PCNS 4.4.2 Documentation

[parodi4259]

Hello,

I saw that the new version of the PowerChute Network Shutdown appliance based on AlmaLinux (PCNS 4.4.2) was released last week (https://www.se.com/ww/en/product/SFPCNS442-V/). But there doesn't appear to be any documentation available and all the help files in the appliance itself are dated December 2020. Could someone please provide links to updated documentation or change logs?

If such documentation is not available, the primary questions I have are:

Has PCNS 4.4.2 been updated to work with vSphere/vCenter/ESXi 7.0.3? As in, are the past workarounds for interacting with the cluster vCLS VMs still required, or does PCNS now support the vsan-cluster-power-system.performClusterPowerAction API call for cleaning shutting down a vSAN cluster?

How does 4.4.2 differ from 4.5, which was released back in February?

[IBB]

We're looking for the same information.

[BillP]

I will post the documentation once I have it.

The 4.4.2 interface has not changed.

The major change to PCNS 4.4.2 Virtual Appliance is the move to Alma Linux 8.5 to replace the EOL CentOS 8, in addition to the Log4JShell update and other CVE issues.

When deploying via vCenter you will be asked to provide PowerChute UI username and password along with the username and password for the VM. This is a security change to prevent access prior to the setup wizard being run. I prior versions you would add the PowerChute UI username and password when running the setup wizard. 

If deploying to standalone ESXi host see Schneider Electric FAQ FA296461

Issue address:

Log4J:
[CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228)
Jetty:
[CVE-2021-34428](https://nvd.nist.gov/vuln/detail/CVE-2021-34428)
[CVE-2021-28169](https://nvd.nist.gov/vuln/detail/CVE-2021-28169)
[CVE-2021-28165](https://nvd.nist.gov/vuln/detail/CVE-2021-28165)
[CVE-2020-27223](https://nvd.nist.gov/vuln/detail/CVE-2020-27223)
[CVE-2020-27218](https://nvd.nist.gov/vuln/detail/CVE-2020-27218)
[CVE-2020-27216](https://nvd.nist.gov/vuln/detail/CVE-2020-27216)

Spring Framework
[CVE-2020-5398](https://nvd.nist.gov/vuln/detail/CVE-2020-5398)
[CVE-2020-5421](https://nvd.nist.gov/vuln/detail/CVE-2020-5421)

Commons Compress:
[CVE-2021-36090](https://nvd.nist.gov/vuln/detail/CVE-2021-36090)
[CVE-2021-35517](https://nvd.nist.gov/vuln/detail/CVE-2021-35517)
[CVE-2021-35516](https://nvd.nist.gov/vuln/detail/CVE-2021-35516)
[CVE-2021-35515](https://nvd.nist.gov/vuln/detail/CVE-2021-35515)
[CVE-2019-12402](https://nvd.nist.gov/vuln/detail/CVE-2019-12402)
[CVE-2018-11771](https://nvd.nist.gov/vuln/detail/CVE-2018-11771)

The script are still required for vCLS and PCNS 4.4.2 is compatible with ESXi 7.0.3 and vCenter 7.0.3.