Affected Revision Levels   Component  File Details Smart-UPS Ultra 5-20 kW Application Windows: snst_nmc3_sucan_3-4-0-8.exe Linux & macOS:  snst_nmc3_sucan_3-4-0-8.tar.gz UPS Application for Smart-UPS Ultra 5-20 kW.   To upgrade to firmware version 3.0 or later, the only supported method is the Secure NMC System (SNS) Tool, which can be downloaded from www.se.com/secure-nmc or by searching for SFNMC3FMTSUCAN. To access the firmware in the software, a valid Secure NMC subscription is required. For more information, see the SNS Tool User Guide.   If you downgrade from firmware version 2.4+ to a firmware version lower than 2.4, this will cause the card to be formatted, erasing all security certificates, encryption keys, configuration settings, and the event and data logs.   New Features   New Feature UPS Family SRTL Devices SRYL Devices Added support for viewing the ARP cache in the Command Line Interface (CLI). ♦ ♦ Added support for a user-settable runtime alarm threshold.  ♦ ♦ Added support for a user-settable load alarm threshold.  ♦ ♦ Support added for the Customer Experience Improvement Program (CEIP) which allows Schneider Electric to collect anonymous data on how the NMC is used in various customer environments.  ♦ ♦ The display now allows the user to modify the UPS firmware update setting.    ♦ The display now allows the user to complete a UPS firmware update.    ♦ The display now shows a UPS firmware update in progress, whether the update was started from a USB flash drive or from another interface (e.g., Web UI).   ♦ Security Update Support added for Multi-Factor Authentication (MFA). MFA adds an additional layer of security to user logins by requiring a one-time password (OTP) sent via email after successful username and password authentication.  NOTE: Ensure the NMC user credentials used for the SNS Tool, EcoStruxure IT and Data Center Expert communications do not have email addresses configured. For more information, see Knowledge Base article FAQ000276382. ♦ ♦   Fixed Issues   Fixed Issue UPS Family SRTL Devices SRYL Devices Unsuccessful e-mail tests are now displayed as expected in the Web UI.  ♦ ♦ Styling for the “Password Change Required” web page now displays as expected in the latest update of Chrome.   ♦  ♦ You can now cancel an initiated firewall test as expected in the Web UI.  ♦  ♦ CIDR (Classless Inter-Domain Routing) notation is now allowed in SNMP NMS fields and firewall fields (when in subnet mode).    ♦ ♦ The CIDR notation is now functional in the DNS field and NMP access is now allowed or blocked based on the ranges associated with the network.    ♦ ♦ DNS lookups previously returned unusable IPv6 addresses in certain scenarios when both IPv4 and IPv6 were enabled (default settings). IPv4 is now prioritized if the NMC has an IPv4 address and only a link-local IPv6 address.   ♦ ♦ The NMC now uses the correct phrase for switch position on the Service Bypass unit.   ♦ ♦ The Web UI now shows both revisions for the UPS intelligence modules.   ♦   Security Update The following security vulnerability has been addressed in this release: CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause the device to become unresponsive when malformed SNMP requests are received over the network.  ♦ ♦ The following security vulnerability has been addressed in this release: CWE-476: NULL Pointer Dereference vulnerability exists that could cause the device to become temporarily inaccessible when receiving malformed IPv4 packets. ♦ ♦ The following security vulnerability has been addressed in this release: CWE-613: Insufficient Session Expiration vulnerability exists that could cause a user to maintain access to an existing session when their password has been changed.  ♦ ♦   Known Issues   Known Issue UPS Family SRTL Devices SRYL Devices After updating the NMC’s firmware via a USB flash drive, the USB is not recognized in the display or NMC Web UI. ♦ ♦ Some pages in the Web UI help are not updated. ♦ ♦ It can take up to 30 minutes to complete a UPS firmware upgrade when using HTTPS. To workaround this, use SCP as an alternative. ♦ ♦ When a UPS firmware upgrade is in progress, the upsAdvcontrolFirmwareUpdate SNMP OID incorrectly reports the value as “noFirmwareUpdate” instead of “UpdateinProgress”. ♦ ♦ Filtering by time does not work for the Power Event Log. ♦ ♦ Entering unsupported commands in the Command Line Interface (CLI) does not return a E102 Parameter error. ♦ ♦ You cannot unzip the debug file completely from a USB drive. This issue is seen intermittently. ♦   You are unable to configure upsAdvConfigAlarmRedundancy OID from SNMP interface.   ♦ When an internal or external Battery Module is connected or disconnected from its slot, the Event Log entry does not report its serial number.   ♦ You cannot make configuration changes via the display when RADIUS is enabled and the User Mode is set to “Authentication Needed”.   ♦ The option to cancel or mute a UPS audible alarm is not present in the Web UI.   ♦ The ups -s start CLI command is unsuccessful even when the self-test is started correctly.   ♦ There is no option to set the language of the display in the NMC Web UI.   ♦ You cannot modify the output voltage setting from the SNMP interface if the output is in Manual Bypass.   ♦   Secure NMC System (SNS) Tool for Smart-UPS Ultra Hash Signatures     Windows Signatures snst_nmc3_sucan_3-4-0-8.exe CRC32 904DF7BC CRC64 12C654A7739DDA8C SHA-256 2210E32074EE71519845AB4A3ABB98A2FC0480AD5EB425FE4C0CBF214155DC17 SHA-1 9CA94EF407C80FCEDF92FA03800823A58AA2624B BLAKE2sp 91FCA425EE8B94F6D82FB35BA8738D0FA3C2A5A8829682893B96D638434EF3EE     Linux Signatures snst_nmc3_sucan_3-4-0-8.tar.gz CRC32 E104166A CRC64 868BCABB3DA3DD4C SHA-256 0BC2E2D6CD19A26963AF4368E0F934B3D0259FB886F7976CB2E1BE6532B68196 SHA-1 CA097FBD47512DFBA82469233B6E8403E73B0336 BLAKE2sp 426CC9676ED76ECAD44F9D1489F8381D82A58ADDFB415E0E1EC11D1C29C7CDBE       macOS Signatures snst_nmc3_sucan_3-4-0-8.tar.gz CRC32 C1BE9168 CRC64 EB947853E4B6332C SHA-256 40341050B2A9F9FD8C3F3ADB783ABFA99DFD93C1F5AD4EE2EE29F04627D2D90B SHA-1 DF1C7FCEF14E8A6E3ACB1C5A6057597154A167FD BLAKE2sp A3B18BCDD80C67966E2852714AEFC71FCC7C6128CF858D16152A24F4637D5C13  

Affected Revision Levels   Component  File Details Smart-UPS Ultra 5-20 kW Application apc_hw21_sucan_2-5-4-4.nmc3 UPS Application for Smart-UPS Ultra 5-20 kW.     For details on upgrading the UPS Network Management Card 3 (NMC 3) firmware, see the NMC3 User Guide. NOTE: If you upgrade to firmware version 2.0 or later, you cannot downgrade to a firmware version lower than 2.0   If you downgrade from firmware version 2.4+ or later to a firmware version lower than 2.4, this will cause the card to be formatted, erasing all security certificates, encryption keys, configuration settings, and the event and data logs.   New Features   New Feature There is no new feature in this release.     Fixed Issues   Fixed Issue UPS Family SRTL Devices SRYL Devices DHCPv6 no longer intermittently reboots when the network interface starts or when the Ethernet cable is reseated. ♦ ♦ You can now send emails as expected if the SMTP server uses an IPv6 address. ♦ ♦   Security Update   The following third-party components (open source or proprietary) have been updated to address cybersecurity vulnerabilities: RADIUS Protocol under RFC 2865 - CVE-2024-3596 Implemented support for the Message-Authenticator attribute. ♦ ♦ The following security vulnerability has been addressed in this release: CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input Fixed an improper user input validation. ♦ ♦   Known Issues   Known Issue UPS Family SRTL Devices SRYL Devices After updating the NMC’s firmware via a USB flash drive, the USB is not recognized in the display or NMC Web UI. ♦ ♦ Some pages in the Web UI help are not updated. ♦ ♦ It can take up to 30 minutes to complete a UPS firmware upgrade when using HTTPS. To workaround this, use SCP as an alternative. ♦ ♦ When a UPS firmware upgrade is in progress, the upsAdvcontrolFirmwareUpdate SNMP OID incorrectly reports the value as “noFirmwareUpdate” instead of “UpdateinProgress”. ♦  ♦ Filtering by time does not work for the Power Event Log. ♦  ♦ Entering unsupported commands in the Command Line Interface (CLI) does not return a E102 Parameter error. ♦  ♦ The alarm description is shown incorrectly in DCE for outlet group-related alarms. ♦   You cannot unzip the debug file completely from a USB drive. This issue is seen intermittently. ♦   During the Setup Wizard, when selecting output voltage, the UPS may incorrectly indicate the input voltage present causing a warning on the display that can be dismissed.   ♦ You are unable to configure some OIDs upsAdvConfigAlarmRedundancy, upsAdvConfigHighBypassLLTransferVolt, upsAdvConfigLowBypassLLTransferVolt from SNMP interface.   ♦ Only alphanumeric passwords are supported for new users created in the NMC for access to the display.   ♦ When an internal or external Battery Module is connected or disconnected from its slot, the Event Log entry does not report its serial number.   ♦ You cannot make configuration changes via the display when RADIUS is enabled and the User Mode is set to “Authentication Needed”.   ♦ The option to cancel or mute a UPS audible alarm is not present in the Web UI.   ♦ The ups -s start CLI command is unsuccessful even when the self-test is started correctly.   ♦ There is no option to set the language of the display in the NMC Web UI.   ♦ There is no option in the Web UI or the display to cancel a UPS audible alarm test. It is not recommended to initiate a continuous alarm as the only way to stop the UPS beeping is to turn off the UPS.   ♦ You cannot modify the output voltage setting from the SNMP interface if the output is in Manual Bypass.   ♦ The “Minimum Redundancy lost" event is not displayed in PowerChute Network Shutdown although it is supported by the NMC. If this event occurs, the server will not shutdown.   ♦   Hash Signatures   Signatures apc_hw21_sucan_2-5-4-4.exe CRC32 838F7712 CRC64 F48DC5D0BD7DC82A SHA-256 29FF03055F8294FF1FAF1C3DC75AC5F32397400DD1B4CC04218FE52231F2C924 SHA-1 2276991CA327CDF3324D2F3EA3535BD5529B390F BLAKE2sp 495827C7120FFA7E6D4C49EA2677417A60BEEB108A537A6AF57AFC2B0EBD88CE

