TITLE: HPE Integrity rx2800 i4/i6 and rx2900 i4/i6 Servers Firmware Bundle - for Smart Update Manager

VERSION:
Bundle Version: 50.00
System Firmware Version: 02.69
FPGA Firmware Version: 02.02
iLO-3 Firmware Version: 02.02.03
Power Monitor Firmware Version: 02.09

Smart Update Manager (SUM)
SUM Version: 7.6.6

I/O Firmware Flash smart components:
Built-in p410i (SAS): 6.64

Add-in Smart Array Adapters Firmware for HPE Integrity Servers version 2013.09.25
   
P812: ROM 6.42
   
P411: ROM 6.42

Intel and Broadcom NIC Firmware for HPE Integrity servers version 2014.10.27 - installs at UEFI:
    Warning: For Broadcom NICs, use this smart component only if IEXGBE-DRV version is lower than B.11.31.1303 (otherwise, use the Broadcom NIC firmware component):
       
Intel rx2800 i4/i6 embedded NIC: 4.3.02
        Intel 2-port/4-port 1000Base Ethernet AD337A, AD338A, AD339A: EFI 4.3.02
       2-port 10 GbE AM225A, AM232A, AM233A: EFI 5.2.60, ROM 6.2.28
       2-port 10Gb 561T Adapter (B9F25A): version 4.4.30
       1-port/2-port 4 Gb FC/1000Base Ethernet AD221A, AD222A, AD393A: FC ROM:  2.82x4, FC EFI:  4.01a5; LAN 4.3.02 (i4 servers only)

Firmware Flash Component for Broadcom NIC HP-UX version 2014.2.18 - installs from HP-UX:
    Warning: Use this smart component only if IEXGBE-DRV version is B.11.31.1303 or greater (otherwise use the Intel and Broadcom NIC firmware component):
        
2-port 10 GbE AM225A, AM232A, AM233A: EFI 5.2.60, ROM 6.2.28 

Qlogic Fibre Channel Host Bus Adapters Firmware for HPE Integrity Servers version 2016.06.30
   
1-port/2-port 8 Gb FC AH400A, AH401A: ROM 5.06.06, EFI 2.27 (i4 servers only)
   1-port/2-port
16GB FC B9F23A, B9F24A (SN1000Q): EFI 6.37, ROM 8.01.80

InfiniBand Adapters for HPE Integrity Servers version 2012.11.30
   4X QDR CX-2 PCI-e G2 DP HCA (AT083A): FW 2.9.1000

Emulex Adapters Firmware for HPE Integrity Servers version 2015.05.21(a): 
    1-port/2-port 8 Gb FC AH402A, AH403A: ROM:  2.02x2, EFI: 4.01a5 (i4 servers only)
    8 Gb FC/10 Gb LAN AT094A: FW: 4.9.416.12, LAN EFI:  49.00A11, FC FW: 2.02x2, FC EFI: 4.01a5
(Universal Boot Code: 5.03a15)
    
2-port CN1000E AT111A: LAN & FC ROM:  4.9.416.12, LAN EFI: 49.00a11, FC EFI: 5.21A13
    1-port/2-port 4 Gb FC AD221A, AD222A, AD393A: FC ROM:  2.82x4, FC EFI:  4.01a5; LAN 4.3.02 (i4 servers only)

