Smart-UPS RT 6000 RM XL spontaneous "System: Configuration change."

[scosby.hsnsudbury.ca_apc]

Our UPS just spontaneously issued a "System: Configuration change." notification.

Why would it do that?

[BillP]

Hi Scott,

"System:" events pertain to the UPS Network Management Card installed into the UPS. This means someone logged in and made a configuration change on the management card somewhere. If you can log in and view the full event log, it may give more context to the notification you received (presumably over email).

If you want me to look at the log, you can attach it here. Instructions to download event.txt are available here, depending on your firmware version -> http://www.apc.com/us/en/faqs/FA156131

Hope that helps.

[scosby.hsnsudbury.ca_apc]

Hi Angela.

(Sorry. I should have been more specific in my original post...)

You can see in the recent log below that there are daily "System: NTP update successful" events; until, yesterday there is the "Configuration change" message, which seems to be associated (same time-stamp) with yesterday's "NTP update successful". No one logged in at that time. The login at 15:39 yesterday is me going in to see what was going on.

In the last 2.5 years on 2 of these devices I have never seen this event.

Can an 'NTP update' trigger a 'Configuration change'?

2016-11-16	15:39:34	System: Web user 'apc' logged in from 10.100.45.181.
2016-11-16	15:22:54	System: NTP update successful.
2016-11-16	15:22:54	System: Configuration change.
2016-11-15	15:22:46	System: NTP update successful.
2016-11-14	15:22:42	System: NTP update successful.
2016-11-13	15:22:39	System: NTP update successful.
2016-11-12	15:22:36	System: NTP update successful.
2016-11-11	15:22:33	System: NTP update successful.
2016-11-11	09:17:13	UPS: Passed a self-test.
2016-11-11	09:16:58	UPS: Started a self-test.

[BillP]

Hi Scott - can you tell me the firmware you're using for AOS/app so I know what system we're working with (NMC1 or 2)? I do think it may be possible but I just don't know the technical reason why yet. And I usually see System: Set date and time if it were the fact that the time was off. Though, depending on your firmware and which NMC it is, maybe it works differently than what I actively use most days (NMC2 v6.X.X firmware).

[scosby.hsnsudbury.ca_apc]

Model:	Smart-UPS RT 6000 RM XL
Position:	RACK
Serial Number:	IS1136000454
Firmware Revision:	452.18.W
Manufacture Date:	08/29/11

[BillP]

Hi Scott - that is for the UPS itself. Sorry I wasn't clear. Can you check under Administration->General->About? I presume it is 5.X.X?

[scosby.hsnsudbury.ca_apc]

Hardware Factory
Model Number:	AP9631
Serial Number:	ZA1135022133
Hardware Revision:	05
Manufacture Date:	08/26/2011
MAC Address:	00 C0 B7 5C A0 70
Management Uptime:	208 Days 8 Hours 31 Minutes

Application Module
Name:	sumx
Version:	v5.1.3
Date:	May 4 2010
Time:	14:06:35

APC OS (AOS)
Name:	aos
Version:	v5.1.3
Date:	May 4 2010
Time:	13:55:26

APC Boot Monitor
Name:	bootmon
Version:	v1.0.1
Date:	Aug 3 2009
Time:	16:30:40

[BillP]

Okay, that is pretty old these days. From what I investigated, it seems like this could be possible but to get a 100% certain answer, I'd have to get someone to see if they can walk through the firmware to see if a configuration change is a possible event. But, because this firmware is so old now, they likely won't appease me and do it unless you upgrade to the latest code and still see it occur. 

I am not sure if you standardize on this older firmware or weren't aware there is a newer version or if you want to proceed.

Let me know if you have any questions. 

[scosby.hsnsudbury.ca_apc]

Thanks, Angela.

I guess it's just a spontaneous notification and that nothing in the configuration has changed that I would be concerned about. I didn't see any changes anyway.

I think we'll just wait and see if it happens again.

Scott

[BillP]

Okay, sounds good. We'll be here if it does.

[scosby.hsnsudbury.ca_apc]

Another spontaneous "System: Configuration change" occurred on Monday (at roughly the same time of day as the last one: 15:31 vs 15:23 - coincidence?).

Immediately following this one, it started issuing "System: NTP Update failure" (every 7 minutes).

I can't even find where the NTP server IP is entered in the Web interface.

[BillP]

Hi Scott - on the blue and white interface, check under Administration->General->Date/Time->mode and you'll see your NTP configuration in there. Are you using an IP or DNS name for that because then maybe we need to do a DNS test and check on that if using a name. But, you'd probably see a DNS error in the log too I imagine. Can't recall on this older firmware.

[scosby.hsnsudbury.ca_apc · Accepted solution]

Hi Angela.

Not sure why I didn't look there. Thanks. Got it sorted now.

I had also tried a reboot (which didn't help). Hopefully that will take care of the spontaneous configuration change messages...

Thanks again. 🙂