What’s new in UnityOS 5.4?
Thu, 08 Feb 2024 14:00:00 -0000
|Read Time: 0 minutes
Dell UnityOS 5.4 is now the latest software release on the UnityXT platform. This blog will briefly cover the File, Serviceability, and Host connectivity features that UnityOS 5.4 has to offer.
Below is a short list of the features pertaining to File, Serviceability, and Host connectivity:
- Serviceability: A multitude of serviceability features for this release includes NTP stratum flexibility, password complexity requirements, secure file upload using SupportAssist, blocked thread alert enhancements, and Storage Processor cache disabling.
- File: For end users leveraging SMB file storage, there have been a few updates that include SMB share policies for client access, SMBv2 disable, and Deep Instinct AV support.
- Host Connectivity: We have enhanced our Host CLI commands and introduced sorting VMFS volumes using Storage Processor ownership.
Serviceability
NTP Stratum Flexibility
NTP Stratum flexibility allows end users to configure a device’s distance to the reference clock with an NTP Stratum value. In UnityOS 5.4, we have implemented a new service (svc_ntp) command to allow an end user to modify the Unity system’s stratum value ranging from 1 – 15. If an end user does have the requirement to adjust the NTP Stratum level from the default of 6 – the system will require a resync with the new NTP Stratum value.
Note: If there is a large time adjustment regarding the NTP stratum values, this modification may cause the Storage Processors to reboot in order to completely sync to NTP.
Password Complexity Requirements
To adhere to the latest federal requirement Office of Management and Budget (OMB) M-22-09 memorandum, UnityOS 5.4 has updated the systems password requirements to the following criteria outlined in the M-22-09 memorandum:
- 8-64 characters in length
- At least 1 uppercase character
- At least 1 lower case character
- At least 1 digit
- No characters from the following set: And ' space tab
- The password must be unique from the previous 3
Note: Special characters are no longer a requirement for Unisphere user or service user passwords but are still allowed.
Secure file upload using SupportAssist
UnityOS 5.4 introduces the highly anticipated Secure file upload feature, which provides users with a new option to transfer specific files back to Dell leveraging SupportAssist/SRS connectivity. In Unisphere, the UI has been updated with a cloud icon that allows users to send Data Collections and Core Dump files back to Dell directly from the system.
A new option of "--sendhome" has been added to the existing service commands of svc_supportassist (physical systems) and svc_esrs_ve (UnityVSA systems only). This new option allows end users to send home unique log files such as TCP network traces or unique log output files directly back to Dell from the Unity system.
Customers leveraging ESRS/SupportAssist functionalities will no longer need to download logs to a local workstation and upload them to a portal. Being able to send files to Dell directly from the system will improve the efficiency of Support receiving the requested logs.
Note: Only uploading 1 file at a time is supported, a secure file upload job will fail if there is a concurrent secure upload operation.
Blocked Thread alert enhancements
In the UnityOS 5.4 release, enhancements have been made around identifying and reporting blocked threads for the NAS server. The system will now report when a blocked thread has been experienced as well as create a dialhome once blocked threads have been experienced for an extended duration. These enhancements will allow for quicker identification and resolution of block thread issues, avoiding further impacts on the user’s file system.
Storage Processor Cache Automatic Disabling
When performing SP maintenance activities such as IO module additions or hardware replacements with Unity systems running the current UnityOS release, Dell recommended disabling the write cache on the system for the safety of the user’s data. Disabling of write cache usually requires a service call to have an authorized Dell service engineer disable the write cache before performing the maintenance activity.
With the UnityOS 5.4 release, the system will now automatically disable write-cache by default when the SP is placed into service mode. This new enhancement allows for service activity to take place without having to require an authorized Dell engineer to disable and enable write-cache.
File
SMB Share Policies
In current UnityOS releases, system administrators can allow/restrict host access to NFS exports in Unisphere using export policies. In UnityOS 5.4, we have introduced SMB share policies in order to have similar feature parity with NFS exports.
To reach feature parity for SMB shares, UnityOS 5.4 has added a new host tab under SMB share properties. The host access tab allows the end user flexibility on how to manage access to their SMB shares through using default access or customized access configurations. Default access defines the default access type for the entire SMB share, while Customized access allows users to define which hosts will have access to the SMB share. Customized host access entries will override the default access type of the share since it is explicitly defined for that specific host.
In UnityOS 5.4, SMB Share policies allow two access types:
- No Access
- Read/Write
Note: Host access can only be configured after initial SMB share creation and only admin/storage admin user roles can perform it.
SMBv2 Disable
With vulnerabilities identified in the SMBv2 dialect, UnityOS 5.4 provides system administrators the ability to disable the SMBv2 dialect at the NAS server level through a service level command.
Utilizing SMBv3 over SMBv2 can provide better authentication, encryption, and performance between the NAS server and client. UnityOS 5.4 not only allows end users to disable SMBv1 but also forces SMBv2 clients to use the more secure dialect of SMBv3.
Below are both command outputs to modify and display the SMBv2 configuration at the NAS server level:
Deep Instinct AV Support
Common Anti-Virus Agent (CAVA) allows AV engines to scan files stored on Unity file systems. CAVA leverages third-party AV software to mitigate known viruses before they infect files on the storage system. Below is a table of the current AV engines and versions supported on the Unity XT platform:
In UnityOS 5.4, we are now supporting Deep Instinct AV software to scan files on the system as part of Unity XT’s CAVA implementation.
Host Connectivity
Host CLI Enhancements
In previous UnityOS releases, if a system administrator wanted to add host access to a storage object using the command line (uemcli) - the user would need to explicitly define each host the storage object is connected to by using the [set] argument.
In UnityOS 5.4 we have added an -add and -remove switches to the [set] argument to be able to incrementally add and remove host access to a storage object. These switches allow the end user to no longer must fully define a set of hosts each time they modify host access using uemcli. This greatly reduces the chances of accidental removal of host access, which may cause access issues.
Below we see a host uemcli command being issued to incrementally add and remove host access to LUN ID: sv_4.
Sorting VMware Datastores using SP ownership
Prior to UnityOS 5.4, system administrators were only able to sort Block LUNs under the Unisphere Block tab for SP ownership. System administrators have found the capability to sort by SP ownership to be beneficial as it aids in troubleshooting and load balancing of the storage appliance.
With customers heavily using Unity’s integration with VMware, UnityOS 5.4 introduces the ability to sort VMware based LUN or VMFS volumes by their SP ownership!
Note: Sorting by SP ownership does not apply to vVol datastores and NFS file systems.
A new column has been added in Unisphere called SP Owner to allow end users to sort, identify, and change SP ownership for VMware VMFS volumes. Also, administrators are now able to change VMFS volumes LUN ownership using the volume’s details card.
Conclusion
This blog has outlined several of the major features of the Dell UnityOS 5.4 release. Check out the Resources section for additional information about its features!