TITLE: HPE Integrity rx2800 i2 Firmware Bundle (System, IO, HDD) - for Smart Update Manager

VERSION:
Smart Update Linux Firmware Bundle
Bundle Version : 28.00

System Firmware Version: 1.96
FPGA Firmware Version: 2.02
iLO-3 Firmware Version: 01.59.01
Power Monitor Firmware Version: 02.09

I/O components:
rx2800 i2 built-in p410i SAS firmware: 6.42
Add-in Smart Array Adapters firmware bundle 2013.09.25:
    p411 : 6.42

InfiniBand Adapters firmware bundle 2012.11.30:
   HP 4X QDR Infiniband (592519-B21): 2.9.1000

Emulex Adapters firmware bundle 2015.05.21(a):
    1-port/2-port 4 Gb FC + 1000BT AD221A, AD222A, AD393A: FC ROM:  2.82x4, FC EFI:  4.01a5; LAN 4.3.02 
    1-port/2-port 8 Gb FC AH402A, AH403A: ROM:  2.02x2, EFI: 4.01a5
    NC552SFP 10Gb Flex-10 AT118A: ROM:  4.9.416.12, EFI: 49.00a11
    2-port CN1000E AT111A: LAN & FC ROM:  4.9.416.12, LAN EFI: 49.00a11, FC EFI: 5.21A13
    8 Gb FC/10 Gb LAN AT094A: LAN ROM: 4.9.416.12, LAN EFI: 49.00a11, FC ROM:  2.02x2, FC EFI:  4.01a5 

Intel and Broadcom Adapters firmware bundle 2014.10.27:
    rx2800 i2 embedded NIC: 4.3.02 
    2-port/4-port 1000Base Ethernet AD337A, AD338A, AD339A: EFI 4.3.02 
    4 Gb FC/1000Base Ethernet AD221A, AD222A, AD393A: EFI 4.3.02 
    2-port 10 GbE AM225A, AM232A, AM233A: EFI 5.2.60, ROM 6.2.28

Firmware Flash Component for Broadcom NIC HP-UX: version 2014.2.18:
        Warning: Use this component only if IEXGBE-DRV version is B.11.31.1303 or later:
      
2-port 10 GbE AM225A, AM232A, AM233A: EFI 5.2.60, ROM 6.2.28

Qlogic Fibre Channel Host Bus Adapters firmware bundle 2016.06.30:
     1-port/2-port 8 Gb FC AH400A, AH401A: ROM 5.06.06, EFI 2.27
     
Smart Update Manager (SUM)
SUM Version: 7.6.0

HDD firmware (for HP-UX only):
Online ROM Flash Component for HP-UX - MB2000FBUCL and MB3000FBUCN: version HPDA
Online ROM Flash Component for HP-UX - MB1000FCWPP, MB2000FCVBV, MB3000FCVCA, MB4000FCVCB: version HPD4

Online ROM Flash Component for HPUX - EG0900FBVFQ, EG0600FBVFP, EG0450FBVFM, EG0300FBVFL: version HPDE

Online ROM Flash Component for HP-UX - MB4000FCWDK, MB3000FCWDH, MB2000FCWDF, MB1000FCWDE: version HPDA

Online ROM Flash Component for HP-UX - EG0900FCVBL, EG0600FCVBK, EG0450FCVBH, EG0300FCVBF: version HPD9
Online ROM Flash Component for HPUX - EG1200FDJYT, EG0900FDJYR: version HPD4
Online ROM Flash Component for HP-UX - EG0300FCHHR, EG0450FCHHT, EG0600FCHHU, EG0900FCHHV: version HPD8
Online ROM Flash Component for HP-UX - EG0300FBLSE, EG0450FBLSF, EG0600FBLSH, EG0900FBLSK: version HPD8
Online ROM Flash Component for HP-UX - EH0300JDYTH, EH0450JDYTK, EH0600JDYTL: version HPD4
Online ROM Flash Component for HPUX - MB6000FEDAU: version HPD4
Online ROM Flash Component for HP-UX – EG1200FCVBQ, EG1200FDNJT: version HPD8