Affected Revision Levels   Component  File Details Smart-UPS Ultra 5-20 kW Application Windows: snst_nmc3_sucan_3-3-0-8.exe Linux & macOS:  snst_nmc3_sucan_3-3-0-8.tar.gz UPS Application for Smart-UPS Ultra 5-20 kW.   To upgrade to firmware version 3.0 or later, the only supported method is the Secure NMC System (SNS) Tool, which can be downloaded from www.se.com/secure-nmc or by searching for SFNMC3FMTSUCAN. To access the firmware in the software, a valid Secure NMC subscription is required. For more information, see the SNS Tool User Guide.   If you downgrade from firmware version 2.4+ to a firmware version lower than 2.4, this will cause the card to be formatted, erasing all security certificates, encryption keys, configuration settings, and the event and data logs.   New Features   New Feature UPS Family SRTL Devices SRYL Devices Command Line Interface (CLI) added to the Web UI under Control > Network > Web CLI. ♦ ♦ IPv6 functionality is improved. ♦ ♦ Added support for smart Service Bypass Unit.   ♦ The display now fully supports the lights/beeper test.   ♦ Added display support for Efficiency Test Mode.   ♦   Fixed Issues   Fixed Issue UPS Family SRTL Devices SRYL Devices The LDAP TLS connection now works as expected when connecting to an IP address and server certificate using SAN type "iPAddress". ♦ ♦ DHCPv6 no longer intermittently reboots when the network interface starts or when the Ethernet cable is reseated. ♦  ♦ Improved logging for account disabled events. ♦  ♦ The expiration date of self-signed certificates has been updated.  ♦ ♦ You can now send emails as expected if the SMTP server uses an IPv6 address.  ♦ ♦ The severity of Syslog-related events in the configuration file has been corrected.  ♦ ♦ The NMC now supports the latest set of UPS alarms with the correct severity and improved alarm messages.  ♦ ♦ The alarm description is now shown correctly in DCE for outlet group-related alarms.  ♦   Security Update The following third-party components (open source or proprietary) have been updated to address cybersecurity vulnerabilities: RADIUS Protocol under RFC 2865 - CVE-2024-3596 Implemented support for the Message-Authenticator attribute. ♦ ♦ The following security vulnerability has been addressed in this release: CWE-1285: Improper Validation of Specified Index, Position, or Offset in Input Fixed an improper user input validation. ♦ ♦   Known Issues   Known Issue UPS Family SRTL Devices SRYL Devices After updating the NMC’s firmware via a USB flash drive, the USB is not recognized in the display or NMC Web UI. ♦ ♦ Some pages in the Web UI help are not updated. ♦ ♦ It can take up to 30 minutes to complete a UPS firmware upgrade when using HTTPS. To workaround this, use SCP as an alternative. ♦ ♦ When a UPS firmware upgrade is in progress, the upsAdvcontrolFirmwareUpdate SNMP OID incorrectly reports the value as “noFirmwareUpdate” instead of “UpdateinProgress”. ♦ ♦ Filtering by time does not work for the Power Event Log. ♦ ♦ Entering unsupported commands in the Command Line Interface (CLI) does not return a E102 Parameter error. ♦ ♦ You cannot unzip the debug file completely from a USB drive. This issue is seen intermittently. ♦   You are unable to configure upsAdvConfigAlarmRedundancy OID from SNMP interface.   ♦ When an internal or external Battery Module is connected or disconnected from its slot, the Event Log entry does not report its serial number.   ♦ You cannot make configuration changes via the display when RADIUS is enabled and the User Mode is set to “Authentication Needed”.   ♦ The option to cancel or mute a UPS audible alarm is not present in the Web UI.   ♦ The ups -s start CLI command is unsuccessful even when the self-test is started correctly.   ♦ There is no option to set the language of the display in the NMC Web UI.   ♦ You cannot modify the output voltage setting from the SNMP interface if the output is in Manual Bypass.   ♦     Secure NMC System (SNS) Tool for Smart-UPS Ultra Hash Signatures   Windows Signatures snst_nmc3_sucan_3-3-0-8.exe CRC32 2287D7E8 CRC64 BD2BB46FE19880C7 SHA-256 784095DFECA1F011FBDC4AACF97D3EE311FEC20AD3794BD37597514248871E2D SHA-1 95956FDC1D54E5A4161197D192362AE00F8542A5 BLAKE2sp A7D04B3AE3432AA17751FDF8B785706692D993CBDCC27BEA775187610CADE644     Linux Signatures snst_nmc3_sucan_3-3-0-8.tar.gz CRC32 DE3EAC04 CRC64 8A680C99FFFE53BE SHA-256 7B3A42CC0E67C5C5E24B36CC65CD97F8823484DA07EFDBDCA269136E7787179C SHA-1 52E868554F1200179BC907A7CE68B6B6C9739C33 BLAKE2sp C70D6540D9B60E833A8E6D77036C75C50A97CF7804F6A0EF5A02068A219E6A02       macOS Signatures snst_nmc3_sucan_3-3-0-8.tar.gz CRC32 428EB57D CRC64 ABBA1AA4129247E0 SHA-256 A6A4DC96FCAB00B967B9906392E5237F798D84E0427EBBF84CBA1ED35F6D62FD SHA-1 83ACC8A455C6922C217B54D42E1720CA9F6ABF81 BLAKE2sp F6818C9DB6FA17D2D70AD9ECFC6A489F289D8E7A684482272B8E22E74E54E0FD  

