=============================================================================== Intel(R) Server Platform Integrated BMC Firmware Release Notes =============================================================================== INTEL(R) Server Boards and Systems Intel Corporation 2111 N.E. 25th Avenue, Hillsboro, OR 97124 USA =============================================================================== DATE: 15 December, 2016 SUBJECT: Integrated BMC(R) firmware 01.48.10351 release notes =============================================================================== LEGAL INFORMATION =============================================================================== Information in this document is provided in connection with Intel products. No license, express or implied, by estoppel or otherwise, to any intellectual property rights is granted by this document. Except as provided in Intel's Terms and Conditions of Sale for such products, Intel assumes no liability whatsoever, and Intel disclaims any express or implied warranty, relating to sale and/or use of Intel products including liability or warranties relating to fitness for a particular purpose, merchantability, or infringement of any patent, copyright or other intellectual property right. Intel Corporation may have patents or pending patent applications, trademarks, copyrights, or other intellectual property rights that relate to the presented subject matter. The furnishing of documents and other materials and information does not provide any license, express or implied, by estoppel or otherwise, to any such patents, trademarks, copyrights, or other intellectual property rights. Intel products are not intended for use in medical, life saving, or life sustaining applications. Intel may make changes to specifications and product descriptions at any time, without notice. Intel is a registered trademark of Intel Corporation. *Other names and brands are the property of their respective owners. Copyright (c) 2016 Intel Corporation. A portion of this firmware is open source code. The OSS source code that the customer is entitled to per OSS license has been posted on the Intel support website at the following link: http://downloadcenter.intel.com/Detail_Desc.aspx?agr=Y&DwnldID=21081 This open source code falls under the GPL 2.0 license, please see the license at the following link: http://www.opensource.org/licenses/gpl-2.0.php =============================================================================== ABOUT THIS RELEASE PACKAGE =============================================================================== Source file: BMC_i_0148r10351.bin Update script: fwUpdateBMC.nsh REVISION INFORMATION RETURNED BY GET DEVICE ID COMMAND: Operational mode: 01.48.10351 UBoot mode: 01.07 Device ID: 0x21 Manufacturer ID: 0x000157 Other version/revision information: PSU Model H/W revision FW Version 1100ADU00201 S3 1.01.32 1100ADU00201 S2 1.01.1E DPS 750XB A S4 5.**.100 *(See Note 2) DPS 750AB-32A S0 3.**.27 *(See Note 2) DPS 1200TB A 00 4.39.77 *(See Note 1) DPS 1200TB A 02 6.40.89 *(See Note 1) DPS 1200TB A S3 3.39.77 *(See Note 1) PSSF162202A 00 0.09.73 PSSF162202A S3 0.09.55 *(See Note 1) PSSF222201A S1 0.0.9 PSSF222201A S2 0.0.17 PSSF222201A S3 0.0.20 PSSF222201A S4 0.0.29 *NOTE 1: Supported but not POR. Will likely be removed in a future release. *NOTE 2: The middle version number is attached to a particular batch of power supplies and can be different for the same firmware revision. Therefore, it cannot be predicted ahead of time what it will be. Validation should ignore this value. HSBP FW: 01.27 Root: 01.48 WWW: 01.19 UBoot: 01.07 FWPIAUPD Utility: v14_0_Build8 MD5 checksum of BMC_i_0148r10351.bin: adf322b60be3017ef1e7d62eb838e0c8 ------------------------------------------------------------------------------- =============================================================================== IMPORTANT INSTALLATION NOTES =============================================================================== The following update process must be followed to ensure a trouble free updating of your baseboard. The order is important to minimize any issues for status checking as different components are initialized. 