Online ROM Flash Component for HP-UX - MB2000FCZGH, MB3000FCZGK, MB4000FCZGL: version HPD7

Online ROM Flash Component for HP-UX - MB3000FBNWV and MB2000FCQPF: version HPD9

Online ROM Flash Component for HP-UX - EH0300JEDHC, EH0450JEDHD and EH0600JEDHE: version HPD4

Online ROM Flash Component for HPUX - MB4000JEQNL, MB6000JEQNN: version HPD7

Online ROM Flash Component for HP-UX - MM1000JEFRB, MM2000JEFRC: version HPD6

Online ROM Flash Component for HPUX - EG0300JEHLV, EG0600JEHMA, EG0900JEHMB, EG1200JEHMC: version HPD3

Online ROM Flash Component for HPUX - EG1800JEHMD: version HPD4

Online ROM Flash Component for HPUX - EH0600JDYTN: version HPD5

Online ROM Flash Component for HP-UX - EG1200JEMDA, EG0900JFCKB, EG0600JEMCV, EG0300JFCKA: version HPD5

Online ROM Flash Component for HP-UX – MM1000FECVH: version HPD2

Online ROM Flash Component for HP-UX – EH0146FAWJB, EH0072FAWJA, DH0146FAQRE, DH0072FAQRD: version HPDK

Online ROM Flash Component for HP-UX – EH0146FBQDC, EH0300FBQDD: version HPD5
Online ROM Flash Component for HP-UX – MM0500FBVQ, MM1000FBVR: version HPD9
Online ROM Flash Component for HP-UX - DG0300FAMWN_DG0146FAMWL, EG0300FAWHV, EG0146FAWHU: HPDG
Online ROM Flash Component for HP-UX - DG0300BALVP, DG0146BALVN, DG0072BALVL, DG0300BAHZQ: Version HPD5
Online ROM Flash Component for HP-UX - MB6000JEFND, MB4000JEFNC: Version HPD5
Online ROM Flash Component for HP-UX - EH0300JDXBA, EH0450JDXBB, EH0600JDXBC: Version HPD3
Online ROM Flash Component for HP-UX - EG1800JEMDB: Version HPD3
Online ROM Flash Component for HP-UX - MB2000JFDSL, MB4000JFDSN: Version HPD1
Online ROM Flash Component for HP-UX - MM1000JFJTH: Version HPD1
Online ROM Flash Component for HP-UX - EF0600FARNA, EF0450FARMV, EF0300FARMU: Version HPD9
Online ROM Flash Component for HP-UX - EG1200JETKC, EG0900JETKB, EG0600JETKA: Version HPD4
Online ROM Flash Component for HP-UX - EH0146FCBVB, EH0300FCBVC: Version HPD8
Online ROM Flash Component for HP-UX - MB4000JFEPB, MB2000JFEPA: Version HPD2
Online ROM Flash Component for HP-UX - MB6000JEQUV, MB8000JEQVA: Version HPD9
Online ROM Flash Component for HP-UX - EG000300JWBHR: Version HPD2
Online ROM Flash Component for HP-UX - EG0900FCSPN, EG0600FCSPL, EG0450FCSPK, EG0300FCSPH: Version HPD2
Online ROM Flash Component for HPUX - MB8000JFECQ: Version HPD4

Note:

DESCRIPTION:
This bundle contains the Smart Update Manager (SUM) application with the firmware for HPE Integrity rx2800 i2 Servers (System firmware (SFW), FPGA firmware, iLO-3 MP firmware & Power Monitor and IO firmware). This bundle can be used to update the firmware using the SUM application.

WARNING:

·         After January 1st, 2017, some newer versions of Firefox and Internet Explorer browsers may stop accepting the existing SHA1 based iLO SSL certificates. Although most browsers will be offering a user-override process that will allow a SHA-1 certificate to be used after displaying a warning, HPE recommends that users switch to using SHA-2 certificates on or before that date for continued secure access to HPE Integrated Lights-Out 3 (iLO 3) web GUI and Integrated Remote Console (IRC) applications. For more information, see advisory c05315789.


