The International Earth Rotation and Reference Systems Service has decided to insert a one-second adjustment known as Leap Second to ensure the Coordinated Universal Time (UTC) is in sync with the solar/astronomical time. These Leap Seconds are irregularly timed in response to changes in the Earth’s rotation. Such a leap second adjustment is expected to occur on June 30th, 2015. For more information on Leap Second, you may refer to http://www.nist.gov/pml/div688/leapseconds.cfm
This advisory is to notify which Aruba products and software releases may be affected by this time adjustment and provide guidance on workarounds or software patches. This is an initial advisory and will be updated as additional/relevant information becomes available. It is posted on the Aruba Support Site under the "Announcements" tab.
AFFECTED PRODUCTS
- Aruba Mobility Controllers – All Versions
- Aruba Instant – All Versions
- AirWave Management Platform – All Versions
- ClearPass Policy Manager – All Versions
- Analytics and Location Engine – All Versions
WHAT PRODUCTS ARE NOT AFFECTED?
- Aruba Mobility Access Switches
- Aruba AirMesh Routers
CALL TO ACTION
- Aruba Mobility Controllers
====================
The fixes require making significant changes to the ArubaOS kernel which we have elected not to do at this time. To mitigate the issue, disable NTP services at least 24 hours prior to June 30, 2015 and then re-enable NTP services afterwards.
Note: The controller will not require a reboot when NTP is disabled and re-enabled.
- What happens if NTP is not disabled on the controller?
- There is a high chance that the controller will reboot.
- Do I need to worry about this if NTP is not enabled?
- The controller is not affected if NTP is not enabled.
===============
To mitigate the issue, disable NTP services at least 24 hours prior to June 30, 2015 and then re-enable NTP services afterwards.
- What happens if NTP is not disabled on the IAP?
- There is a high chance that the IAP will reboot.
- Do I need to worry about this if NTP is not enabled?
- The IAP is not affected if NTP is not enabled.
- How to disable NTP service on IAP?
- Configure the NTP server to an unreachable IP/domain
- AirWave Management Platform
========================
- Airwave 8.0.8 is available for download and will address the leap second.
- Customers who are using NTP will not be affected.
- Customers with older versions of Airwave who do not use NTP can update the tzdata package with this command:
# yum update tzdata\*
- Customers who don't use NTP and don't update the tzdata package will end up with the clock off by a second (assuming it was correct in the first place). We do not anticipate any other side effects.
- Analytics and Location Engine
========================
Customers should use the following command to update
# yum update tzdata\*
=====================
An out-of-cycle patch, the ClearPass Leap Second Update, will be provided for both actively supported releases as well as End of Development/Support releases on May 12th by 5:00pm PDT. It will be available for the following releases:
- ClearPass Policy Manager 6.2.6
- ClearPass Policy Manager 6.3.6
- ClearPass Policy Manager 6.4.x
- ClearPass Policy Manager 6.5.0/6.5.1
Please use any of the methods listed below to install the patch.
- Installing the Patch Online Using the Software Updates Portal:
- Open ClearPass Policy Manager and go to Administration > Agents and Software Updates > Software Updates.
- In the Firmware and Patch Updates area, find the ClearPass Leap Second Update patch and click the Download button in its row.
- Click Install.
- When the installation is complete and the status is shown as Needs Restart, proceed to restart ClearPass. After reboot, the status for the patch will be shown as Installed. The ClearPass Policy Manager version number will not change.
- Installing the Patch Offline Using the Patch File from support.arubanetworks.com and HTTP:
- Download the appropriate ClearPass Leap Second Update from the Support site.
- Post the patch file to a local HTTP server.
- Open an SSH session to the ClearPass appliance using the ‘appadmin’ account.
- Type 'system update –i <http location of the file>’
- When the installation is complete, issue ’system restart'. After reboot, the status for the patch will be shown as Installed. The ClearPass Policy Manager version number will not change.
- Installing the Patch Offline Using the Patch File from support.arubanetworks.com and SCP:
- Download the appropriate ClearPass Leap Second Update from the Support site.
- Post the patch file to a local SCP server.
- Open an SSH session to the ClearPass appliance using the ‘appadmin’ account.
- Type 'system update –i < user@<scp location of the file>'
- When the installation is complete, issue ’system restart'. After reboot, the status for the patch will be shown as Installed. The ClearPass Policy Manager version number will not change.
- Installing the Patch Offline Using the Patch File from support.arubanetworks.com:
- Download the appropriate ClearPass Leap Second Update from the Support site.
- Open the ClearPass Policy Manager Admin UI and go to Administration > Agents and Software Updates > Software Updates.
- At the bottom of the Firmware and Patch Updates area, click Import Updates and browse to the downloaded patch file.
- Click Install.
- When the installation is complete and the status is shown as Needs Restart, proceed to restart ClearPass. After reboot, the staus for the patch will be shown as Installed. The ClearPass Policy Manager version number will not change.