center browser can return invalid results due to incorrect filtering. Independent

Data Access Engine


67030 When the Data Access Engine exceeds 1024 connections, too many files open errors occur. The connection limit for the Data Access Engine should be increased to 65536. Independent
116939 Installing satellites on Linux boxes fail if the boxes contain slices that are running SunOS 5.10. Data Access Engine (spin) fails to link against the libiconv_plug. Solaris

DCML Export Tool (DET)

91664 DET should export only the ValueSets associated with an Account, instead it exports all ValueSets included those of associated customers Independent
92144 Import of OS Sequences populates incorrect flags in certain fields. Therefore, after OS Provisioning completes, software remediation jobs do not start and the build fails. Independent
119058 The Export Tool fails to export the /RAID Policies folder. Independent

Extensible Discovery


The get_firmware.sh script does not apply to SuSE 10 SP3 PPC64.

The Extensible Discovery get_firmware.sh script does not support the PPC64 platform.


Global File System/Shell Backend

58417 The Global File System (OGFS) cannot be stopped properly because it cannot be unmounted and the host must be rebooted before the OGFS can be started again. Solaris
71625 When a customer, facility, or device group is deleted, all resource settings on either a user group or an OGFS privilege which references that object should also be removed. When they are not, the command cat loginToServer fails with an Input/Output error. Independent
110903 Server browser shows error "500 OGFS view dir does not exist SA”. Windows managed server with locale set to S-Chinese (Code Page CP936)
112418 Solaris panic BAD TRAP: type=31 rp=2a103a81400 addr=0 mmu_fsr=0 occurred in module "unix" due to a NULL pointer. Solaris 5.10
112419 panic Deadlock: cycle in blocking chain. Solaris 5.10
116994 Core becomes unusable when you attempt to access long file names in the Global Shell (OGSH). ogsh. Linux


76655 Make get_slice_ips.py more user friendly. /opt/opsware/oi_util/bin/get_slice_ips.pyc was designed as a tool to be used internally by the Installer and, as such, was not prepared for the types of errors a user might introduce. When problems occurred, it responded with vague errors that were not helpful Linux/3AS, Linux/4AS, Linux/5Server, SunOS

ISM Tool

92201 When using the ISM tool to build and upload an ISM package on a Windows managed server (using the ZIP package engine) and a configuration control script for access to custom attributes, the environment variables ISMLIB and ISMRUNTIMEDIR are not set to the correct paths. Windows
110511 ISMtool failed to upload ISM into a software policy. Windows Server 2008 (x86)
111304 Information about the created ISM shows supported platform as 'Windows 2000” instead of “Windows Server 2008 R2 x64”. Windows Server 2008 R2 x64
111662 ISMControl does not work on Windows 64bit systems for ISMs built using the ZIP package engine. Windows 2003 x64, Windows 2008 x64, Windows Server 2008 R2 x64

Jobs and Sessions

111800 The server count is shown as zero (“0”) when there is one server present in an Application Deployment job. Independent
111802 Application Deployment Manager job groups sometimes stop refreshing in the user interface. The refresh rate is also too slow. Independent
111856 Application Deployment Manager Job Group display is incorrect for Run Program Extension. Independent
117956 Custom Range filter not working correctly .in the Jobs and Sessions and History pages of managed servers. Independent

Microsoft Hyper-V

97630 In a multi-master mesh environment, simultaneous invocations of scheduled periodic scans on hypervisors can cause multi-master conflicts. These scheduled periodic scans on hypervisors are triggered by the SA user "virt_scanner". Windows

Model Repository

83813 Unable to sync differences in ServiceInstances after a referenced device has been deleted. Independent
91064 Oracle (10g) setup for the Model Repository requires that certain Oracle patches also be installed. These patches are installed automatically during an HP-supplied Oracle database installation. However, the patches must be manually supplied if you are using the Oracle Universal Installer to install the database or are using an existing Oracle 10g database. Independent

Oracle RDBMS
Database user TRUTH statistics collection job fails with error: ORA-01000: maximum open cursors exceeded.

This error is intermittent and not all customers will run into this issue. The error is caused due to an Oracle bug (#7651092).

When duplicating a zip package, the package is duplicated without the path and the following error message is displayed:

You do not have permission to view details of this policy item.


