Page 1 of 1

3Par patches after EOL anouncment

Posted: Mon Aug 01, 2022 9:22 am
by raerae
Hi All,

We are currently running a 3PAR 8440 system that has entered the EOL phase as of last year. It was my understanding that the system would continue to be fully supported for at least 5 years following the EOL announcement.

Looking at the announcement however in not sure what to make of the statement:
Last HPE 3PAR Operating System (OS) version qualification = 3PAR OS 3.3.2

If we are unable to upgrade to later versions of 3PAR OS over the next few years will the system no longer receive patches for critical security issues after 3.3.2 is superseded and goes EOL itself?

End-of-Engineering Support doesn't come until 2026 however if we are unable to apply critical security patches that could have us fall fowl of certain compliance responsibilities, does Engineering support cover the remediation of critical security issues?

Re: 3Par patches after EOL anouncment

Posted: Mon Aug 01, 2022 11:18 am
by MammaGutt
raerae wrote:Hi All,

We are currently running a 3PAR 8440 system that has entered the EOL phase as of last year. It was my understanding that the system would continue to be fully supported for at least 5 years following the EOL announcement.

Looking at the announcement however in not sure what to make of the statement:
Last HPE 3PAR Operating System (OS) version qualification = 3PAR OS 3.3.2

If we are unable to upgrade to later versions of 3PAR OS over the next few years will the system no longer receive patches for critical security issues after 3.3.2 is superseded and goes EOL itself?

End-of-Engineering Support doesn't come until 2026 however if we are unable to apply critical security patches that could have us fall fowl of certain compliance responsibilities, does Engineering support cover the remediation of critical security issues?


When that statement was issued, it said last 3PAR OS version was 3.3.1. So they may change it if they decide to release a greater version. They simply don't post anything later and greater than the current as it would have been a commitment to release something more. Last I checked, 3.3.2 MU1 was just released so engineering is still ongoing.

Security issues are generally fixed thru patches (My experience is usually 3 or 6 months between each security patch). With that in mind, also remember that even if most storage systems use standard packages in their builds, they are usually customized or limited in deployment, meaning that any known issues in OpenSSL a.b.c doesn't have to be exploitable on Storage System A from Vendor B.

But to be honest... I would not expect a lot (if any) new features released on the platform after EoL announcement. I would expect critical and security issues to be resolved as they would prior to EoL announcement.

Remember that EoL announcements are made to ensure that everyone is given sufficient time to plan their transition to their next platform.