1. Manageability Engine (ME) firmware 2. Flash Descriptor (FD) 3. BMC firmware 4. BIOS 5. FRU/SDR package specific to the baseboard =============================================================================== INSTALLATION PROCEDURE =============================================================================== 1. Copy all files to the storage medium of your choice. This can be a hard disk, floppy disk or USB flash drive. All of the files must reside in the same directory. 2. Boot to EFI and then run the BMC.nsh script file to update the Integrated BMC. Modification of the update script or using fwpiaupd.efi with your own command line parameters is not supported and doing so is at your own risk! 3. Install latest available FRU/SDR package specific to the platform. =============================================================================== FIRMWARE RECOVERY PROCEDURE =============================================================================== The Recovery process can be initiated by setting the recovery jumper (called BMC Force Update Jumper) to the recovery position. The jumper is normally in the normal/de-asserted position. The system must be completely powered off (A/C power removed) before the jumper is moved. After power is re-applied and the firmware update is complete, the system must be powered off again and the jumper must be returned to the de-asserted position before normal operation can begin. A BMC recovery can be accomplished from a USB flash drive. 1. Copy all files to a storage USB flash drive. All of the files must reside in the same directory. 2. Remove A/C power from the system and wait 30 seconds. 3. Move the BMC Force Update Jumper to the recovery position. Details regarding the jumper ID and location can be obtained from the Board EPS for that Platform. 4. Insert the USB flash drive. 5. Reapply A/C power to the system and power on the system. 6. The BIOS POST screen will appear displaying the progress press F6 to select boot options. At the boot option menu select to boot to the EFI SHELL. 7. Switch to the directory where you stored the update files and then run the BMC.nsh script file to update the Integrated BMC. Modification of the update script with your own command line parameters is not supported and doing so is at your own risk! 8. Remove A/C power from the system and wait 30 seconds. 9. Move the BMC Force Update Jumper to the normal position. 10. Reapply A/C power to the system and power on the system. NOTE: Performing this recovery procedure resets all network and user settings to defaults. The FRUSDR will also need to be reloaded after a recovery (SDR update). =============================================================================== FIRMWARE UPGRADE/DOWNGRADE PROCEDURES =============================================================================== Upgrade of BMC FW from version BMC_i_0148r10351 to later versions will be documented in the release notes for those versions. Reverting to a lower version of firmware may have unexpected side effects, including but not limited to user settings reset to defaults, and will always result in the loss of functionality which was present in the higher version but was not implemented in the lower version. We do not guarantee that any downgrade will operate without side-effects. Always observe caution when downgrading firmware. =============================================================================== KNOWN ISSUES/WORKAROUNDS/REQUIREMENTS =============================================================================== - This BMC FW update package is to be used only on PCSD server baseboards and does NOT support customer reference boards (CRB) or silicon reference platforms (SRP). Contact your Intel Representatives to determine where to download the BMC FW for these products. - The BMC FW image file in this package is to be used only with the provided FWPIAUPD update utility. Using the FW image file with a SPI flash device programmer will result in a non-functional system. - Some open source ipmi utilities may automatically retry multiple times during access BMC using bad password and supporting IPMI specification 1.5 in Linux OS. CCB310 will log more bad password login SEL. =============================================================================== ISSUES