Affected Revision Levels   Component  File Details Smart-UPS Ultra 5-20 kW Application apc_hw21_sucan_2-5-3-2.nmc3 UPS Application for Smart-UPS Ultra 5-20 kW.     For details on upgrading the UPS Network Management Card 3 (NMC 3) firmware, see the NMC3 User Guide. NOTE: If you upgrade to firmware version 2.0 or later, you cannot downgrade to a firmware version lower than 2.0   If you downgrade from firmware version 2.4+ or later to a firmware version lower than 2.4, this will cause the card to be formatted, erasing all security certificates, encryption keys, configuration settings, and the event and data logs.   New Features   New Feature There is no new feature in this release.     Fixed Issues   Fixed Issue UPS Family SRTL Devices SRYL Devices Downloading the Event Log via the Web UI works as expected when the language is set to Japanese. ♦ ♦ The correct On Battery status message will now appear on the Web UI Home page for Japanese. ♦ ♦ The NMC will now allow UPS firmware updates when there is no network cable connected. ♦     Security Update   The following security vulnerability has been addressed in this release: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor SSH Cipher Block Chaining (CBC) cipher has been removed. ♦ ♦ The following security vulnerabilities have been addressed in this release: CWE-523: Unprotected Transport of Credentials. Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server. CWE-319: Cleartext Transmission of Sensitive Information. The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The user is now referenced as an index rather than their username, for example: NMC/KrtUvuh39YtQmHbyua297g/usercfg.htm?user=2 ♦ ♦ The following security vulnerability has been addressed in this release:   CWE-863: Incorrect Authorization The Network-Only user can only perform actions in the Web UI relevant to the user access level. ♦ ♦ The following security vulnerability has been addressed in this release: CWE-598: Use of GET Request Method With Sensitive Query Strings. This software uses the HTTP GET method to process a request and includes sensitive information in the query string of that request. Configuration of HSTS is now independent from HTTP or HTTPS configuration. When HSTS is enabled an STS header is added to all responses over HTTPS. ♦ ♦   Known Issues   Known Issue UPS Family SRTL Devices SRYL Devices After updating the NMC’s firmware via a USB flash drive, the USB is not recognized in the display or NMC Web UI. ♦ ♦ Some pages in the Web UI help are not updated. ♦ ♦ It can take up to 30 minutes to complete a UPS firmware upgrade when using HTTPS. To workaround this, use SCP as an alternative. ♦ ♦ The alarm description is shown incorrectly in DCE for outlet group-related alarms. ♦   You cannot unzip the debug file completely from a USB drive. This issue is seen intermittently. ♦   When a UPS firmware upgrade is in progress, the upsAdvcontrolFirmwareUpdate SNMP OID incorrectly reports the value as “noFirmwareUpdate” instead of “UpdateinProgress”. ♦   Filtering by time does not work for the Power Event Log. ♦   Entering unsupported commands in the Command Line Interface (CLI) does not return a E102 Parameter error. ♦   During the Setup Wizard, when selecting output voltage, the UPS may incorrectly indicate the input voltage present causing a warning on the display that can be dismissed.   ♦ You are unable to configure some OIDs upsAdvConfigAlarmRedundancy, upsAdvConfigHighBypassLLTransferVolt, upsAdvConfigLowBypassLLTransferVolt from SNMP interface.   ♦ Only alphanumeric passwords are supported for new users created in the NMC for access to the display.   ♦ When an internal or external Battery Module is connected or disconnected from its slot, the Event Log entry does not report its serial number.   ♦ You cannot make configuration changes via the display when RADIUS is enabled and the User Mode is set to “Authentication Needed”.   ♦ The option to cancel or mute a UPS audible alarm is not present in the Web UI.   ♦ The ups -s start CLI command is unsuccessful even when the self-test is started correctly.   ♦ There is no option to set the language of the display in the NMC Web UI.   ♦ There is no option in the Web UI or the display to cancel a UPS audible alarm test. It is not recommended to initiate a continuous alarm as the only way to stop the UPS beeping is to turn off the UPS.   ♦ You cannot modify the output voltage setting from the SNMP interface if the output is in Manual Bypass.   ♦ The “Minimum Redundancy lost" event is not displayed in PowerChute Network Shutdown although it is supported by the NMC. If this event occurs, the server will not shutdown.   ♦   Hash Signatures   Signatures apc_hw21_sucan_2-5-3-2.exe CRC32 2E54EC39 CRC64 98A219688D9AB53A SHA-256 AAEB1AAA993268CE20CB6E4F0CC42194D641D4DE399D418681208634B2F65B76 SHA-1 C581949A3BF58B6ED2284C95F44283095F2C40B7 BLAKE2sp F8D9C2D3E1154AB7EB69825E95C9FF5B133D16EFA7E991325635C5B09C674E6E

