In a story which we squeezed in just hours before our February print deadline, Steve Pirie of 3000 hardware support provider Advant reported that the company’s software partner Immediate Recovery Solutions (IRS), has developed a program to transform HP 3000 lockwords to passwords — the character strings needed to operate HP’s ss_update configuration program.
The new SSPWD takes an HP lockword — designed to limit use of ss_update to HP’s support personnel — and delivers the corresponding password to let a support provider start and use ss_update.
HP developed ss_update as a follow-on tool to reset 3000 system board information after its SS_CONFIG software had its passwords removed. Pirie said the ss_update software, which Advant will unlock at the request of third party support companies for a fee, doesn’t start with any warning that HP restricts ss_update use to HP employees. (See the printout at left for a sample of what ss_update can modify on a PA-RISC server, be it an L-Class HP-UX system or a K- or N-Class HP 3000. Click it to enlarge)
“We’ve seen copies of SS_CONFIG which had a disclaimer, but it just so happens [ss_update] doesn’t, or HP didn’t really care,” Pirie said. The ss_update program can be a key service tool for a support company which needs to configure spare HP 3000 SPU boards. This kind of configuration is only available through HP’s support group today, he added.
The ss_update software resides on every HP 3000, he added, a theory which might prevent HP from generating another follow-on program for 3000 diagnostics, as it did when an unlocked SS_CONFIG was used by some resellers during 1990s. HP sued and filed criminal complaints against Abtech, Hardware House and others in 1999, claiming that SS_CONFIG was used illegally to switch the personalities of HP RISC hardware, from HP-UX booting to MPE/iX booting systems. HP prevailed in those suits and had California officials plea bargain with resellers in some criminal cases.
HP's ss_update program contains commands to do this kind of switching, but Pirie said it’s not the intention of Advant or IRS to enable this. SSPWD is an MPE/iX program. “It seems to be fair game for anyone to use ss_update,” he said, “since HP decided they didn’t need any disclaimers. HP’s always been particular about this.”
Pirie confirmed that neither Advant or IRS has discussed SSPWD with HP. The vendor’s exit plans prompted the creation of the IRS program.
“HP announced in 2001 that they’re out of the  marketplace,” he said. “We’re developing tools that we need. Once you announce you’re leaving the marketplace, HP should be careful. What happens if HP is in there trying to manipulate their options, and they didn’t leave the marketplace? Then they could be liable for a lot of damages. It might be better if HP just left the market.”
An example of the jobstream from a SSPWD unlock, then subsequent ss_update operation, is available at the IRS Web page www.irs4hp.com/sspwd.html.