HDD firmware:
Online ROM Flash Component for HP-UX - MB2000FBUCL and MB3000FBUCN: Version  HPDA
Online ROM Flash Component for HP-UX - MB1000FCWPP, MB2000FCVBV, MB3000FCVCA, MB4000FCVCB: Version  HPD4
Supplemental Update / Online ROM Flash Component for HPUX - EG0900FBVFQ, EG0600FBVFP, EG0450FBVFM, EG0300FBVFL: Version  HPDE
Online ROM Flash Component for HP-UX - MB4000FCWDK, MB3000FCWDH, MB2000FCWDF, MB1000FCWDE: Version HPDD
Online ROM Flash Component for HP-UX - EG0900FCVBL, EG0600FCVBK, EG0450FCVBH, EG0300FCVBF: Version HPD9
Supplemental Update / Online ROM Flash Component for HPUX - EG1200FDJYT, EG0900FDJYR: Version  HPD4
Online ROM Flash Component for HP-UX - EG0300FCHHR, EG0450FCHHT, EG0600FCHHU, EG0900FCHHV: Version  HPD8
Online ROM Flash Component for HP-UX - EG0300FBLSE, EG0450FBLSF, EG0600FBLSH, EG0900FBLSK: Version  HPD8
Online ROM Flash Component for HP-UX - EH0300JDYTH,EH0450JDYTK,EH0600JDYTL: Version  HPD6
Supplemental Update / Online ROM Flash Component for HPUX - MB6000FEDAU: Version  HPD7
Online ROM Flash Component for HP-UX - EG1200FCVBQ,EG1200FDNJT: Version  HPD8
Supplemental Update / Online ROM Flash Component for HPUX -MB2000FCZGH,MB3000FCZGK,MB4000FCZGL: Version HPD7
Online ROM Flash Component for HP-UX - MB3000FBNWV and MB2000FCQPF: Version HPD9
Online ROM Flash Component for HP-UX - EH0300JEDHC, EH0450JEDHD and EH0600JEDHE: Version HPD4
Supplemental Update / Online ROM Flash Component for HPUX - MB4000JEQNL,MB6000JEQNN: Version HPD7
Online ROM Flash Component for HP-UX - MM1000JEFRB, MM2000JEFRC: Version HPD8
Supplemental Update / Online ROM Flash Component for HPUX -EG0300JEHLV,EG0600JEHMA,EG0900JEHMB,EG1200JEHMC: Version HPD5
Supplemental Update / Online ROM Flash Component for HPUX - EG1800JEHMD    : Version HPD6
Supplemental Update / Online ROM Flash Component for HPUX - EH0600JDYTN     : Version HPD7
Online ROM Flash Component for HP-UX - EG1200JEMDA,EG0900JFCKB,EG0600JEMCV,EG0300JFCKA: Version HPD6
Supplemental Update / Online ROM Flash Component for HPUX -MM1000FECVH    : Version HPD2
Online ROM Flash Component for HP-UX - EH0146FAWJB,EH0072FAWJA,DH0146FAQRE,DH0072FAQRD: Version HPDK
Online ROM Flash Component for HP-UX - EH0146FBQDC,EH0300FBQDD: Version HPD5
Online ROM Flash Component for HP-UX -MM0500FBFVQ,MM1000FBFVR: Version HDP9
Supplemental Update / Online ROM Flash Component for HPUX -DG0300FAMWN,DG0146FAMWL,EG0300FAWHV,EG0146FAWHU: Version HPDG
Supplemental Update / Online ROM Flash Component for HPUX -DG0300BALVP,DG0146BALVN,DG0072BALVL,DG0300BAHZQ,DG0146BAHZP: Version HPD5
Online ROM Flash Component for HP-UX - EH0300JDXBA, EH0450JDXBB, EH0600JDXBC: Version HPD5
Supplemental Update / Online ROM Flash Component for HPUX - EG1800JEMDB: Version HPD3
Online ROM Flash Component for HP-UX - MB4000JFDSN,MB2000JFDSL: Version HPD4
Supplemental Update / Online ROM Flash Component for HPUX - MM1000JFJTH     : Version HPD3
Online ROM Flash Component for HP-UX - EF0600FARNA, EF0450FARMV, EF0300FARMU: Version HPD9
Online ROM Flash Component for HP-UX - EG1200JETKC, EG0900JETKB, EG0600JETKA: Version HPD7
Online ROM Flash Component for HP-UX - EH0146FCBVB, EH0300FCBVC   : Version HPDA
Supplemental Update / Online ROM Flash Component for HPUX - MB4000JFEPB, MB2000JFEPA: Version HPD5
Supplemental Update / Online ROM Flash Component for HPUX - MB6000JEQUV, MB8000JEQVA: Version HPDB
Online ROM Flash Component for HP-UX - EG000300JWBHR: Version HPD4
Online ROM Flash Component for HP-UX - EG0900FCSPN,EG0600FCSPL,EG0450FCSPK,EG0300FCSPH: Version HPD2
Online ROM Flash Component for HP-UX - MB6000JEXYB, MB4000JEXYA   : Version HPD8
Online ROM Flash Component for HPUX- MB4000JVYZQ, MB3000JVYZP, MB2000JVYZN, MB1000JVYZL: Version HPD2
Online ROM Flash Component for HP-UX - MB6000JVYYV: Version HPD2
Online ROM Flash Component for HPUX- EH000900JWCPN, EH000600JWCPL, EH000300JWCPK: Version HPD3
Online ROM Flash Component for HP-UX - EH000900JWCPH, EH000600JWCPF: Version HPD3
Supplemental Update / Online ROM Flash Component for HPUX - EG000600JWEBH, EG000300JWEBF: Version HPD3
Online ROM Flash Component for HP-UX - EG1800JFHMH: Version HPD5
Supplemental Update / Online ROM Flash Component for HPUX - MB6000JEFND, MB4000JEFNC: Version HPD9
Online ROM Flash Component for HP-UX - EG001800JWFVC: Version HPD6
Supplemental Update / Online ROM Flash Component for HPUX - MB8000JFECQ     : Version HPD5
Supplemental Update / Online ROM Flash Component for HPUX - EG002400JWJNT, EG001800JWJNR: Version HPD1
Supplemental Update / Online ROM Flash Component for HPUX - EG001200JWJNQ, EG000600JWJNP: Version HPD1
Supplemental Update / Online ROM Flash Component for HPUX - MB6000JVYZD, MB4000JVYZC: Version HPD3
Online ROM Flash Component for HP-UX - EG001200JWFVA, EG000600JWFUV: Version HPD3
Online ROM Flash Component for HP-UX - EG000300JWFVB: Version HPD2

