Enhanced Volume Parity Scan

Volume parity scan can now be launched as a background process either via the REST API or via CLI. The resulting parity scan will run in the background as long as is required to complete the scan operation. Scan operations will survive controller reboots and failover operations.

SAML Support for Unified Manager

Unified Manager now supports SAML (Security Assertion Markup Language). Once SAML is enabled for Unified Manager, users must use multi factor authentication against the identity provider in order to interact with the user interface. Note that once SAML is enabled on Unified Manager, the REST API cannot be used without going through the IdP to authenticate requests.

Auto Configuration Feature

Now supports the ability to set the volume block size parameter to use with the Auto Configuration feature for initial array setup. This feature is available in the CLI only as a "blockSize" parameter.

Controller Firmware Cryptographic Signing

Controller firmware is cryptographically signed. Signatures are checked during initial download and at each controller boot. No end user impact expected. Signatures are backed by a CA issued Extended Validation certificate.

Drive Firmware Cryptographic Signing

Drive firmware is cryptographically signed. Signatures are checked during initial download and backed by a CA issued Extended Validation certificate. Drive firmware content is now delivered as a ZIP file, which contains the older non-signed firmware as well as the new signed firmware. The user must chose the appropriate file based on the release version of code that is running on the target system.

External Key Server Management - Certificate Key Size

The new default certificate key size is 3072 bits (from 2048). Key sizes up to 4096 bits are supported. An NVSRAM bit must be changed in order to support the non-default key sizes.

Key size selection values are as follows:

To change key size to 4096 via the SMcli:

set controller[b] globalnvsrambyte[0xc0]=3; set controller[a] globalnvsrambyte[0xc0]=3;

Interrogate the key size:

show allcontrollers globalnvsrambyte[0xc0];

Disk Pool Improvements

Disk pools created with controllers running 11.80 or above will be Version 1 pools as opposed to Version 0 pools. A downgrade operation is restricted when a Version 1 disk pool exists.

The version of a disk pool can be identified in the storage array profile.

System Manager and Unified Manager will not launch unless minimum browser requirements are met

A minimum version of the browser is required before either System Manager or Unified Manager will launch. The following are the minimum supported versions:

Support for FIPS 140-3 NVMe SSD drives

Netapp certified FIPS 140-3 NVMe SSD drives are now supported. They will be correctly identified as such in the storage array profile and in System Manager.

Support for SSD Read cache on EF300 and EF600

SSD Read cache is now supported on EF300 and EF600 controllers using HDD with a SAS expansion.

Support for iSCSI and Fibre Channel asynchronous remote mirroring on EF300 and EF600

Asynchronous remote mirroring (ARVM) is now supported on EF300 and EF600 controllers with NVMe and SAS based volumes.

Support EF300 and EF600 without drives on the base tray

EF300 and EF600 controller configurations without NVMe drives on the base tray is now supported.

USB ports disabled for all platforms

USB ports are now disabled on all platforms.