AIX and Firmware update keys are two different keys. You can have a legit Firmware Update Access Key and be able to get and update the firmware but an expired AIX Update Access Key.
You still can update AIX if you have access to an AIX image. You can see it on one of the two picturesthan, that the installed AIX image is newer as the AIX update key.
Is there any chance to solve the problem? To install only the new fix and keep the security department happy?
Yes, if IBM changes its policy or at least starts to change its older advisories and add a note there that the problems can be fixed with the newer fix too. 👇
You can see the installation in the video https://t.co/us7Ad1t11f and subscribe to the newsletter https://t.co/gcPMRxUAWi where you can read more (and more technical) information about automating IBM Power.
The next good news is that I didn't change a byte in my kickstart file to deploy RHEL10-Beta. OK, I really changed 4 bytes. I changed RHEL9 to RHEL10 and changed the path to the NFS repository with RHEL10-Beta. That's all changes! Really! 👇