Opsware Command-Line Interface

118249 Failed to upload a package with Chinese name. Windows 2008

OS Provisioning - Backend


Import Media script should support long filenames for SMB.

It is difficult to translate long filenames to 8.3 syntax format when there is no unique naming capability in the directory structures. It takes a long time to translate these paths into the 8.3 syntax.
71989 During Linux OS provisioning using a Software Policy and remediate pre-action and post-action scripts, the job fails when the Pre-Action script runs. All further Remediation steps are skipped and do not complete. Linux

The version of the Samba server installed on the remote host during Linux OS provisioning has problems with securing the environment and should be upgraded to a secure release.

89108 An error in the OS Provisioning job is not shown in the Job Status Error tab. ESX, Linux, Solaris, VMware, Windows, Windows 2000, Windows 2003, Windows 2008, Windows XP

In a core where the value for truth.dcNm is not the same as the value for truth.dcDispNm, or truth.dcDispNm is not specified in uppercase only, Linux reprovisioning becomes interactive and prompts the user for the language, locale, etc.

Both thetruth.dcNm and truth.dcDispNm parameters were set during core installation.

The autoprovision for registerManagedNodeForDS would always send kickstart information through eth0.

If the server being provisioned has multiple network cards, SA may not consistently use one card throughout provisioning, which may cause provisioning failures.
109925 winpe-ogfs booted servers were listed in the Data Integrity Error fail test. Windows
101920 Solaris 10 SPARC OS Provisioning job completes with the status Success, however the output in the client shows a Solaris 10 packages partially installed message. Solaris

If you attempt to specify the Windows Server 2008 R2 volume license product key information by using the SA ProductKey custom attribute for Windows 2008 R2 OS Provisioning, the Windows setup process fails with the following error

The unattended answer file contains an invalid product key. Either remove the invalid key or provide a valid product key in the unattended answer file to proceed with Windows Installation.
103377 The following prepdisk error occurs on some Linux installs: "prepdisk.py failed: Incomplete arguments”. Linux

Run action is enabled in the OS Build Plan window for a user who does not have the “Allow Execute OS Build Plan” privilege.

You can select Action > Run when you do not have the required privileges.

The configuration value: bm.reprovision_attributes_to_preserve should default to change to a new value, rather than keep the old value.

If you locally change (overwrite) the value of this system configuration parameter in the SA installation, the upgrade process will preserve the value. This is often the correct behavior, but in this specific case the correct behavior would be to overwrite the data with the new data shipped with the SA product.
111445 Run OS Sequence does not escalate device group privileges. Independent
111845 The sequence_id and MAC link were not removed for Solaris10x86 provisioning that was done using MBC. Linux
113004 Remediate job using OS Build Plans failed intermittently in cross mesh test. Windows 2003
113056 import_media does not correctly detect the .wim image URL. Windows
114303 The monitorServerBuildInit is never executed for OEL and CentOS. OEL 4, OEL 5, CentOS 5
114403 Solaris 10 U8 mini-root shipped with 7.80.03 causes kernel panic during provisioning of Solaris 10 U6 servers with ZFS. Solaris
During Windows provisioning, if a driver is not present, the WinPE image does not recognize the NIC card. Windows
119424 SA now supports NFS mount-option parameters (through the custom attribute nfs_opts) for any NFS mount options that can be specified in /etc/fstab. Independent
122502 During software provisioning, you receive the following error:
No network information available from computer because there is no network adapter.
122490 ESX 3.x OS Provisioning breaks with missing parameter "ks_mandatory" Windows

OS Provisioning – SA Client

117508 Changes to Script Timeout are not saved if you reopen the OS Sequence. Independent
117509 Script output to export is limited to 10K for pre- and post-remediate scripts that are attached to an OS sequence. Requested: allow textbox in UI for flexible output size. Independent
117604 Gain control over options in the Remediate Policies job spawned by an OS Sequence. Independent
117669 When you select servers in the job-progress section during an OS sequence run, the Details pane window closes. The correct behavior is a selection change. Independent

OS Provisioning – SA Web Client


You can upload an unattend.xml file that exceeds the maximum size allowed.