Affected Revision Levels   Component  File Details Smart-UPS Ultra 5-20kW Application snst_nmc3_sucan_3-1-1-2-v2.exe UPS Application for Smart-UPS Ultra 5-20 kW.     To upgrade to firmware version 3.0 or later, the only supported method is the Secure NMC System (SNS) Tool, which can be downloaded from www.apc.com/secure-nmc or by searching for SFNMC3FMTSUCAN. To access the firmware in the software, a valid Secure NMC subscription is required. For more information, see the SNS Tool User Guide.   If you downgrade from firmware version 2.4+ to a firmware version lower than 2.4, this will cause the card to be formatted, erasing all security certificates, encryption keys, configuration settings, and the event and data logs.   New Features   New Feature UPS Family SRTL Devices SRYL Devices Support added for user authentication via Lightweight Directory Access Protocol (LDAP). ♦  ♦ Support added for baud rate 115,200 on the Console connection on Universal I/O port. ♦ ♦ Support added for optional Spot Fluid Sensor (NBES0301). ♦ ♦ Support added for configuring Universal I/O sensors via the cfguio command on the Command Line Interface (CLI). ♦ ♦ Security Updates Support added for TLS 1.3. ♦ ♦ Support added for SNMPv3 encryption via the SHA-256 and AES-256 protocols. ♦ ♦   Fixed Issues   Fixed Issue UPS Family SRTL Devices SRYL Devices The UPS service log properly updates under all conditions now. ♦ ♦ Dates in SNMP, such as upsAdvIdentDateOfManufacture, are now available in the correct format, mm/dd/yyyy. ♦  ♦ The NMC now supports the latest set of UPS alarms with the correct severity and improved alarm messages.  ♦ ♦ Corrected SNMP OID upsAdvBatteryNumOfBattPacks to provide the total number of battery packs connected both internally and externally.  ♦ ♦ Corrected SNMP OID upsAdvOutputKVACapacity to show full kVA capacity.   ♦ Security Update The following security vulnerability has been addressed in this release: CWE-327: Use of a Broken or Risky Cryptographic Algorithm. This software uses a broken or risky cryptographic algorithm or protocol. Removed support in SSH for diffie-hellman-group14-sha1. ♦ ♦ The following security vulnerability has been addressed in this release: CWE-598: Use of GET Request Method with Sensitive Query Strings. This software uses the HTTP GET method to process a request and includes sensitive information in the query string of that request. Configuration of HSTS is now independent from HTTP or HTTPS configuration. When HSTS is enabled, an STS header is added to all responses over HTTPS. ♦ ♦ The following security vulnerability has been addressed in this release: CWE-307: Improper Restriction of Excessive Authentication Attempts. This software does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks. The account now gets locked after bad login attempts. ♦ ♦ The following security vulnerabilities have been addressed in this release: CWE-523: Unprotected Transport of Credentials. Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server. CWE-319: Cleartext Transmission of Sensitive Information. The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. The user is now referred as an index rather than the user name NMC/KrtUvuh39YtQmHbyua297g/usercfg.htm?user=2. ♦ ♦ The following security vulnerability has been addressed in this release: CWE-200: Exposure of Sensitive Information to An Unauthorized Actor SSH Cipher Block Chaining (CBC) cipher has been removed. ♦ ♦     Known Issues   Known Issue UPS Family SRTL Devices SRYL Devices After updating the NMC’s firmware via a USB flash drive, the USB is not recognized in the display or NMC Web UI. ♦ ♦ Some pages in the Web UI help are not updated. ♦ ♦ It can take up to 30 minutes to complete a UPS firmware upgrade when using HTTPS. To work around this, use SCP as an alternative. ♦ ♦ The alarm description is shown incorrectly in DCE for outlet group-related alarms. ♦   You cannot unzip the debug file completely from a USB drive. This issue is seen intermittently. ♦   When a UPS firmware upgrade is in progress, the upsAdvcontrolFirmwareUpdate SNMP OID incorrectly reports the value as “noFirmwareUpdate” instead of “UpdateinProgress”. ♦   Filtering by time does not work for the Power Event Log. ♦   Entering unsupported commands in the Command Line Interface (CLI) does not return a E102 Parameter error. ♦   You are unable to configure upsAdvConfigAlarmRedundancy OID from SNMP interface.   ♦ Only alphanumeric passwords are supported for new users created in the NMC for access to the display.   ♦ When an internal or external Battery Module is connected or disconnected from its slot, the Event Log entry does not report its serial number.   ♦ You cannot make configuration changes via the display when RADIUS is enabled, and the User Mode is set to “Authentication Needed”.   ♦ The option to cancel or mute a UPS audible alarm is not present in the Web UI.   ♦ The ups -s start CLI command is unsuccessful even when the self-test is started correctly.   ♦ There is no option to set the language of the display in the NMC Web UI.   ♦ There is no option in the Web UI or the display to cancel a UPS audible alarm test. It is not recommended to initiate a continuous alarm as the only way to stop the UPS beeping is to turn off the UPS.   ♦ You cannot modify the output voltage setting from the SNMP interface if the output is in Manual Bypass.   ♦ The “Minimum Redundancy lost" event is not displayed in PowerChute Network Shutdown although it is supported by the NMC. If this event occurs, the server will not shutdown.   ♦     Secure NMC System (SNS) Tool for Smart-UPS Ultra Hash Signatures   Signatures snst_nmc3_sucan_3-1-1-2-v2.exe CRC32 22F985A0 CRC64 14B71ADA7FE83BA8 SHA-256 A8770D88C053EACE4C5805572450D2A400FB461A2C801590E1113CD9B71B5F0B SHA-1 B2B5226F3FBD52AA73E53CD94B95C115DE8B233D BLAKE2sp 234B23C744C565EB89874A51118AA5AB2088C56897F634CFFF4FB878B8C92CDF