Getting a SHA2 certificate:

o   If the users have imported a SSL certificate signed by trusted Certificate Authority, the users can double check if the certificate uses a SHA2 based signature algorithm.

o   If the iLO is using a self-generated certificate, then users can use the iLO ‘SO’ command or iLO Web GUI to generate a new SHA2 based SSL certificate for iLO post firmware upgrade.

For details on how to generate and import a certificate, you may consult the HPE Integrity iLO 3 Operations Guide available at http://h20628.www2.hpe.com/km-ext/kmcsdirect/emr_na-c02111169-8.pdf (under ‘Using iLO3’, in the ‘Administration’ section, see ‘Certificate Settings’ section, ‘Table 31 Import Certificate description’).

Note:

Refer to SUM 7.6.0 User Guide and Release notes for more information.

UPDATE RECOMMENDATION: Recommended

HPE recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [ ] Critical
     [ ]  Panic,  [X]  Hang,  [  ]  Abort,   [ ]  Corruption,  [  ]  Memory Leak,
     [ ]  Other: Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [X]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release

SUPERSEDES:
Smart Update Firmware Bundle
Bundle Version : 27.00

System Firmware Version: 1.96
FPGA Firmware Version: 2.02
iLO-3 Firmware Version: 01.58.01
Power Monitor Firmware Version: 02.09

Smart Update Manager (SUM)
SUM Version: 7.5.0

PRODUCT MODEL(S):
HPE Integrity rx2800 i2 Server Rack-optimized/Data Center
HPE Integrity rx2800 i2 Carrier-Grade Server with DC Power
HPE Integrity rx2800 i2 Office Friendly Server

OPERATING SYSTEMS:
HP-UX 11i v3 OE Update Release for March 2010 (and later OE Releases)
OpenVMS 8.4

LANGUAGES:
International English

ENHANCEMENTS:

ENHANCEMENTS:

iLO 1.59.01: 

·         Starting with iLO version 1.59.01, the self-signed certificate generated by iLO will have a SHA2 based signature (instead of SHA1 based).

FIXES:

iLO 1.59.01: 

·         Fixed an issue where IRC (Integrated Remote Console) application sometimes did not load or work properly when accessed by a LDAP user.

PREREQUISITES:

For latest dependencies on SAS IO and LOM, refer to this matrix:
HPE Release Sets for rx2800 i2 servers

INSTALLATION INSTRUCTIONS:

Please review all instructions and the "Hewlett Packard Enterprise Support Tool License Terms" or your Hewlett Packard Enterprise support terms and conditions for precautions, scope of license, restrictions, and limitation of liability and warranties, before installing this package. It is important that you read and understand these instructions completely before you begin. This can determine your success in completing the firmware update.

NOTE: This version of SUM uses an Internet browser as the graphical user interface.  Currently supported browsers are:

 

Win2k8

Win2012

Win2016

SLES11

SLES12

RHEL6

RHEL7

IE 9, 10 or 11

x

x

x

 

 

 

 

Edge

 

 

x

 

 

 

 

FireFox 17 ESR

 

 

 

x

x

x

x

FireFox 18 or later

x

x

x

x

Chrome 24 or later

x

x

x

x

x

x

x

Important Note: SUM now uses port 63001 by default for pulling FW files from the server running SUM

A. Extracting and Running SUM

  1. Download the firmware bundle binary <filename>.exe or <filename>.tar.gz in a new folder on your system.
  2. Extract the bundle:
  3. The above steps will extract the contents of the bundle in the new folder where the bundle file is located. SUM and firmware components must reside in the same folder.
  4. Execute hpsum.bat (Windows) or hpsum.sh (Linux), located in the extracted folder, by logging as a user with Administrator or root privilege. Running hpsum will bring up a graphical user interface of the Smart Update Manager (SUM).

 

NOTE: SUM also provides a Command Line Interface (CLI) that allows user to perform scripted installations in silent mode. For more information refer to the SUM User Guide or the "CLIHelp.txt" file in the extracted folder.