Windows 2008
114962 Requested removal of DOS Boot Install Type for New Windows OS profiles and Modify OS profiles. Windows
115542 No network adapters are displayed in ipconfig file when provisioning a DL580G7 server with a CN1000E card that uses the integrated Windows PE 64-bit boot image.
Support for HP StorageWorks CN 1000E (10Gb Ethernet) network cards requested.

OS Provisioning – UI

110077 Removing steps from the OS Build Plan causes a Null Pointer Exception (NPE). Windows 2003, Windows 2008

Patch Management - Backend

120083 Receiving traceback during script execution. HPUX
120084 A compliance scan fails because the SA Repository has both a deleted and an active software catalog. HPUX
120773 Incorrect number of non-compliant patches displayed. HPUX

Patch Management - Windows

82708 If your system locale is set to GB (0809), Microsoft Windows patches are not displayed correctly in the SA Web Client. Windows
91986 Exception (not error) generated when editing the name of a Windows Patch Policy if the name already exists. Windows
92124 The Manage Windows Patch Policy READ privilege allows users with inadequate privileges to change the availability of Windows and Solaris patches. Solaris, Windows
111964 Incorrect tool tip for patch compliance when the patch is in the list of installed patches, has the “Never Install” exception set, and is not in a patch policy. Windows
110340 Remediate shows a "Will Not Install" status for “Always Install” exceptions for a different platform than the managed server when the “Always Install” exception is at the server group level. Any platform that is not the same as the managed server
110391 Windows Server 2008 R2 patches are displayed in the patch library as Windows Server 2008 (x86) patches. Windows 2008
111862 Remediate of managed server with a group "Never" exception and a device "Always" exception causes a non-install due to the "Never" exception. Windows
114337 Windows patches that have more than 6 digits in their KB numbers do not have correct unit_name and unit_display_name values in the recommended_patches and installed_units tables. Windows
117667 Text for a patch-installation message that is scheduled for a specific time is truncated. Windows

Patch Management - Solaris/UNIX

92124 The Manage Windows Patch Policy READ privilege allows users with inadequate privileges to change the availability of Windows and Solaris patches. Solaris, Windows
95745 When resolving the dependencies for a set of Solaris patches in a patch policy, the incompatible patches dialog may repeatedly be displayed. This can occur when an incompatible patch is required by another patch in the patch policy or when an incompatible patch obsoletes another patch in the patch policy. After you specify an incompatible patch to be removed from the policy, it may get added back because it is required by some other patch in the policy, resulting in the incompatible patches dialog being redisplayed. Solaris
110273 Patch installation fails for AIX 5.3 for EMR3 Agent 32h.0.0.101 without a specific error message; After the Agent is upgraded, the patch installation is successful. AIX
110313 In Advanced Search, there is a misspelled word in the Patch "Where" drop-down list. Sun OS 5.01, 5.10 x86, 5.9, 5.8, 5.7, 5.6
112588 The Add to Patch Policy option should be enabled when a Solaris patch or patch cluster is selected from Library > By Type > Patches > Solaris > SunOS 5.x. Solaris
113591 On June 4, 2010, Oracle changed the process of tagging patches as “'recommended”. After June 4, 2010, only the first patch to fix a Sun Alert issue is tagged “recommended”. Before June 4, 2010, the behavior was that the latest patch to include the fix would be tagged “recommended” and the “recommended” tag would be removed from the obsoleted patch. Sun OS 5.01, 5.10 x86, 5.9, 5.8, 5.7, 5.6
116919 RPM remediation fails for some remediations that include a mix of install-only and upgrade RPMs. Linux
117667 Text for a patch-installation message that is scheduled for a specific time is truncated. Windows

SA Client - Framework

81123 There are other HP rebranding items for a future release. Independent
91685 A new, saved search does not display in the drop-down selection list. Independent

SA-OO Integration

111738 When a Run Flow job for SA-OO Integration fails, due to a timeout in SA, the "Open report in HP Operations Orchestration" menu action displays as selectable, gray text. When you select this action, a "Cannot redirect to Operation Orchestration" error message displays. Independent
111740 Ticket_ID is automatically filled for Run Flow Job. Independent
112466 Flow integrations informational text says "Job Approvals", instead of  "Job Blocking”. Independent