Note:

·        On servers running HP-UX, I/O and HDD firmware may be updated using SUM 7.6.6 or later with the I/O and HDD components included in this bundle.

§ If a system FW update is pending, it will be activated at next server power off, and server can be powered on only after the firmware activation completes.

§  To verify if a system FW update is pending, run the iLO3 MP “SYSREV” command and check if the Pending column shows any version for “System FW”.

§  Warning: If you reset the system while the SFW update is pending, the server may not be able to reboot due to a firmware mismatch between SFW and iLO. If that’s the case, power off the server to enable the new SFW activation and then power the server back on after activation is complete.

§  While the server is powered off, you can monitor the progress of the system firmware activation by running the iLO3 MP “FW” command from the Command Menu (CM).  

DESCRIPTION:
This bundle contains the Smart Update Manager (SUM) x86 application, the firmware for HPE Integrity rx2800 i4/i6 and rx2900 i4/i6 Servers (System firmware (SFW), FPGA firmware, iLO-3 MP firmware & Power Monitor firmware). This bundle can be used to update the firmware using the SUM application.

WARNING:

·        After January 31st, 2017, browsers may stop accepting the existing SHA1 based iLO SSL certificates. This may result in security warnings or may even render iLO Web GUI inaccessible with the latest browsers.
Recommendation (applies to i4 servers):

o   If the users have imported a SSL certificate signed by trusted Certificate Authority, the users can double check if the certificate uses a SHA2 based signature algorithm.

o   If the iLO is using a self-generated certificate, then users can use the iLO ‘SO’ command or iLO Web GUI to generate a new SHA2 based SSL certificate for iLO post firmware upgrade.

Note:

 

UPDATE RECOMMENDATION:

[ ] Critical
     [  ] Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak,

     [  ] Hardware Enablement,  [  ] Software Enablement
[X ]  Recommended 

[  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
[  ] Initial Customer Release

SUPERSEDES:
Bundle version: 49.01
System Firmware Version: 02.68
FPGA Firmware Version: 02.02
iLO-3 Firmware Version: 02.00.03
Power Monitor Firmware Version: 02.09

PRODUCT MODEL(S):

 

OPERATING SYSTEMS:

 

LANGUAGES:
International English

ENHANCEMENTS:

SFW:

·        Optimized the memory settings to improve the performance of the memory system, when every DIMM in the server supports unrestricted MAC (Maximum Active Count).

iLO:

·        For browsers that do not support Java plugins or applets, virtual media applet can now be launched through Java web start launcher.

p410i version 6.64:

·        Performance enhancement when a drive starts to degrade due to excessive recovered media errors

·        Enhanced the controller SAS discovery logic to tolerate devices that may be resetting


FIXES:

iLO:

·        Fixed an issue where login security banner settings were not set to default with execution of the DC command

p410i version 6.64:

·        Corrected thermal behavior with HDDs

PREREQUISITES: 

§  For i4 servers only: WBEMMgtBundle version C.07.01 (or later) is required for both the memory optimization and rx2900 i4 server model support introduced with version 44.01 to be fully effective. A system reboot is required after installing WBEMMgtBundle version C.07.01 for the enhancements in system firmware version 44.01 or later to be fully effective. To minimize the number of reboots, it is recommended to install WBEMMgtBundle C.07.01 before updating the system firmware to version 44.01 or later. WBEMMgtBundle may be downloaded from Software Depot.

§  iLO-3 MP(s) must be on the network (reachable from local system) and have static IP or be configured with DHCP.

§  An http daemon, service or IDS (Intrusion Detection System) running in the local system may interfere with SUM connecting to remote hosts, hence these services may need to be disabled when SUM is running.

§  SUM 7.6.6 or later is required for updating firmware on rx2800/rx2900 i6 servers.

For latest dependencies on SAS IO and LOM, refer to this matrix (applies to i2, i4 and i6 servers):  HPE Release Sets for rx2800 i2, i4 and i6 servers 

INSTALLATION INSTRUCTIONS:
Please review all instructions and the "Hewlett Packard Enterprise Support Tool License Terms" or your Hewlett Packard Enterprise support terms and conditions for precautions, scope of license, restrictions, and limitation of liability and warranties, before installing this package. It is important that you read and understand these instructions completely before you begin. This can determine your success in completing the firmware update.

Important Note: This version of SUM uses an Internet browser as the graphical user interface.  Currently supported browsers are:

Win2k8

Win2012

Win2016

SLES11

SLES12

RHEL6

RHEL7

IE 9, 10 or 11

x

x

x

 

 

 

 

Edge

 

 

x

 

 

 

 

FireFox 17 ESR

 

 

 

x

x

x

x

FireFox 18 or later

x

x

x

x

x

x

x

Chrome 24 or later

x

x

x

x

x

x

x

 

Important Note: SUM now uses port 63001 by default for pulling FW files from the server running SUM. 

A. Extracting and Running SUM

  1. Download the firmware bundle binary <filename>.exe or <filename>.tar.gz in a new folder on your system.
  2. Extract the bundle:
  3. The above steps will extract the contents of the bundle in the new folder where the bundle file is located. SUM and firmware components must reside in the same folder.
  4. Execute hpsum.bat (Windows) or hpsum.sh (Linux), located in the extracted folder, by logging as a user with Administrator or root privilege. Running hpsum will bring up a graphical user interface of the Smart Update Manager (SUM).

 

NOTE: SUM also provides a Command Line Interface (CLI) that allows user to perform scripted installations in silent mode. For more information refer to the SUM User Guide or the "CLIHelp.txt" file in the extracted folder. 

 

B. Installing the Firmware Components using SUM - Graphical User Mode

  1. Welcome screen:
    1. Once started, a page displays with SUM introduction content on it.
  2. For local updates on a Windows or Linux node, use Localhost Guided Update:
  1. For remote iLO nodes:
  1. For remote Windows, Linux, HP-UX and VMware nodes

Refer to SUM User Guide and Release notes for more information.

COMPATIBILITY / INTEROPERABILITY:
WARNING: Do not disconnect power supply to HPE Integrity Server during the firmware upgrade process or else the ROM will be corrupted and the system board will need to be replaced.

DETERMINING CURRENT VERSION:
SUM displays the current version of the firmware on the host. However user can also log in to the iLO-3 MP and use the following procedure to find out the current firmware versions.

