Release Notes for Smart-UPS Ultra 5-20 kW Firmware v3.4.0.8

[SwathiNaidu]

Affected Revision Levels

Component	File	Details
Smart-UPS Ultra 5-20 kW Application	Windows: snst_nmc3_sucan_3-4-0-8.exe Linux & macOS:  snst_nmc3_sucan_3-4-0-8.tar.gz	UPS Application for Smart-UPS Ultra 5-20 kW.

To upgrade to firmware version 3.0 or later, the only supported method is the Secure NMC System (SNS) Tool, which can be downloaded from www.se.com/secure-nmc or by searching for SFNMC3FMTSUCAN. To access the firmware in the software, a valid Secure NMC subscription is required. For more information, see the SNS Tool User Guide.

If you downgrade from firmware version 2.4+ to a firmware version lower than 2.4, this will cause the card to be formatted, erasing all security certificates, encryption keys, configuration settings, and the event and data logs.

New Features

New Feature	UPS Family
	SRTL Devices	SRYL Devices
Added support for viewing the ARP cache in the Command Line Interface (CLI).	♦	♦
Added support for a user-settable runtime alarm threshold.	♦	♦
Added support for a user-settable load alarm threshold.	♦	♦
Support added for the Customer Experience Improvement Program (CEIP) which allows Schneider Electric to collect anonymous data on how the NMC is used in various customer environments.	♦	♦
The display now allows the user to modify the UPS firmware update setting.		♦
The display now allows the user to complete a UPS firmware update.		♦
The display now shows a UPS firmware update in progress, whether the update was started from a USB flash drive or from another interface (e.g., Web UI).		♦
Security Update
Support added for Multi-Factor Authentication (MFA). MFA adds an additional layer of security to user logins by requiring a one-time password (OTP) sent via email after successful username and password authentication.  NOTE: Ensure the NMC user credentials used for the SNS Tool, EcoStruxure IT and Data Center Expert communications do not have email addresses configured. For more information, see Knowledge Base article FAQ000276382.	♦	♦

Fixed Issues

Fixed Issue	UPS Family
	SRTL Devices	SRYL Devices
Unsuccessful e-mail tests are now displayed as expected in the Web UI.	♦	♦
Styling for the “Password Change Required” web page now displays as expected in the latest update of Chrome.	♦	♦
You can now cancel an initiated firewall test as expected in the Web UI.	♦	♦
CIDR (Classless Inter-Domain Routing) notation is now allowed in SNMP NMS fields and firewall fields (when in subnet mode).	♦	♦
The CIDR notation is now functional in the DNS field and NMP access is now allowed or blocked based on the ranges associated with the network.	♦	♦
DNS lookups previously returned unusable IPv6 addresses in certain scenarios when both IPv4 and IPv6 were enabled (default settings). IPv4 is now prioritized if the NMC has an IPv4 address and only a link-local IPv6 address.	♦	♦
The NMC now uses the correct phrase for switch position on the Service Bypass unit.	♦	♦
The Web UI now shows both revisions for the UPS intelligence modules.	♦
Security Update
The following security vulnerability has been addressed in this release: CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause the device to become unresponsive when malformed SNMP requests are received over the network.	♦	♦
The following security vulnerability has been addressed in this release: CWE-476: NULL Pointer Dereference vulnerability exists that could cause the device to become temporarily inaccessible when receiving malformed IPv4 packets.	♦	♦
The following security vulnerability has been addressed in this release: CWE-613: Insufficient Session Expiration vulnerability exists that could cause a user to maintain access to an existing session when their password has been changed.	♦	♦

Known Issues

Known Issue	UPS Family
	SRTL Devices	SRYL Devices
After updating the NMC’s firmware via a USB flash drive, the USB is not recognized in the display or NMC Web UI.	♦	♦
Some pages in the Web UI help are not updated.	♦	♦
It can take up to 30 minutes to complete a UPS firmware upgrade when using HTTPS. To workaround this, use SCP as an alternative.	♦	♦
When a UPS firmware upgrade is in progress, the upsAdvcontrolFirmwareUpdate SNMP OID incorrectly reports the value as “noFirmwareUpdate” instead of “UpdateinProgress”.	♦	♦
Filtering by time does not work for the Power Event Log.	♦	♦
Entering unsupported commands in the Command Line Interface (CLI) does not return a E102 Parameter error.	♦	♦
You cannot unzip the debug file completely from a USB drive. This issue is seen intermittently.	♦
You are unable to configure upsAdvConfigAlarmRedundancy OID from SNMP interface.		♦
When an internal or external Battery Module is connected or disconnected from its slot, the Event Log entry does not report its serial number.		♦
You cannot make configuration changes via the display when RADIUS is enabled and the User Mode is set to “Authentication Needed”.		♦
The option to cancel or mute a UPS audible alarm is not present in the Web UI.		♦
The ups -s start CLI command is unsuccessful even when the self-test is started correctly.		♦
There is no option to set the language of the display in the NMC Web UI.		♦
You cannot modify the output voltage setting from the SNMP interface if the output is in Manual Bypass.		♦

Secure NMC System (SNS) Tool for Smart-UPS Ultra Hash Signatures

Windows

Signatures	snst_nmc3_sucan_3-4-0-8.exe
CRC32	904DF7BC
CRC64	12C654A7739DDA8C
SHA-256	2210E32074EE71519845AB4A3ABB98A2FC0480AD5EB425FE4C0CBF214155DC17
SHA-1	9CA94EF407C80FCEDF92FA03800823A58AA2624B
BLAKE2sp	91FCA425EE8B94F6D82FB35BA8738D0FA3C2A5A8829682893B96D638434EF3EE

Linux

Signatures	snst_nmc3_sucan_3-4-0-8.tar.gz
CRC32	E104166A
CRC64	868BCABB3DA3DD4C
SHA-256	0BC2E2D6CD19A26963AF4368E0F934B3D0259FB886F7976CB2E1BE6532B68196
SHA-1	CA097FBD47512DFBA82469233B6E8403E73B0336
BLAKE2sp	426CC9676ED76ECAD44F9D1489F8381D82A58ADDFB415E0E1EC11D1C29C7CDBE

macOS

Signatures	snst_nmc3_sucan_3-4-0-8.tar.gz
CRC32	C1BE9168
CRC64	EB947853E4B6332C
SHA-256	40341050B2A9F9FD8C3F3ADB783ABFA99DFD93C1F5AD4EE2EE29F04627D2D90B
SHA-1	DF1C7FCEF14E8A6E3ACB1C5A6057597154A167FD
BLAKE2sp	A3B18BCDD80C67966E2852714AEFC71FCC7C6128CF858D16152A24F4637D5C13