SA Web Client

111394 If the existing user group has OGFS privileges for multiple users/logins, not all OGFS privileges for multiple users are copied to a cloned user group. For example, if a user group that is going to be cloned has OGFS privileges, the user group clone will work only if the privileges are for one user/login. If there are multiple users/logins for a privilege, only one user/login privilege is copied into the new cloned group and the rest of the users/login privileges are ignored Independent
114769 Allow the ability to grant Global File System privileges in the SAS Web interface when the username contains a dash (-).  Independent
117501 When performing an OS profile edit and uploading a kickstart configuration or an unattend.txt file, the second upload remains in the initializing state, even if the entire upload is completed. Independent

SE Connector

93316 When you are creating a new access control, if you type the SE user name in the wrong case (SE is case sensitive about usernames) and then try to edit the SE Scanner access control to change the case (such as from lowercase to uppercase or vice versa), the changes are not implemented in the access control. This occurs when the user name contains all of the same letters and numbers as the user name that was originally entered, but only the case of the letters has changed. Independent

SA Visualizer

94138 Found "Error Running SiteMap" in the user interface for an HPUX11iv3 with multiple SAN devices and switches connected. HPUX 11.31
110100 A question mark (?) icon displays for Cent OS after a scan. CentOS


117830 Search error (" The query was malformed or incomplete.") is received when you run two advanced searches in two different user interfaces, when one of those searches was opened from within the first user interface. Independent

Server Groups - UI

105997 For the following details panes, the title of the details pane should be the name of the selected View, but instead is the name of the selected Device group: Archived Audit Results, Device Groups, Hardware, Network, Installed Packages

Server Management - Backend

122377 When you run the RHN import command /opt/opsware/rhn_import/bin/rhn_import -v –debug, the command fails to retrieve the RHN Channel list and you get the following RHN error:
You do not have permissions to perform this action.
Core Platforms

Server Management - Managed Servers


Panel title for the Inventory -> Disks view displays incorrect title - it displays the server name.

115884 UI issue: The Servers and Device Groups section of the Reboot Server task window incorrectly displays all reachable Windows servers, instead of displaying only the selected Windows server on a scheduled or completed job. Independent

Improper display of multibyte characters when using IIS and COM+ on Korean servers


Server Module


IIS - Inventory fails on Italian/German/Korean/Japanese managed server using IIS SM.

IIS 7 SMO is failing because the xml.dom.minidom.parseString could not handle the output returned after executing the appcmd command in DOS for retrieving the values.
Windows Server 2008
91597 When run on VMware ESXi servers, server modules give a false and, potentially, alarming error message. VMware ESXi
107867 The remediation of features from "Site" and "Application" Level is not implemented in IIS 7 SMO. Only the features from the "Web Server Level" supports remediation Windows Server 2008

Remediation of Test sites does not copy all values from the source to the target.

Machine Key and Providers features are implemented in IIS7 SMO only for the "Web Server Level". The "Site Level" does not support these features
Windows Server 2008
111521 SMO_Users and Groups - Failed to add a user to the target on Windows 2000 during a remediate operation. Windows 2000

Environment verbs should not be evaluated.

Some parts of the IIS7 server module evaluate %WINDIR% as C:\Windows when auditing various settings (and/or content), causing mismatches when performing audits
Windows Server 2008

IIS7 Server Module audit and remediation issue with several applications in the application pool.

The "Number of Applications" contained in an "Application Pool" is a read-only column and should not be included in remediation for an Application Pool
Windows Server 2008
113052 Remediation of an error page without subStatusCode creates an error page with subStatusCode=0 on the target. Windows Server 2008
113804 There is no distinction between remediation of providers feature from Web Server-Level and remediation of providers from Site-Application Level. The first uses the root path for setting providers, while the second uses the path of the Site or Application. Windows Server 2008

Software Management

74750 A race conditions occurs during certain remediation jobs requiring retries and multiple remediate attempts. Independent
83256 In some cases, an incremental CBT import of an application policy that adds application configurations to the policy does not import the changes. Independent

During Preview/Remediate, when there is insufficient disk space under /var directory, the following error should display:
insufficient disk space
However, this error is actually displayed:
The request to retrieve information from the Opsware Agent failed for an unknown reason, please contact your Opsware Administrator.Execution error:
Traceback (innermost last):
File "./base/wayfuncs.py", line 133, in evaluator
File "<string>", line 1212, in ?
File "<string>", line 1174, in main
File "<string>", line 586, in installPCA
File "<string>", line 382, in findTmpdir
AttributeError: debug



