UCS and Vmware patching

[Bekzod Fakhriddinov]

Hi guys, i have UCSC-C220-m3sbe with VMware esxi 6.0.0 (not cisco bundle) on it. Regarding this bug CSCvg97965 https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg97965, do i need to upgrade BIOS? 

I know I need to install patch on esxi https://kb.vmware.com/s/article/52245 , is there cisco recommended way to install them on UCS ? 

Thank you 

[Kirk J]

Greetings.

You do want to apply the HUU, that includes the BIOS, that has fix for those vulnerabilities.

https://software.cisco.com/download/release.html?mdfid=284296253&softwareid=283850974&release=3.0(4a)&relind=AVAILABLE&rellifecycle=&reltype=latest  See the HUU guide on how to upgrade the firmware.

The UCS platform is agnostic to how you apply your ESXi patches.

Patching time is always a good time to make sure you have application level backups ;)

After applying firmware, please check the Cisco UCS HCL, to make sure your ESXi drivers match.

For those servers you usually want to check the LSI megaraid/MR3 driver, Intel IGB driver, and any other hardware you have present.

Thanks,

Kirk...

[Bekzod Fakhriddinov]

Do u mean I can just download patch from vmware and patch it? I think first I must update with HUU then ESXI , correct?

Also I found out UCS c220 has intel cpu  Xeon E5-2609 processors, and it is in the list of cpu having issues when the speculative execution control is actually used within a virtual machine by a patched OS (KB52345).  And we need to get new microcode from Intel .  Is this all included in that HUU file ?

 Thank you