Affected Revision Levels   Component  File Details Smart-UPS Ultra 5-20 kW Application apc_hw21_sucan_3-2-0-5.nmc3 UPS Application for Smart-UPS Ultra 5-20 kW.   To upgrade to firmware version 3.0 or later, the only supported method is the Secure NMC System (SNS) Tool, which can be downloaded from www.apc.com/secure-nmc or by searching for SFNMC3FMTSUCAN. To access the firmware in the software, a valid Secure NMC subscription is required. For more information, see the SNS Tool User Guide.   If you downgrade from firmware version 2.4+ to a firmware version lower than 2.4, this will cause the card to be formatted, erasing all security certificates, encryption keys, configuration settings, and the event and data logs.   New Features   New Feature UPS Family SRTL Devices SRYL Devices The NMC3 platform and Smart-UPS Ultra 5-20 kW application are now IEC 62443-4-2 SL2 certified; a higher level of certification than SL1 announced in October 2023. ♦ ♦ Support added for Modbus TCP/RTU. ♦ ♦ Added support for UPS firmware update with output on (when supported by the UPS).   ♦ Security Update Support added for integrity checking of the configuration file. ♦ ♦   Fixed Issues   Fixed Issue UPS Family SRTL Devices SRYL Devices SSH and Telnet sessions now terminate as expected. ♦ ♦ The Web UI now supports the Primary and Secondary DNS fields with a maximum of 40 characters. ♦  ♦ An error no longer appears when trying to access certain Web UI pages as a Network-Only user. ♦  ♦ The NMC now supports the latest set of UPS alarms with the correct severity and improved alarm messages.  ♦ ♦ All intelligence module alarms will now properly indicate the location of the relevant module.   ♦ The access control for USB thumb drive operations is now properly implemented on the display.   ♦ Access to the NMC logs on the display now requires authentication.   ♦ PowerChute Network Shutdown now supports the “Minimum Redundancy Lost” alarm properly.   ♦ Passwords are no longer limited to alphanumeric characters for new users created in the NMC for access to the display.   ♦ Security Update The following security vulnerability has been addressed in this release: CWE-863: Incorrect Authorization The Network-Only user can only perform actions within the Web UI that corresponds to their access level. ♦ ♦   Known Issues   Known Issue UPS Family SRTL Devices SRYL Devices After updating the NMC’s firmware via a USB flash drive, the USB is not recognized in the display or NMC Web UI. ♦ ♦ Some pages in the Web UI help are not updated. ♦ ♦ It can take up to 30 minutes to complete a UPS firmware upgrade when using HTTPS. To workaround this, use SCP as an alternative. ♦ ♦ The alarm description is shown incorrectly in DCE for outlet group-related alarms. ♦   You cannot unzip the debug file completely from a USB drive. This issue is seen intermittently. ♦   When a UPS firmware upgrade is in progress, the upsAdvcontrolFirmwareUpdate SNMP OID incorrectly reports the value as “noFirmwareUpdate” instead of “UpdateinProgress”. ♦   Filtering by time does not work for the Power Event Log. ♦   Entering unsupported commands in the Command Line Interface (CLI) does not return a E102 Parameter error. ♦   You are unable to configure upsAdvConfigAlarmRedundancy OID from SNMP interface.   ♦ When an internal or external Battery Module is connected or disconnected from its slot, the Event Log entry does not report its serial number.   ♦ You cannot make configuration changes via the display when RADIUS is enabled and the User Mode is set to “Authentication Needed”.   ♦ The option to cancel or mute a UPS audible alarm is not present in the Web UI.   ♦ The ups -s start CLI command is unsuccessful even when the self-test is started correctly.   ♦ There is no option to set the language of the display in the NMC Web UI.   ♦ There is no option in the Web UI or the display to cancel a UPS audible alarm test. It is not recommended to initiate a continuous alarm as the only way to stop the UPS beeping is to turn off the UPS.   ♦ You cannot modify the output voltage setting from the SNMP interface if the output is in Manual Bypass.   ♦     Secure NMC System (SNS) Tool for Smart-UPS Ultra Hash Signatures   Signatures snst_nmc3_sucan_3-2-0-5.exe CRC32 0EB6A3D7 CRC64 C63E80CF360A1131 SHA-256 FBDA1207E4FD0EC64A4534463ED13A500297A073507A698ED30060DD7C92A1EA SHA-1 5E5E64AAEE0FAF13DBFC6CFA63B2B0E7DD016D66 BLAKE2sp 63DCF305F24D46236F8619230043E1A62E9BD75FD9D0433976F3A116652B042E