When attempting to remediate a Linux server, the operation fails with an error such as:
The remediate operation cannot be performed because an error occurred during preview.
/var/opt/opsware/yum/cache/opsware/repomd.xml:9: parser error

112589 Cannot add a Solaris patch to a patch policy from the patch's Patch Policies view. Solaris
112702 The popup menus for a folder in the folder tree are enabled differently, compared to the folder list. Independent
114781 A Null Pointer Exception (NPE) occurs when attempting to perform a remediation of a simultaneous attachment and detachment Independent
111793 When there are Remediate job option settings changed after previewing, you cannot preview again. Independent
111861 After you add or delete policy items in a software policy and then save them, you are subsequently unable to open the software policy. There are Null Pointer Exceptions (NPEs) in the Java console. You must log off and then log back in to the SA Client. Independent

Software Repository

99828 A cascading satellite (an SA satellite whose gateway is connected to another satellite's gateway rather than to an SA Core Management Gateway) cannot connect to the Software Repository cache of another satellite due to a certificate error. Independent

SSL - Secure Environment

83898 A scan on port 1028 found the following issue: "SSL Server Allows Cleartext Communication (NULL Cipher Support) This host is running an SSL server that supports NULL cipher. The NULL cipher is a 0-bit SSL connection that does not provide encryption; any network traffic is in plain text. Solution: Disable the NULL cipher. Reconfigure the SSL server to provide suitable encryption." Independent

Storage Host Agent Extension


When an HPUX 11.23 server is presented with a LUN via dual port HBA, the user interface shows only one FC target mapping.

The NGUI panel Inventory->Storage->Volumes->[Select Access Path View]->Select a LUN presented via dual ports HBA, the bottom panel will show only one target mapping instead of two entries. This occurs when an HBA driver does not support the SNIA HBA 2.0 version.
HPUX 11.23

For LUNs managed by Solaris Native MPXIO, the multipath count is displayed as 1. This behavior is seen on Solaris versions before Solaris 5.10 Update 3.

For Solaris versions before Solaris 5.10 Update 3, the Storage Host Agent Extension inventory snapshot specification fails to discover the information related to Solaris Native MPXIO software. Because of this, MPXIO managed multipathed LUNs will have their path count as 1.
109306 The supply chain breaks when users create multilevel LVM RAID volumes, such as RAID10 or RAID50, and the Inventory -> Storage -> Volumes panel does not display supply chains for multilevel-RAID volumes. Linux


117600 Severe java-console error occurs when you run a server script on a Device Group. Independent



When an imported LDAP user clicks the Next button in the Create Virtual Zone wizard’s Zone Definition step, they do not advance to the next step. The following NullPointerException error is returned:

WARNING init(NguiUser:-1): No user date format specified, using JVM defaults
at com.opsware.ngui.virtual.task.ZoneDataSpecificationPanel$
ServerVirtualizationZonePanel.createPanel(Unknown Source)
at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3128)

at java.awt.Container.dispatchEventImpl(Container.java:1613)
71995 The progress bar does stop after opening a Virtualization object browser. Independent
77903 Unable to modify a virtual machine's storage with add and remove operations in the same job. ESX, ESXi
78017 The ManageEsx create command fails with a Null Pointer Exception (NPE). The command was replaced with a shell script. Linux/3AS, Linux/4AS, Linux/5Server, SunOS

When more than 2 GB memory is allocated for Local Zones, requests for memory information causes Web Services Data Access Engine errors.

81233 When you open Create/Modify/Remove virtual machine jobs whose server has been deleted, an NPE error displays. Solaris, Vmware, HyperV
81241 A deleted hypervisor server is displayed as "null" in completed Create virtual machine and Remove virtual machine jobs. Solaris, VMware, HyperV
83717 The Create Virtual Machine wizard, does not allow creating VMs with Windows Server2008 or Red Hat Enterprise Linux 5. Windows Server 2008/Red Hat Enterprise Linux 5
92213 ESXi edit connection events should be logged in the history log file. Independent

Update ESX VMM code to version 2.5.

SA should take advantage of latest enhancements and features such as cloning

A completed Create Virtual Zone job does not show the zone creation command script.