 

 

B. Installing the Firmware Components using SUM - Graphical User Mode

  1. Welcome screen:
  2. For local updates on a Windows or Linux node, use Localhost Guided Update:
  1. For remote iLO nodes:
  1. For remote Windows, Linux, HP-UX and VMware nodes

Refer to SUM User Guide and Release notes for more information.

COMPATIBILITY/INTEROPERABILITY:

DETERMINING CURRENT VERSION:
SUM displays the current version of the firmware on the host. However user can also log in to the iLO-3 MP and use the following procedure to find out the current firmware versions.

  1. Establish a telnet session with the iLO-3 MP.
  2. Logon to the iLO-3 MP using the Administrator password.
  3. Type "CM" to enter the Command Menu.
  4. Type "SYSREV" to display system revision information. The following should be displayed if the current firmware is installed.

 SYSREV

 Revisions               Active         Pending
  -------------------------------------
 iLO FW               :  01.59.01
 System FW         :  01.96
 MHW FPGA       :  02.02
 Power Mon FW   :  02.09 
 
Front Panel HW  :  02.00  (This may differ. Hardware dependent.)
  PRS HW            :  02.06  (This may differ. 2.07 is OK too)
  IOH HW            :  02.02   (This may differ. Hardware dependent)

NOTE: If you see a revision in the “Pending” column, it means that this firmware component has been updated BUT the system was not power cycled to activate it. You can proceed with installing a new firmware version. A pending firmware update will be activated on the next power cycle.

KNOWN INSTALLATION ISSUES:

         To resolve this issue, enable the port traffic associated with the SUM application
         by performing the following steps
:

  1. Bring up McAfee Host Intrusion Prevention
  2. Select the Activity Log tab. Notice the entry in the Message column similar to the following: Blocked Incoming TCP from the HOST (x.x.x.x) during execution of SUM.
  3. Select the Firewall Policy tab.
  4. On the bottom of the screen, click Add (Add new rule).
  5. Use the following settings for the new firewall rules on your system.
    Action: Permit
    Protocol: IP - TCP
    Direction: Incoming
    Local Service: Single - http
    Remote Service: Range From: 1024 - To: 65535
    Address: Any Active
  6. Click OK to ensure new firewall rules have been implemented.
  7. Restart SUM.

DISCLAIMER:
The information in this document is subject to change without notice.

Hewlett Packard Enterprise makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett Packard Enterprise shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.

This document contains proprietary information that is protected by copyright. All rights are reserved. No part of this document may be reproduced, photocopied, or translated to another language without the prior written consent of Hewlett Packard Enterprise.
(C) Copyright 1994-2016 Hewlett Packard Enterprise Development L.P.

SUPERSEDES HISTORY:

ENHANCEMENTS:

iLO 1.58.01:

§  Users can now configure a security banner message to be displayed in the iLO login screen.

§  iLO now enables users to configure an idle session timeout for web based user interface.

§  An option is now provided in Integrity iLO3 to "Enforce AES/3DES" ciphers for network encryption.

§  Users are now able to create a custom CSR (Certificate Signing request) and to import a third party signed SSL certificate into iLO for secure iLO webGUI access.

§  Improved console performance from iLO version 1.56.02

Note
: For more information on these enhancements, refer to the latest HP Integrity iLO 3 Operations Guide.

SAS 6.22 (from 5.78):

SAS FW 6.42 (p411, p711m):

·         Added support for HP MSA 2040 Storage (supported with p411 and p711m only)

FIXES:

iLO 1.58.01:

·         Addressed the OpenSSL Poodle (Padding Oracle on Downgraded Legacy Encryption) vulnerability CVE-2014-3566 in iLO. Note: SSLv3 based connections to iLO webGUI are now disabled.

·         Fixed SSL/TLS MITM vulnerability CVE-2014-0224

·         Users can now successfully access the iLO3 GUI using Firefox version 23 or above.

·         iLO will now allow two simultaneous telnet connection attempts and five simultaneous SSH connection attempts.

·         A Telnet session to iLO would rarely hang during an operation such as FPL dump where continuous stream of data was being sent by iLO to the client. This is now fixed.

·         Fixed an issue where system firmware would occasionally de-configure one or more DIMMs reporting DIMM SPD Checksum errors due to a timeout during AC power cycle of the system.