Affected Revision Levels   Component  File Details Smart-UPS Ultra Application apc_hw21_sucan_3-0-1-4.nmc3 UPS Application for Smart-UPS Ultra 5-20 kW.   For details on upgrading the UPS Network Management Card 3 (NMC 3) firmware, see the NMC3 User Guide.   New Features   New Feature UPS Family SRTL Devices SRYL Devices The NMC3 platform and Smart-UPS Ultra 5-20kW application are now IEC 62443-4-2 certified. ♦  ♦ Support added for audit logging to ensure control actions and configuration changes are recorded in the Event Log. ♦ ♦ Support added for remote authentication via the TACACS+ protocol. ♦ ♦ Security Update Password security has been updated to align with the requirements for IEC 62443-4-2. By default, passwords now need to be a minimum of 8 characters in length (strong password setting enabled). ♦ ♦     Fixed Issues   Fixed Issue UPS Family SRTL Devices SRYL Devices The NMC3 Web UI now allows passwords with up to 64 characters, as expected. ♦ ♦ For encrypted email settings, install CA certificate to the certificate store and set Require CA Root Certificate correctly. ♦ ♦ Improved TLS certificate for email. ♦ ♦ The NMC3 Web UI now allows the Battery Install date setting and other general UPS settings. ♦ ♦ The correct On Battery status message will now appear on the Web UI Home page for Japanese. ♦ ♦ The NMC now supports the latest set of UPS alarms with the correct severity and improved alarm messages. ♦ ♦ Partially written files can now be recovered after a system reset event. ♦ ♦ The Power Module Fault now appears correctly on the SNMP interface.   ♦ Improved Japanese translations for the display.   ♦ Able to set the OIDs upsAdvConfigHighBypassLLTransferVolt upsAdvConfigLowBypassLLTransferVolt from SNMP interface.   ♦ Security Update The following security vulnerabilities have been addressed in this release: CWE-74: Improper neutralization of special elements in output used by a downstream component (Injection). CWE-79: Improper neutralization of input during web page generation (Cross-site Scripting). ♦ ♦     Known Issues   Known Issue UPS Family SRTL Devices SRYL Devices After updating the NMC’s firmware via a USB flash drive, the USB is not recognized in the display or NMC Web UI. ♦ ♦ Some pages in the Web UI help are not updated. ♦ ♦ It can take up to 30 minutes to complete a UPS firmware upgrade when using HTTPS. To workaround this, use SCP as an alternative. ♦ ♦ The alarm description is shown incorrectly in DCE for outlet group-related alarms. ♦   You cannot unzip the debug file completely from a USB drive. This issue is seen intermittently. ♦   When a UPS firmware upgrade is in progress, the upsAdvcontrolFirmwareUpdate SNMP OID incorrectly reports the value as “noFirmwareUpdate” instead of “UpdateinProgress”. ♦   Filtering by time does not work for the Power Event Log. ♦   Entering unsupported commands in the Command Line Interface (CLI) does not return a E102 Parameter error. ♦   You are unable to configure upsAdvConfigAlarmRedundancy OID from SNMP interface.   ♦ Only alphanumeric passwords are supported for new users created in the NMC for access to the display.   ♦ When an internal or external Battery Module is connected or disconnected from its slot, the Event Log entry does not report its serial number.   ♦ You cannot make configuration changes via the display when RADIUS is enabled and the User Mode is set to “Authentication Needed”.   ♦ The option to cancel or mute a UPS audible alarm is not present in the Web UI.   ♦ The ups -s start CLI command is unsuccessful even when the self-test is started correctly.   ♦ There is no option to set the language of the display in the NMC Web UI.   ♦ There is no option in the Web UI or the display to cancel a UPS audible alarm test. It is not recommended to initiate a continuous alarm as the only way to stop the UPS beeping is to turn off the UPS.   ♦ You cannot modify the output voltage setting from the SNMP interface if the output is in Manual Bypass.   ♦ The “Minimum Redundancy lost" event is not displayed in PowerChute Network Shutdown although it is supported by the NMC. If this event occurs, the server will not shutdown.   ♦     Secure NMC System (SNS) Tool for Smart-UPS Ultra Hash Signatures   Signatures snst_nmc3_sucan_3-0-1-4-v2.exe CRC32 B912E432 CRC64 80C0307FA16E865B SHA-256 DC256451913BE8FA1DCD63E3205DBEA012D83C4FA82E5610BEE2864F3CBD4C61 SHA-1 B03DB85215D2500EE3C71FB48714259557AD3173 BLAKE2sp A49568C6AA16E7BFDBD9E99F6FF9123AE5532FFB8D4304B2223631801ABA2C79