SA did not initiate a scan of the hypervisor after a successful edit connection. You must perform a reload data action.
92336 ESXi Edit connection: No HV scan is performed after a successful edit connection. Independent
93612 Creating a virtual machine with auto-provisioning and multiple NICs did not allow you to specify which NIC must be used as the provisioning device. ESX 3, ESX 4, ESXi 3, ESXi 4
93686 Suse64Guest is missing from the list of guests that require the E1000 adaptor. Independent
93713 Create Virtual Machine: The Job Status view is inconsistent between the live view and the view you get when opening the job from the history view. Independent

ESXi hypervisor in maintenance mode: You cannot create virtual machines when it is not allowed.

Hypervisors in maintenance mode that were the targets of any VMM operation would fail with an unrecognized error.
ESX 3, ESX 4, ESXi 3, ESXi 4

The reported OS property for ESX servers is inconsistent between direct (SA Agent) and indirect managed (vCenter) cases.

Hypervisors previously included in a device group, based on the OS property, would not be able to join the device group after VS registration.
105257 “Network Name" and "VMware Guest OS" is not populated in the Virtual Machine Definition step after Modifying a virtual machine. Independent
108705 Need a better error message when Run Custom Extension is attempted on vCenter managed ESX/ESXi servers. Independent
109849 When you add vCenter whose hypervisors are already managed by SA, the job fails with "integrity constraint (TRUTH.DEVICES_VSWITCH_INTERFACES_FK) violated - parent key not found". Independent
109874 In the Server browser Properties view, the user name appears as Username=<empty> and Credential Status=unverified for the ESXi hypervisor. Attempts to set the credentials results in an error (java NullPointerException). VMware ESXi
109887 Snapshot views of hypervisors that are managed by Virtual Center (VC) are not supported. ESX, ESXi
110481 Starting a managed Hyper-V virtual machine is logged in the SA Web Client as "Start Zone". Microsoft Hyper-V
111307 The add ESXi operation suspends on RHAS3 and RHAS4 cores. VMware
111363 Modify VM fails when trying to modify/remove vlan adapter type VMXNET 2 or 3.  ESX, ESXi
111590 Incorrect history events are logged by failed, recurring, hypervisor scans. Independent
111691 The Virtualization panel displays a “java.lang.IndexOutOfBoundsException” and then the view panel goes blank. Independent
111775 Debug information is logged in the Web Services Data Access Engine (twist) stdout.log file. Vmware, Solaris
111780 Hypervisors are not loading. ESX
111847 A virtual machine is in a powered on state and you can add a disk but not change the size of the new disk or change the datastore after one is selected.  Independent
111922 The create virtual machine job on an Agent managed ESX 3.5 fails with the error message: “com.vmware.vim25.VirtualMachineConfigSpec”. ESX, ESXi
111972 The create virtual machine action fails on a managed ESX hypervisor when the virtual machine’s datastore name contains special characters, including blanks, in the controlling XML file. ESX 3, ESX 4
112176 The Help button on the Add Hypervisor Progress window does not open the add hypervisor online Help topic. Independent
112376 The Power On, Power Off, Reset, Suspend, Modify, and Remove actions fail on virtual machines managed by ESX 3.05. Independent
112417 Modify VMware VM - Adding multiple hard disks to different datastores results in all disks being added to a single datastore. ESX, ESXi
112431 Modify VMware virtual machine "Jobs and Sessions" displays "Power Status" as the virtual machine state.  Independent
112733 When creating a Hyper-V virtual machine, you cannot enter any RAM value because the value was restricted to 8 MB. Independent
113607 During a virtual machine modification, when adding VHD, the File Location does not work for input without an ending backslash (\). Independent
113659 Modify VM - Virtual Machine Definition - When you add a description that includes the equals (=) character, it fails and displays the following error: "ValueError: too many values to unpack”. Windows 2008
113887 Create Virtual Machine job fails to boot the virtual machine into the server pool.  ESX, ESXi
113891 Cannot create and provision an ESX virtual machine guest.  ESX, ESXi
115353 Storage Panel page of the Storage Snapshot is not displayed when a hypervisor is managed through Virtual Center (VC) in the SA Client.  ESX, ESXi

Cannot select Windows 2008 R2 as VMware Guest OS if you create a virtual machine on ESX Server and provision Windows 2008 R2.