·         Fixed an issue where iLO sometimes displayed incorrect power input voltage value in the Power Meter Readings page.

·         Disabled export cipher encryption in iLO3.

SFW 1.96:  

Fixes in SAS FW 6.42 (from 6.22):    

Fixes in SAS FW 6.22 (from version 5.78):

Fixes in Intel EFI version 4.3.02 for rx2800 i2 and i4 LOM (from 4.3.01):

·         NIC EFI driver update was failing on some cards shipped with a flash memory chip (Atmel 25DF041A) that did not support the EFI driver. EFI driver version 4.3.02 fixes this issue.

Fixes in Emulex Firmware 4.9.416.12 (from 4.2.401.2212)

§ Critical/Serious Defects

·         When ISL (Inter-Switch Link) is disabled to remote site, local storage access is also lost

·         IOCXGBE: Pause frame storm seen under DEAD state condition

§ Medium/Low Defects

·         IOCXGBE:  Flow control behavior is not functioning as expected 

·         Link status is shown as DOWN in HP-UX & HII (Human Interface Infrastructure) though the interface is UP in OA

Fixes in Emulex firmware 4.2.401.2212 (from 4.1.450.14):

 Fixes in NIC EFI driver 2.22.a1 (from 2.21.ac):

Bundle Version 26.36

ENHANCEMENTS:

UEFI Driver 5.2.59 (from 5.2.58) for AM225A, AM232A, AM233A:

FIXES:

iLO 1.55.02:

SFW 1.95:  

Bundle Version 26.35

ENHANCEMENTS:

FIXES:

The following issues are now fixed:

SFW 1.93:

iLO-3 1.54.03:

FPGA 2.02:

·         An iLO firmware hang may prevent reset via the iLO physical presence button; a fifteen (15) second button hold now generates a hardware reset signal regardless of iLO firmware state.

Bundle Version 26.34

ENHANCEMENTS:

·         None

FIXES:

Fixed an issue where a memory update operation may not complete properly when an L2 cache line encounters a second single bit data error. This may result in the possibility of undefined system behavior. See Intel Specification Update for more information. If Specification Update link does not work, HP recommend to go to www.intel.com  and search for the latest version of the Intel® Itanium® Processor 9300 Specification Update.

·         Fixed an issue where PAL returned no information on bus log overflow

·         Fixed an issue where an invalid log format may have been generated by hardware when multiple MLD errors occur in a small window

 Bundle Version 26.33

ENHANCEMENTS:
iLO

·         The  serial port can now be set permanently to AUX mode using a new option provided in iLO. AUX mode will be retained even after an AC power cycle.

FIXES:

iLO

·         The system iLO may hang if it remains up without being reset for days or weeks, and a system power cycle may be required to recover.

·         If an HP Remarketed system (product number: AH395AR, AH396AR, and AT112AR) is updated with bundle version 26.30, the product number will be reset to the factory default, which may cause warranty entitlement issues when calling HP for support.

Bundle Version 26.30

ENHANCEMENTS:
iLO

FIXES
The following issues have now been resolved:

iLO

SFW

Bundle Version : 26.21

ENHANCEMENTS:
iLO

FIXES:
iLO

Bundle Version : 26.20

ENHANCEMENTS:
iLO

Bundle Version : 26.12

ENHANCEMENTS:
SFW

FIXES:
SFW

iLO

Bundle Version : 26.06

ENHANCEMENTS:

SFW

iLO

FIXES:
SFW

iLO

Bundle Version : 21.07

ENHANCEMENTS:
None

FIXES:

INITIAL RELEASE:
HP Smart Update Linux Firmware Bundle
Bundle Version : 18.03

System Firmware Version: 01.03
FPGA Firmware Version : 01.13
iLO-3 Firmware Version : 01.20.17
Power Monitor Firmware Version: 02.09

HP Smart Update Manager (HP SUM)
HP SUM Version: 3.7.1

FEEDBACK
As we are continuing to improve the firmware management process we welcome your feedback on this document and on the firmware update process.
TEAM-FWupdateFeedback@groups.ext.hpe.com