Increased key size length of new self-signed and CA-signed management certificates.

The management certificate key size length for SANtricity System Manager and Unified Manager applications self-signed certificate have been modified from 2048 to 3072 bits. The change applies to newly generated self-signed and CA-signed certificates from the SANtricity applications. The key length is fixed and is not affected by the default key size definitions in NVSRAM.

-identifyDevices parameter

A new -identifyDevices parameter is now available in the SMcli. This new parameter allows you to look for all SCSI native block devices that are associated with your Storage Arrays. For more information, see Downloadable SMcli command line parameters.

Ethernet Kernel Statistics

A new Ethernet Kernel Statistics option is now available under the View iSCSI Statistics Packages page in System Manager. This new option allows you to view statistics for platform kernel drivers of the iSCSI device. For more information, see View iSCSI Statistics Packages.

Added ability to block IP addresses through REST API endpoint

Users can now block specific IP addresses through the Settings endpoint (/devmgr/v2/settings). Once configured through the Settings endpoint, only IP addresses specified through a whitelist can communicate with the storage device. This new feature supports IPv4 and IPv6 address lists.

vCenter Storage plugin

The vCenter Storage plugin has been updated for compatibility with the E-Series 11.80.1 release.

Web Services Proxy

The Web Services Proxy has been updated to version 6.1 for compatibility with the E-Series 11.80.1 release.

Enhanced Volume Parity Scan

Volume parity scan can now be launched as a background process either via the REST API or via CLI. The resulting parity scan will run in the background as long as is required to complete the scan operation. Scan operations will survive controller reboots and failover operations.

SAML Support for Unified Manager

Unified Manager now supports SAML (Security Assertion Markup Language). Once SAML is enabled for Unified Manager, users must use multi factor authentication against the identity provider in order to interact with the user interface. Note that once SAML is enabled on Unified Manager, the REST API cannot be used without going through the IdP to authenticate requests.

Auto Configuration Feature

Now supports the ability to set the volume block size parameter to use with the Auto Configuration feature for initial array setup. This feature is available in the CLI only as a "blockSize" parameter.

Controller Firmware Cryptographic Signing

Controller firmware is cryptographically signed. Signatures are checked during initial download and at each controller boot. No end user impact expected. Signatures are backed by a CA issued Extended Validation certificate.

Drive Firmware Cryptographic Signing

Drive firmware is cryptographically signed. Signatures are checked during initial download and backed by a CA issued Extended Validation certificate. Drive firmware content is now delivered as a ZIP file, which contains the older non-signed firmware as well as the new signed firmware. The user must chose the appropriate file based on the release version of code that is running on the target system.

External Key Server Management - Certificate Key Size

The new default certificate key size is 3072 bits (from 2048). Key sizes up to 4096 bits are supported. An NVSRAM bit must be changed in order to support the non-default key sizes.

Key size selection values are as follows:

To change key size to 4096 via the SMcli:

set controller[b] globalnvsrambyte[0xc0]=3; set controller[a] globalnvsrambyte[0xc0]=3;

Interrogate the key size:

show allcontrollers globalnvsrambyte[0xc0];

Disk Pool Improvements

Disk pools created with controllers running 11.80 or above will be Version 1 pools as opposed to Version 0 pools. A downgrade operation is restricted when a Version 1 disk pool exists.

The version of a disk pool can be identified in the storage array profile.

System Manager and Unified Manager will not launch unless minimum browser requirements are met

A minimum version of the browser is required before either System Manager or Unified Manager will launch. The following are the minimum supported versions:

Support for FIPS 140-3 NVMe SSD drives

Netapp certified FIPS 140-3 NVMe SSD drives are now supported. They will be correctly identified as such in the storage array profile and in System Manager.

Support for SSD Read cache on EF300 and EF600

SSD Read cache is now supported on EF300 and EF600 controllers using HDD with a SAS expansion.

Support for iSCSI and Fibre Channel asynchronous remote mirroring on EF300 and EF600

Asynchronous remote mirroring (ARVM) is now supported on EF300 and EF600 controllers with NVMe and SAS based volumes.

Support EF300 and EF600 without drives on the base tray

EF300 and EF600 controller configurations without NVMe drives on the base tray is now supported.

USB ports disabled for all platforms

USB ports are now disabled on all platforms.