Web Services Data Access Engine


In certain cases, for example, moving a twistOverrides.conf file from one core to another that has different encrypted key material, the operation fails and the twistOverrides.conf file is truncated.

Resolution: Changes to changes to the twistOverrides.conf file are now written to a temporary file and the original is only overwritten on successful completion of an operation.

72100 If $JAVA_HOME is empty, SA will use the Java version installed in /etc/opt/ opsware/j2sdk14/j2sdk14 which typically contains the SA-supplied Java version. However, if you have installed a different Java version or have installed an application that overwrites the Java version in that directory, you could have incompatibility problems. Independent
119166 When you try to submit any new jobs, you might receive a RemoteException or CacheFullException message. Independent
119389 The Web Services Data Access Engine memory usage is not safely bounded, resulting in CacheFull exceptions and OutOfMemory errors. The engine should work within the memory it has been granted and it should block clients when memory resources are low. Independent

Documentation Errata

This section describes documentation errata.

Support Matrix

Due to a documentation error, AIX 5.2 was previously listed as a supported platform for the SSI feature. The SSI feature is not compatible with AIX 5.2.

SA 9.0 Policy Setters Guide, Page 98, remove the following section:

For Windows Server 2003 x86_64, after media is copied to the media server, you must to cd into that directory and issue these commands:

tar cf i386.tar i386
tar cf amd64.tar amd64
chmod a+r i386.tar amd64.tar [Makes files readable for all]

You can then run the import media command like the following:

import_media smb://<SMB Server>/<share>/<path>

If necessary, contact your SA Administrator for assistance.

SA 9.0 Administration Guide, Page 180, the following section should be removed:

Software Repository URL


Application Deployment Manager Context-Sensitive (F1) Help

In Application Deployment Manager, context-sensitive online Help is provided for numerous dialogs, including the Manage Applications and Manage Targets dialogs.

To view a context-sensitive help topic, click the question mark icon in the dialog. Note that the F1 key does not open online Help for the Application Deployment Manager.

To view the portion of the SA online Help that pertains to application deployment, select Help -> Help in the Application Deployment Manager.

Refer to the HP Server Automation Application Deployment Manager User Guide for additional information.

SA 9.0 Single-Host Installation Guide

Create a User Account with Administrator Privileges (Page 15)

All occurrences of the user Administrator should be replaced with the user System Administrator.
Step 5 should read:

5. Under User Privileges: Group Membership, select the System Administrators user group.

SA 9.0 Simple/Advanced Installation Guide

The following changes affect the version 9.0 SA Simple/Advanced Installation Guide, Chapter 2: System Requirements.

Source Destination Open
Port (s)
Management Desktops Slice Component bundle hosts 80, 443, 8080 Required
Direct access to Oracle database (reports, troubleshooting, management) Model repository (truth) host 1521 Strongly recommended to allow Oracle management
Management Desktops Slice Component bundle hosts 1004, 1018, 1032, 2222 [Optional] Useful for troubleshooting; ports represent spin, way, twist, and ogsh (ssh).
SA Core (Management Gateway) SA Core (Management Gateway) 2001 Required
SA Core (Management Gateway) SA Core in a different Multimaster Mesh (management gateway) 22, 2003 [Optional] For scp (default word replication, can be forwarded over 2001 connection), backup for 2001 if it is busy.
Slice Component bundles SA Agents (in same network) 1002 Required (only for the Agent Gateway managing the Agent).
SA Core (Management Gateway) Satellite/Gateway 3001 Required
SA Core hosts Mail server 25 Required for email notifications
SA Core hosts LDAP server 636 Required for secure LDAP access; port can change if you use unsecure LDAP.
SA Agents SA Core servers and Satellites managing the agent 3001 Required
SA Satellite/Gateway SA Core 2001 Required
SA Satellite/Gateway Managed Agents 1002 Required
BSAe Core Mail Server 25 Required for email notifications
BSAe Core SA Core 1032 Required
BSAe Core BSAe database 1521 Required
BSAe Desktop SA Core 443 Required
BSAe Desktop BSAe Core 8080,8443, 14445 Required
Data Miner (SA Core) BSAe Core 8443, 8873 Required


Back to the Table of Contents