  1. Establish a ssh/telnet session with the iLO-3 MP.
  2. Logon to the iLO-3 MP using the Administrator password.
  3. Type "CM" to enter the Command Menu.
  4. Type "SYSREV" to display system revision information. The following should be displayed if the current firmware is installed.

SYSREV

     Revisions            Active    Pending
    ---------------------------------------------------

     iLO FW               : 02.02.03
     System FW          : 02.69
     MHW FPGA       : 02.02
     Power Mon FW   : 02.09
    
PRS FW              : 02.08
    
IOH HW              : 02.02
    
Power Supply 1   : 02.01
    
Power Supply 2   : 02.01
      

KNOWN FIRMWARE ISSUES:
SFW:

§  DDDC (Double Device Data Correction) will not be invoked for a second DRAM failure in certain cases when excessive single bit memory errors are observed. This will be indicated by a WBEM Event 7000. There is no impact to customer applications however it is recommended to service the DIMM upon seeing this event as the server will stop correcting single bits memory errors if one more DRAM in the same rank fails. 

§  On HPE Integrity rx2800 i4 1-Socket servers, ‘SMBIOSview’ command will display blank fields for CPU 1 and the memory associated with it.

 iLO:

DISCLAIMER:
The information in this document is subject to change without notice.

Hewlett Packard Enterprise makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett Packard Enterprise shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.

This document contains proprietary information that is protected by copyright. All rights are reserved. No part of this document may be reproduced, photocopied, or translated to another language without the prior written consent of Hewlett Packard Enterprise.
(C) Copyright 1994-2018 Hewlett Packard Enterprise Development L.P.


FEEDBACK

As we are continuing to improve the firmware management process we welcome your feedback on this document and on the firmware update process.
TEAM-FWupdateFeedback@groups.ext.hpe.com

SUPERSEDES HISTORY:
Version 49.01:

ENHANCEMENTS:

·         Added support for rx2800 i6 and rx2900 i6 platforms (starting with Firmware version 49.01)

FIXES:

·         Fix for Vulnerability CVE-2016-6304 which could make iLO susceptible to DoS attacks

·         vMedia applet can now be launched with Java 7 update 51 without requiring to add iLO URL to the Java security exception list

 

Version 46.00
ENHANCEMENTS:

iLO 1.69.00:

§  Users can now configure a security banner message to be displayed in the iLO login screen.

§  iLO now enables users to configure an idle session timeout for web based user interface.

§  An option is now provided in Integrity iLO3 to "Enforce AES/3DES" ciphers for network encryption.

§  Users are now able to create a custom CSR (Certificate Signing request) and to import a third party signed SSL certificate into iLO for secure iLO webGUI access.


Note
: For more information on these enhancements, refer to the latest HPE Integrity iLO 3 Operations Guide.

 

FIXES:
iLO 1.69.00:

·        Addressed the OpenSSL Poodle (Padding Oracle on Downgraded Legacy Encryption) vulnerability CVE-2014-3566 in iLO. Note: SSLv3 based connections to iLO webGUI are now disabled.

·        Users can now successfully access the iLO3 GUI using Firefox version 23 or above.

·        iLO will now allow two simultaneous telnet connection attempts and five simultaneous SSH connection attempts.

·        A Telnet session to iLO would rarely hang during an operation such as FPL dump where continuous stream of data was being sent by iLO to the client. This is now fixed.

·        Fixed an issue where system firmware would occasionally de-configure one or more DIMMs reporting DIMM SPD Checksum errors due to a timeout during AC power cycle of the system.

·        Fixed an issue where iLO sometimes displayed incorrect power input voltage value in the Power Meter Readings page.

·        Disabled export cipher encryption in iLO3.