FIXED =============================================================================== 01.48.10351 - (Release version) =============================================================================== -EPSD100256480: The fault LED of NvME SSD keep blinking on S2600TP 24HDD system after AC cycle -EPSD100256247: S2600WT system (LWT2224YXXXX221, LWT2224YXXXX129 ) will hang on post after AC cycle with BIOS R16 -EPSD100255719: APPSOL-31180: Web Server Vulnerable to Redirection Page Cross-Site Scripting Attacks -EPSD100035907: The HDD fault LED no light and no rebuild event be logged when plug out the HDD from HSBP(G97158-371) and plug back the HDD to rebuild RAID. -EPSD100256365: [S2600WT]The NVMe HDD can not be detected in EWS web sensor reading interface when install the NVME HDD in the 2nd HSBP's NVMe slot. -EPSD100256457: In Redhat grub edit mode Backspace and cursor move operations can't be consistent between local Screen and remote KVM session's Screen -EPSD100035838: Can not display Simplified Chinese content after EWS was login when language was change to simplified Chinese. -EPSD100254723: S2600KP BMC FW Health reports HSBP Temp has failed -none: Fix generic overflow attack on port 5120 and 5123 for cdserver and fdserver 01.48.10259(Internal version) -EPSD100255012: [S2600WT] - Riser2 Temp lower issue with A2UL8RISER2 -EPSD100255833: Linux Kernel vulnerability – Dirty COW attack -EPSD100254817: The HSBP's FRU can't be detected if install 4 HSBP in WCP system. (Long term solution) -EPSD100035118: HDD Fault LED didn't amber blinking at 1HZ frequence during HDD rebuilding -EPSD100033884: The HDD fault LED no light and no rebuild event be logged when plug out the HDD from HSBP(G94339-371) and plug back the HDD to rebuild RAID. -none: Upgrade openssh to 7.3 01.48.10239(Internal version) -EPSD100035162: LCD shown frusdr version is 1.3a, not 1.13a with BIOS setup. -EPSD100255280: BMC Debug Log does not dump IIO configuration in case of ERR2 -EPSD100255284: BMC Debug Log generation code reads wrong bus to get GFERRST value on socket 1 -EPSD100034909: It shows the HSBP FW update status as "00 01" by executing the "cmdtool 20 c0 38" command in power off status -none: Increase EWS stability after Nessus/Qualys scan -none: Update openssl to 1.0.2j 01.47.10181- (Release version) =============================================================================== -EPSD100254817: The HSBP's FRU can't be detected if install 4 HSBP in S2600WT system. -EPSD100034620: Ping LAN1 (BMC management) IP failure after AC off/on sometimes with RoHS BB. -EPSD100254941: HSBP3 sensors can not be accessed and shown as Unknown because of SDR auto-configuration failure -EPSD100253829: vulnerabilities found on BMC_i_0146r9961 -EPSD100254410: BMC Ethernet hang issue in some case -EPSD100254304: BMC alerts received in an email via SMTP have a different time -EPSD100253866: BMC EWS Security settings issue (Bad password threshold) -Fix issue of second CPU dump when IERR happened and first CPU dump failed, Use PCH command to trigger warm reset, Increase handshake timeout with BIOS -Fix "No SEL is added when FM_MEM_THERM_EVENT_N is grounded." -Updated the stunnel conf to support TLSv1.2 only, with secured ciphers <= 128 01.46.9995- (Release version) =============================================================================== -none: Watchdog assert happened on Nodes with bigger number while unplug PSU on S2600KP/S2600TP 01.46.9961(Internal version) -EPSD100253232: [S2600WT] FRUSDR112 and FRUSDR113 dont detect PSUs on a 3rd party chassis -EPSD100251931: Email and SNMP alerts are not sent during a drive fault on 1U HSBP. -EPSD100253499: EWS show in Chinese not align with English -EPSD100252884: Change FAN to auto-rearm, fan status cannot show correct status on EWS -none: Remove the 2130W PSU FW Ver24 for update hang issue 01.45.9842(Internal version) -EPSD100252472: Defect title: vulnerabilities found on BMC release 01.41.9579 -EPSD100252826: BMC FW Use of Voltage Fault (D1h) Violates DFT Rule #1619 -EPSD100252984: modify master.cfg to automation will results fail -EPSD100249322: duplicate response from remote host during SSH SOL/SMASH session -EPSD100252884: Change FAN to auto-rearm, fan status cannot show