Affected Revision Levels   Component  File Details Smart-UPS Ultra Application apc_hw21_sucan_2-5-1-3.nmc3 UPS Application for Smart-UPS Ultra 5-20 kW.   For details on upgrading the UPS Network Management Card 3 (NMC 3) firmware, see the NMC3 User Guide.   New Features   New Feature UPS Family SRTL Devices SRYL Devices Support added for Dell VxRail. ♦  ♦ Support added for new Smart-UPS Ultra devices SRTL8KRM4UI and SRTL10KRM4UI, both devices have Switched Outlet Groups.  ♦ ♦ Display screen improvements. See the Fixed Issues section for more details.   ♦ Support added for Smart-UPS Modular Ultra devices SRYL13KRMM and SRYL18KRMM.   ♦ The NMC now supports UPS firmware updates while the UPS is in Manual Bypass mode.   ♦ The system now allows the setting of Output Voltage when the output is in Manual Bypass.   ♦   Fixed Issues   Fixed Issue UPS Family SRTL Devices SRYL Devices The data log values were updated for kW and kVA. ♦ ♦ You can now set the Output Frequency Slew Rate from the Web UI. ♦ ♦ Always acceptable and Never acceptable options were added in SNMP to the upsAdvConfigBypassPhaseLockRequired OID. ♦ ♦ The location of internal battery modules are now also displayed in the Web UI. ♦ ♦ UPS firmware upgrades work as expected if initiated via the NMC in the SmartSlot. ♦ ♦ The UPS Event Log now displays battery frame information when battery modules are removed or installed. ♦ ♦ The NMC now supports the latest set of UPS alarms with the correct severity. ♦ ♦ The default baud rate was changed to 9600 for UIO serial port communication. ♦   The NMC no longer reports lost communications for 30-50 seconds. ♦   The Power Module Fault message now includes the faulted power module location.   ♦ The NMC and its display will now reboot after performing ‘Reset all Exclude TCP/IP’.   ♦ After setting the IP address manually via the display, the NMC and its display now reboots automatically as expected.   ♦ The UPS status is now correctly shown in the display when the UPS is in Software Bypass and Temporary Bypass modes.   ♦ When the UPS is in Error condition, the UPS status now correctly reports the Error state on the display.   ♦ Saving the Debug Log on a USB drive will now provide the full set of files as expected.   ♦ Line-to-Line output voltage is now reported in the NMC data log.   ♦ The reported load percentage on the display’s home screens is no longer dependent on the redundancy setting and always uses the N+0 value.   ♦ When the display access is disabled, the user cannot log in on the display.   ♦ The Status > UPS > Output screen on the display has been updated to always show the percent power values at N+0 regardless of the redundancy setting.   ♦ The minimum to maximum range data has been removed from the display configuration screens.   ♦ When the UPS is off without an error condition, the display will now show ‘Output Off’ as expected.   ♦ The Status > UPS > Overview screen on the display is now redesigned for localization support.   ♦ On the display, the USB menu will now show as expected after disconnecting and reconnecting the USB drive.   ♦ Following a successful UPS firmware upgrade via a USB drive, USB-related options under the Configuration > USB screen are now available in the display.   ♦ The CLI now allows you to change the redundancy alarm setting via cfgpower -red command.   ♦   Known Issues   Known Issue UPS Family SRTL Devices SRYL Devices After updating the NMC’s firmware via a USB flash drive, the USB is not recognized in the display or NMC Web UI. ♦ ♦ Some pages in the Web UI help are not updated. ♦ ♦ It can take up to 30 minutes to complete a UPS firmware upgrade when using HTTPS. To workaround this, use SCP as an alternative. ♦ ♦ The alarm description is shown incorrectly in DCE for outlet group-related alarms. ♦   You cannot unzip the debug file completely from a USB drive. This issue is seen intermittently. ♦   When a UPS firmware upgrade is in progress, the upsAdvcontrolFirmwareUpdate SNMP OID incorrectly reports the value as “noFirmwareUpdate” instead of “UpdateinProgress”. ♦   Filtering by time does not work for the Power Event Log. ♦   Entering unsupported commands in the Command Line Interface (CLI) does not return a E102 Parameter error. ♦   You are unable to configure some OIDs upsAdvConfigAlarmRedundancy, upsAdvConfigHighBypassLLTransferVolt, upsAdvConfigLowBypassLLTransferVolt from SNMP interface.   ♦ Only alphanumeric passwords are supported for new users created in the NMC for access to the display.   ♦ When an internal or external Battery Module is connected or disconnected from its slot, the Event Log entry does not report its serial number.   ♦ You cannot make configuration changes via the display when RADIUS is enabled and the User Mode is set to “Authentication Needed”.   ♦ The option to cancel or mute a UPS audible alarm is not present in the Web UI.   ♦ The ups -s start CLI command is unsuccessful even when the self-test is started correctly.   ♦ There is no option to set the language of the display in the NMC Web UI.   ♦ There is no option in the Web UI or the display to cancel a UPS audible alarm test. It is not recommended to initiate a continuous alarm as the only way to stop the UPS beeping is to turn off the UPS.   ♦ You cannot modify the output voltage setting from the SNMP interface if the output is in Manual Bypass.   ♦ The “Minimum Redundancy lost" event is not displayed in PowerChute Network Shutdown although it is supported by the NMC. If this event occurs, the server will not shutdown.   ♦   Hash Signatures   Signatures apc_hw21_sucan_2-5-1-3.exe CRC32 2B309B2E CRC64 DF6A37B237A23FC4 SHA-256 0E6A13148CBD3EF5C860A7FA11713B3BB3416B0FF0DD8F59E613ACEC0D2A4FFB SHA-1 C54FA1BA2349383C3FB9FABBEE752C534804F868 BLAKE2sp 98F421FE6BF7823CA77518E42E557E84EA3D0F97DAEBFB74AFA8E7882237CCFA