SFW 2.64:

Issues fixed in Emulex 4.9.416.12 (from 4.2.401.2212):

·        When ISL (Inter-Switch Link) was disabled to remote site, local storage access was also lost

·        IOCXGBE: Pause frame storm seen under DEAD state condition

·        IOCXGBE:  Flow control behavior was not functioning as expected

·        Link status was shown as DOWN in HP-UX & HII (Human Interface Infrastructure) though the interface is UP in OA

Version 45.02

FIXES:
iLO 1.67.04:

§ The vMedia (Virtual Media) feature did not work properly on rx2800 i4 servers with iLO 1.65.02 and 1.66.03 (firmware versions 45.00 and 45.01). For instance, when connected with Virtual Media, the UEFI shell would not display the file system or virtual device, and the HP-UX command “ioscanfnNC disk” would not display the virtual device. This is now fixed.

Version 45.01

ENHANCEMENTS:

iLO 1.66.03:

·        Added feature for customizable system firmware

Version 45.00

ENHANCEMENTS:
SFW 2.62:

·        Added support for HP Integrity rx2800 i4 1-socket servers for Japan

iLO 1.65.02:

·        Added support for HP Integrity rx2800 i4 1-socket servers for Japan


FIXES:

Fixes in iLO 1.65.02:

·        Fixed SSL/TLS MITM vulnerability (CVE-2014-0224)

Fixes in IO components included in this bundle:
Fixes in Qlogic Fibre Channel Host Bus Adapters firmware version 2014.02.14 (from 2012.11.30):

§ Qlogic EFI 2.27 (from 2.22):

§  The QMH2562 card would sometimes report VC_CLP_RESP_DEV_NVM_ERR when no Interconnect module was connected or when it was connected to a particular 4Gb FC switch. This issue is now fixed.

§ Qlogic FW 5.06.06 (from 5.03.15):

§  Fixed a link failover issue in Qlogic 8Gb firmware for the 8Gb Mezzanine Fibre channel adapter attached to HP VC 24 port module.

Fixes in Intel and Broadcom Adapters Firmware version 2014.10.27 (from 2012.11.30):

§ Intel EFI version 4.3.02 for HP Integrity rx2800 i2/i4 servers LOM (from 4.3.01):

§  NIC EFI driver update was failing on some cards shipped with a flash memory chip (Atmel 25DF041A) that did not support the EFI driver. EFI driver version 4.3.02 fixes this issue.

Fixes in Broadcom NIC HP-UX version 2014.2.18:

§ Firmware version 6.2.28 (Changes from 6.2.25):

§  IOX-LAN cards may transmit excessive pause frames during MCA process in Superdome 2 Platform multi-function mode.

Fixes in SAS FW 6.42 (from 6.22):   

§ Resolved an issue where, after doing a mode toggle at EFI ORCA, the controller name would not be displayed when running the command: “reconnect -r”

§ Added a new POST message 1813 to indicate bad or failed battery charge circuit

§ No longer display a POST error message 1805 “Cache Module Super--Cap is not installed” when the controller is configured to work without super-capacitors

Version 44.01
Fixes:
SFW 2.61
:

§ Fixed an issue where the execution of the SetTime firmware call might cause short system hangs of 12.75 seconds. Occasionally longer system hangs were observed. The problem may cause affected servers running in a Serviceguard cluster configuration with member timeout values slightly higher than the delay to fail with a Serviceguard INIT due to expiration of the Serviceguard safety timer. Note: other third party clustering products are affected by this issue too

§ A server with a controller configured in HBA mode could hang at boot time without any error messages if a Hard Disk configured for RAID mode is put into the server without previously removing the Hard Disk's RAID metadata. This issue is now fixed.

  AT094A 4.2.401.2212 (from 4.2.410.20):

§ Critical - As the result of auto negotiation failure, the connection between the IO card and ProCurve 6120XG could link up at 1Gbps instead of 10Gbps. This occured intermittently (as often as once in 10 retries) after executing “Reset Server blade #” from the OA CLI. It is now fixed.
Affected Products - All BE3 based Cards and LOMs. This was also seen with 10G passthrough Interconnect module.

 AT094A LAN EFI 2.22.A1 (from 2.22.A0):

·        Reset to Defaults restored wrong power configuration. It showed an HP unsupported option:. MultiChannel Option. This is now fixed. Reset to Default is issued from Device Manager->Emulex 10G NIC-> R/r or Erase Configuration

Version 43.01

INITIAL RELEASE:
N/A