correct status on EWS -none: After load FCT or Default SDR in 24HDD System, HSBP update process cannot start 01.44.9785(Internal version) -EPSD100031139: The DPC function couldn't work on the PCIe switch AIC via Switch AIC (Implement OEM Misc command (NetFn:0x30, Cmd:0x67) to detect SSD switch AIC) -EPSD100248833: SMASH cannot read recent SEL events when SEL has a high volume. -EPSD100031101: IE11 displaying EWS->Configuration->KVM & Media /SOL & SMASH , Sever Diagnostics->POST Codes with help ON, text exceeds the Box size -EPSD100252439: PCIe SSD Add-in-Card present slot bitmap don't match current inserted slot number in EFI shell 01.43.9685 - (Release version) =============================================================================== -EPSD100250289: EWS BMC HTTP connection is halt when using JDisc application discovery task with VMware account. -EPSD100250443: Shipping SDR can't be dumped after load SDR from system to shipping -EPSD100031613: Intel Copyright Statement isn't correct on EWS -EPSD100252136: The SEL description format for the "FW Update Status" sensor is confusing -EPSD100252197: [S2600WT] 2x3.5 HSBP FRU can't be detected with BMC 01.41.9579 -EPSD100030211: Mouse and keyboard is not available in a rKVM session under Windows 2012 R2 after select "Launch Redirection" for 2~3 times -EPSD100031610: No beep code and CPU missing event be generated when remove processor1 from CPU socket -EPSD100249322: duplicate response from remote host during SSH SOL/SMASH session 01.42.9617(Internal version) -EPSD100251192: Syscfg not working for changing user privileges. -EPSD100031260: The Sensor Reading Page from EWS display status is mismatch with Specification when the DC power is off and AC power is present -N/A: Check in 2130W PSU S4 image. -N/A: Merge Intel Security Thunderbolt to trunk. -N/A: Fix a potential CPU ID mismatch to detect CPU status. 01.41.9579 - (Release version) =============================================================================== -EPSD100249257: (X)12GB bridgeboard sensor no longer seen after updating to BIOS 1.01.009SUP with SDR Package 1.09 on S2600KP/S2600TP. 01.41.9519(Internal version) -EPSD100030179: IE11 displaying EWS->Configuration->Server Diagnostics with Old System Debug Log text exceeds the Box size -EPSD100030713: Using EWS cannot get information when using BMC version 1.38/1.39. 01.40.9455(Internal Version) -EPSD100030395/EPSD100030381: The second HSBP related sensors show in unavaliable state when 2 HSBP are configured in chassis. -EPSD100028376: When Solve BMC error, the status LED cannot change to Solid Green from Blinking Amber automatically. -EPSD100250458: Unknown SEL event after XEON Phi Ctrl Alt Del reset (possibly other resets as well). -EPSD100029078/EPSD100029080/EPSD100030117/EPSD100250535: DIMM Thrm Mrgn 1 sensor shows up as upper non-critical. -EPSD100030156: The SUT will wait over about 20 seconds than expected time before SUT auto powering up. -EPSD100250626: S2600TP BMC System Power statistic incorrect when the platform runs in standalone mode -EPSD100250525: Fan Fault LED not functional on S2600CW board. -EPSD100250872: BMC firmware OEM command about write SSL certification file fail to upload. -EPSD100250216: EWS Alerts page wording (Select the events that will trigger alerts:) confusing to customer when IPMItool is used to modify Alert Action settings. -N/A: Matched the TSOD addresses and memory controller PECI addresses. -N/A: ME SELs don't decode correctly. -N/A: BMC change to ensure the system remains off after an over current event (OCP) until the system has been AC power cycled. -N/A: Disable onboard NIC from BIOS,system fan run at high speed. =============================================================================== 01.39.9375 - (Release version) =============================================================================== -EPSD100030390: SUT boot slowly during BIOS post when node is plug in slot 3 or slot 4 - 01.38.9347(Internal Version) -EPSD100250032: EWS Show NVMe for S7200AP -EPSD100250127: EWS with Mozilla Firefox 41.0 has Login button in wrong location -EPSD100030179: IE11 displaying EWS->Configuration->Server Diagnostics with Old System Debug Log text exceeds the Box size -EPSD100250243: BMC FW