Who Should Install This Hotfix?

This is a hotfix for customers running Citrix Hypervisor 8.2 Cumulative Update 1.

Note: This hotfix is available only to customers on the Customer Success Services program.

Where To Get This Hotfix

Download Citrix Hypervisor 8.2 Cumulative Update 1 hotfixes from the product downloads pages.

Information About this Hotfix

Issues Resolved In This Hotfix

This hotfix resolves the following issues:

• If you attempt to change the host initiator IQN for an iSCSI target that is already connected with a different IQN, the IQN is not changed and the host continues to use the old value to connect to the iSCSI target.
• When creating a PVS Accelerator cache storage by using the API call `PVS_cache_storage.create`, Citrix Hypervisor does not check that a valid host reference has been provided. If a valid host reference has not been provided, the cache storage is created, but is then silently removed soon after creation.
• In a situation where many VMs with attached vGPUs are started at the same time - for example, during a rolling pool upgrade - the VMs can get stuck in a suspended state and fail to start. This fix increases the limit of VMs with vGPU that can start within 30 seconds and thereby reduces the likelihood of the limit being exceeded.
• When installing a certificate on your Citrix Hypervisor server, its private key might be incorrectly rejected. This behavior is caused by overly strict cryptographic checking.
• When a Citrix Hypervisor host attempts to acquire socket licenses but there aren't enough of them available, it acquires all the licenses in the process and does not release them. The host might continue to try other available licenses and become licensed. This can cause discrepancies between the number of available licenses reported by the License Server and those reported by XenCenter.
• Citrix Hypervisor incorrectly shows an expiry date for a perpetual license.

Improvements In This Hotfix

This hotfix contains the following improvements:

• To improve security, we now allow you to close TCP port 80 on the management interface of Citrix Hypervisor hosts. By default, port 80 is still open. If you close it, any external clients that use the XenServer management API must now use HTTPS over port 443 (instead of HTTP over port 80) to connect to XenServer. Note that you cannot migrate a VM from a source pool that does not have this hotfix installed, to a destination pool that does and has port 80 closed. To do so, install this hotfix on the source pool or temporarily reopen port 80 of the destination pool. To close port 80, see the https-only xe CLI command.
• If you have a pool set up with GFS2 SR, you can now change the DNS servers for a host. To change the DNS servers for a host using the xe CLI, see DNS servers.

This hotfix also includes the following previously released hotfixes:

• CTX341967 - Hotfix XS82ECU1004 - For Citrix Hypervisor 8.2 Cumulative Update 1
• CTX463430 - Hotfix XS82ECU1011 - For Citrix Hypervisor 8.2 Cumulative Update 1
• CTX466065 - Hotfix XS82ECU1019 - For Citrix Hypervisor 8.2 Cumulative Update 1
• CTX493666 - Hotfix XS82ECU1027 - For Citrix Hypervisor 8.2 Cumulative Update 1

Installing the Hotfix

Customers should use either XenCenter or the Citrix Hypervisor Command Line Interface (CLI) to apply this hotfix. As with any software update, back up your data before applying this update. Citrix recommends updating all servers within a pool sequentially. Upgrading of servers should be scheduled to minimize the amount of time the pool runs in a "mixed state" where some servers are upgraded and some are not. Running a mixed pool of updated and non-updated servers for general operation is not supported.

Installing the Hotfix by using XenCenter

Choose an Installation Mechanism

There are three mechanisms to install a hotfix:

1. Automated Updates
2. Download update from Citrix
3. Select update or Supplemental pack from disk

The Automated Updates feature is available for Citrix Hypervisor Premium Edition customers, or to those who have access to XenServer through their Citrix Virtual Apps and Desktops entitlement. For information about installing a hotfix using the Automated Updates feature, see the Applying Automated Updates in the Citrix Hypervisor documentation.

For information about installing a hotfix using the Download update from Citrix option, see Applying an Update to a Pool in the Citrix Hypervisor documentation.

The following section contains instructions on option (3) installing a hotfix that you have downloaded to disk:

Follow the on-screen recommendations to resolve any update prechecks that have failed. If you want XenCenter to automatically resolve all failed prechecks, click Resolve All. When the prechecks have been resolved, click Next.

Note: If you click Cancel at this stage, the Install Update wizard reverts the changes and removes the update file from the server.

1. Download the hotfix to a known location on a computer that has XenCenter installed.
2. Unzip the hotfix zip file and extract the .iso file
3. In XenCenter, on the Tools menu, select Install Update. This displays the Install Update wizard.
4. Read the information displayed on the Before You Start page and click Next to start the wizard.
5. Click Browse to locate the iso file, select XS82ECU1033.iso and then click Open.
6. Click Next.
7. Select the pool or servers you wish to apply the hotfix to, and then click Next.
8. The Install Update wizard performs a number of update prechecks, including the space available on the servers, to ensure that the pool is in a valid configuration state. The wizard also checks whether the servers need to be rebooted after the update is applied and displays the result.
9. Choose the Update Mode. Review the information displayed on the screen and select an appropriate mode.
10. Click Install update to proceed with the installation. The Install Update wizard shows the progress of the update, displaying the major operations that XenCenter performs while updating each server in the pool.
11. When the update is applied, click Finish to close the wizard.
12. If you chose to carry out the post-update tasks, do so now.

Installing the Hotfix by using the xe Command Line Interface

1. Download the hotfix file to a known location.
2. Extract the .iso file from the zip.
3. Upload the .iso file to the main server of the pool by entering the following commands:
   (Where -s is the main server's IP address or DNS name.)

   xe -s <server> -u <username> -pw <password> update-upload file-name=<filename>/XS82ECU1033.iso

   Citrix Hypervisor assigns the update file a UUID which this command prints. Note the UUID.

   1ad9a477-82e7-4031-a6ca-63297289038e

4. Apply the update to all servers in the pool, specifying the UUID of the update:

   xe update-pool-apply uuid=1ad9a477-82e7-4031-a6ca-63297289038e

   Alternatively, if you need to update and restart servers in a rolling manner, you can apply the update file to an individual server by running the following:

   xe update-apply host=<server> uuid=1ad9a477-82e7-4031-a6ca-63297289038e

    

5. Verify that the update was applied by using the update-list command.

   xe update-list -s <server> -u root -pw <password> name-label=XS82ECU1033

   If the update is successful, the hosts field contains the UUIDs of the servers to which this update was successfully applied. This should be a complete list of all servers in the pool.
6. The hotfix is applied to all servers in the pool, but it will not take effect until the XAPI service is restarted on all servers. On the console of each server in the pool beginning with the main server, enter the following command to restart the XAPI service:

   xe-toolstack-restart

   Note: When this command is run on the main server of the pool, XenCenter loses connection to the pool. Wait for 30 seconds after losing connection, and then reconnect manually.
7. Use the update-pool-clean command to remove the update files from all servers in the pool. This command frees up space on shared storage and does not uninstall the update.

   xe update-pool-clean uuid=1ad9a477-82e7-4031-a6ca-63297289038e

Hotfix Source

This source code is not necessary for hotfix installation. It is provided to fulfill licensing obligations.

You must be logged in to your Citrix account to download the source code for any modified open source components:

1. Log in to your Citrix account by using the Sign in link (person icon) in the header.
2. After logging in, download the hotfix source from the following link: XS82ECU1033-sources.iso.

Files

Hotfix File

Files Updated

More Information

For more information, see Citrix Hypervisor Documentation.

If you experience any difficulties, contact Citrix Technical Support.