Release Notes for Smart-UPS & 1-Phase Symmetra Firmware v3.2

[SwathiNaidu]

Affected Revision Levels

Component	File	Details
Smart-UPS Application	snst_nmc3_su_3-2-0-8..exe	UPS Application for Smart-UPS, Smart-UPS RT, Smart-UPS VT, MGE Galaxy 3500.
Symmetra Application	snst_nmc3_sy_3-2-0-7.exe	UPS Application for 1-Phase Symmetra, Symmetra LX.

To upgrade to firmware version 3.0 or later, the only supported method is the Secure NMC System (SNS) Tool, which can be downloaded from www.apc.com/secure-nmc or by searching for SFNMC3FMTSU. To access the firmware in the software, a valid Secure NMC subscription is required. For more information, see the SNS Tool User Guide.

NOTE: If you upgrade to firmware version 2.0 or later, you cannot downgrade to a firmware version lower than 2.0.

If you downgrade from firmware version 2.4+ to a firmware version lower than 2.4, this will cause the card to be formatted, erasing all security certificates, encryption keys, configuration settings, and the event and data logs.

New Features

New Feature	UPS Family
	Smart-UPS	1-Phase Symmetra
The NMC3 platform and Smart-UPS and 1-Phase Symmetra applications are now IEC 62443-4-2 SL2 certified; a higher level of certification than SL1 announced in October 2023.	♦	♦
Support added for optional Spot Fluid Sensor (NBES0301).		♦
Support added for configuring Universal I/O sensors via the cfguio command on the Command Line Interface (CLI).		♦
Support added for audit logging to ensure that control actions and configuration changes are recorded in the Event Log.		♦
Security Update
Support added for integrity checking of the configuration file.	♦	♦

Fixed Issues

Fixed Issue	UPS Family
	Smart-UPS	1-Phase Symmetra
SSH and Telnet sessions now terminate as expected.	♦	♦
The Web UI now supports the Primary and Secondary DNS fields with a maximum of 40 characters.	♦	♦
An error no longer appears when trying to access certain Web UI pages as a Network-Only user.	♦	♦
NMC no longer reboots when configuring 'Controlled Early Shutdown' parameters from the configuration file.	♦
It is now possible to navigate from the Universal I/O status web page to other web pages.		♦
Security Update
The following security vulnerability has been addressed in this release: CWE-863: Incorrect Authorization The Network-Only user can only perform actions within the Web UI that corresponds to their access level.	♦	♦
The following security vulnerability has been addressed in this release: CWE-20: Improper Input Validation Incoming BACnet packet sizes are now validated.	♦	♦

Known Issues

Known Issue

There is no known issue in this release.

Hash Signatures

Signatures	snst_nmc3_su_3-2-0-8.exe
CRC32	C35FC6F7
CRC64	96D9D206CEB88F5C
SHA-256	CBEB12D026E980DB7431302A467ACEC8C33E622D18ABE7908A71A9B017A618DE
SHA-1	C09CF0C69A1046EC7F15D929599BC536C6DCBB3B
BLAKE2sp	F7EF95B576FB88C4FB8EE5ECD7FE36C03A18BB05EDD1A19BEC49AC0A8B765DBD

Signatures	snst_nmc3_sy_3-2-0-7.exe
CRC32	3B9F46E1
CRC64	7AAD51767A944CF3
SHA-256	B147E22EA874C3B72FC40803C565D07143D1EDAFB8D4030A2F4BEF2BB2A19712
SHA-1	8B84CD15549CE397580335C226F6A8A79C07C045
BLAKE2sp	B2A29546CE1CB5B5D64060F9C8CA915794BB702E3D643E6B81FDDCC70A0F1C83