BAT test 32 Temperature Sensor fwtests\Sensors\Functions\interrelated_tests\sensor_thresholdEvents.tcl -EPSD100250226: With no SATA drives installed EWS shows 3 out of 4 installed. -EPSD100028833: HDD LEDs are off when HDD access -EPSD100028868: Thermal Trip event generate when heat the processor to make system power down. 01.37.9235(Internal Version) -EPSD100030118: No HDD presence and check HDD status in EWS, HDD2,3 status shows like "Drive Presence". -None: Update HSBP CPLD to 1.5. =============================================================================== 01.33.8932 - (Release version) =============================================================================== -N/A: Update FCT/Shipping SDR of S2600WT to 1.09. -N/A: Update FCT/Shipping SDR of S2600CW to 1.11. -N/A: Update FCT/Shipping SDR of S2600KP/TP to 1.12. 01.31.8875(Internal Version) -N/A: Update open SSL lib from 1.0.2a to 1.0.2d. -N/A: VLAN refresh has problem during met lan status drop and regain. -N/A: Added support for the new 2200W power supplies. -N/A: Thunderbolt fans did not boost when a member read 0 RPM. -EPSD100248689: [Thunderbolt] Sometimes there are some abnormal logs in SEL when run DC cycle or Hard Reset. -EPSD100248782: The Help text in the BMC web console for Modify User does not match the actual interface. -EPSD100029037/EPSD100029042/EPSD100029046: The "Bad user PWD" event log will occur when send several commands from remote client during update BMC FW. -EPSD100029025/EPSD100029043/EPSD100029044: "Bad User PWD" event will occur when log in EWS via LDAP account with correct USERID and PASSWORD. - 01.30.8756(Internal Version) -N/A: Disable CPLD Update Function by default and add a command for user. 01.29.8658(Internal Version) - EPSD100028587： BMC and SDR version become "Unknown" when used DCM tool to limit SUT power consuming - EPSD100028724： No HDD presence and check HDD status in EWS, HDD2,3 status shows like "Drive Presence". - EPSD100028950： IOM FRU update fail =============================================================================== 01.28.8586 - (Release version) =============================================================================== -EPSD100248398: Spelling error in SEL log. -EPSD100248427: After SUT power off, there is "Front panel temp sensor has failed and may not be providing a valid reading - assert" logged for BMC FW health sensor -EPSD100248399: Change Bad Password Threshold parameter string in EWS to be same with spec. -EPSD100248480: Chassis intrusion is always enabled on MTM2 exit. =============================================================================== FEATURES ADDED =============================================================================== 01.48.10351: -none: update PSoC to version 1.27 01.48.10259: -none: update PSoC to version 1.26 01.47.10181: -CCB 460: enable adoption of A1u2ULCP on S2600WT -CCB 468: address the cipher suite zero vulnerability. -none: update PSoC to version 1.25 -none: update SDR file for S2600WT thermal alert issue 01.45.9842: -none: Update OpenSSL to latest version 1.0.2h to avoid OpenSSL vulnerability -CCB391: Add IPMI command to limit Maximum PWM code base -CCB404: provides support for KNL(Xeon Phi) PCIe card with CMD 0xE8 (PCIe slot CMD) 01.44.9785: -CCB430: Cross Site Request Forgery (CSRF) prevention and Privilege Escalation Attack via EWS prevention 01.42.9617: -CCB387: Support for TLSv1.2 using a 256 bit encryption key and make TLSv1.2 256 bit ciphers the default ones. 01.40.9455: -CCB387(Part): Disable TLS ciphers using less than 128 bits of encryption. 01.38.9347: -CCB320: Remove IHC from BMC functionality -none: Update CPLD image to 1.7 -none: Disable SSL support, support secure TLS session renegotiation only 01.36.9152： -none: Update CPLD to Version 1.4 -none: Update PSU to S3 0.20 -none: Update PSoC to version 1.19 01.28.8586: -CCB310: Implement Bad Password and Bad Username SEL logging and "Session Audit" system event to support ipmitool,ipmiutil and free ipmi. =============================================================================== REFERENCE MATERIAL =============================================================================== Common (integrated) BMC Firmware EAS (integrated) BMC Firmware Common Core EPS