Printable version

Drivers & software

** CRITICAL ** HP Integrity rx2800 i2 server firmware bundle (System and IO) – for Linux based HP Smart Update Manager

By downloading, you agree to the terms and conditions of the Hewlett Packard Enterprise Software License Agreement.
Note:  Some software requires a valid warranty, current Hewlett Packard Enterprise support contract, or a license fee.

Type: Firmware (Entitlement Required) - System
Version: 26.36(4 Apr 2013)
Operating System(s): HP-UX 11.31 (IA)
Microsoft Windows Server 2008 R2
OS Independent
OpenVMS v8.4
Multi-part download
File name: rx2800i2_fw_bndl_lin.tar.gz (132 MB)
File name: rx2800i2_fw_bndl_lin.tar.gz.md5sum (108 Bytes)
This bundle contains the HP Smart Update Manager (HP SUM) application with the firmware for HP Integrity rx2800 i2 Servers (System firmware (SFW), FPGA firmware, iLO-3 MP firmware & Power Monitor and IO firmware). This bundle can be used to update the firmware using the HP SUM application.

UEFI Driver 5.2.59 (from 5.2.58) for AM225A, AM232A, AM233A:

  •  Added Dynamic Network detection support

Prerequisites:

  • iLO-3 MP(s) must be on the network (reachable from local system) and have static IP or be configured with DHCP.
  • An http daemon, service or IDS (Intrusion Detection System) running in the local system may interfere with HP SUM connecting to remote hosts, hence these services may need to be disabled when HP SUM is running.
  • Please see the HP Smart Update Manager User Guide for any prerequisites required for HP SUM.
For latest dependencies on SAS IO and LOM, refer to this matrix:
HP Release Sets for rx2800 i2 and i4 servers

To ensure the integrity of your download, HPE recommends verifying your results with the following SHA-256 Checksum values:

fdaa91526602f4cdb0570885505e297beadb5cdb598e9bf86944f2f81b7a3f4e rx2800i2_fw_bndl_lin.tar.gz.md5sum
5735d26328b79335981a0d8cd187fbd4906ca2e4b3bb9319966bda67bd5760c0 rx2800i2_fw_bndl_lin.tar.gz

Reboot Requirement:
Reboot is required after installation for updates to take effect and hardware stability to be maintained.


Installation:
Please review all instructions and the "Hewlett-Packard Support Tool License Terms" or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and limitation of liability and warranties, before installing this package. It is important that you read and understand these instructions completely before you begin. This can determine your success in completing the firmware update.

NOTE: This version of HPSUM allows updating of I/O card firmware online on HP-UX.  Please review instructions for using this feature.

A. Extracting and Running HP SUM

  1. Download the firmware bundle binary <filename>.exe or <filename>.tar.gz in a new folder on your system.
  2. Extract the bundle:
    • Windows: double click <filename>.exe then click “Extract”
    • Linux: gunzip <filename>.tar.gz; tar -xvf <filename>.tar
  3. The above steps will extract the contents of the bundle in the new folder where the bundle file is located. HP SUM and firmware components will reside in the same folder.
  4. Execute hpsum, located in the extracted folder, by logging as a user with Administrator or root privilege.  Executing hpsum will bring up a graphical user interface of the HP Smart Update Manager (HP SUM).
NOTE: HP SUM also provides a Command Line Interface (CLI) that allows user to perform scripted installations in silent mode. For more information please refer to the HP SUM User Guide or the "CLIHelp.txt" file in the extracted folder.

B. Installing the Firmware Components using HP SUM - Graphical User Mode
  1. Welcome Screen:
    • Once started, a page displays with HP SUM introduction content on it. The introduction describes HP SUM, its usage and enhancements.
  2. Source Selections Screen:
    • The Source Selections screen allows you to choose directories where smart components are located.
    • The directory where HP SUM is running from is automatically added as the default repository.
    • You can optionally have HP SUM check downloads.hpe.com for additional firmware or software smart components.  This could include newer components for servers supported in this bundle, plus components for other server types.
    • HP SUM will build an inventory of firmware bundles - packages that can be used to update firmware.
    • Click the "Next" button to move on to the next step.
  3. Select Targets Screen:
    • This screen is used to specify which targets you want to update.
    • Targets can be added one at a time, or a range can be searched.
    • Credentials must be supplied for each target.
    • Once added, targets can also be managed in groups.  See the HP SUM user guide for details.
    • Click the “Next” button to move on to the next step.
    •  
    • NOTE on order of preforming updates: Any updates to OA, VC and iLO firmware should be done in one HP SUM session first, then exit HP SUM and perform updates to HP-UX I/O firmware in a separate HP SUM session. 
    • NOTE on HP-UX I/O firmware: If you want to update I/O card firmware online through HP-UX you must add an IP address for the production HP-UX OS as a target on this screen along with HP-UX root user credentials. 
    • NOTE for enclosures: The Onboard Administrator IP address can be added as the first target and HP SUM will find all of the servers and Virtual Connect in the enclosure automatically. A pop up dialog will appear suggesting to add the found associated targets. HP SUM will be able to use the OA credentials to log into the blades iLOs automatically.
    • NOTE: “localhost” is not applicable for installing the firmware updates included in this bundle.
  4. Review/Install Updates Screen:
    • The suggested updates for each target are displayed on this screen.
    • This screen also allows for retrieving details of the updates, selecting between available revisions, forcing downgrades and choosing reboot to activate options.
    • For more details and component level granularity, select the item and click the "Select Components" link.
      NOTE: If firmware is the latest or already up-to-date version, HP SUM displays the message "Already-up-to-date". You can override and choose to perform force reinstallation or downgrade the firmware by clicking the "Installation Option" and checking “Force Install” option.
      NOTE: Integrity System Firmware update supports delayed activation - where the new firmware gets downloaded to the iLO but is programmed only when you power down the system at a convenient time. Delayed activation is the default setting for SFW update. This setting can be changed by doing the following actions:
      • Click "Configure Now" on the Select Components page
      • Select the "Upload and Activate" checkbox.
        • If "Upload and Activate" is selected, HP SUM will do the following actions:
          • Send a graceful shutdown and power off request to the system as part of the update
          • Then power up the system after the System Firmware has been programmed.
        • If you choose to do the power off manually, the programming will take approximately 8 minutes to complete the programming operation before power can be turned on again.
    • NOTE: Integrity Superdome 2 nPartition firmware updates can be applied while the partition is Active, but the partition must be rebooted to have the firmware update take effect.  HP SUM defaults to not reboot Active partitions.  If you would like HP SUM to include the partition reboot as part of the firmware update process then:
      • Click “Select Devices” on the Select Components page
      • Click “Reboot to Activate” next to the Active partitions you  want to reboot.
    • If you choose to not continue with install on one or more targets, you can uncheck the box on the left of the target.
    • Updates can be scheduled for future times by clicking the “Schedule” button. Once schedules are defined, the “Install” button must still be clicked to activate the schedule.
    • Click the “Install” button to start update on all of the checked targets.
    • HP SUM will display the progress of the firmware update on each target.
    • A status and link to the logs will be displayed for each target at the end of the update.  

HP SUM User Guides: HP SUM KNOWN ISSUES:
  • HP SUM fails on Windows due to McAfee firewalls. This is a known issue with McAfee that McAfee firewalls block HP SUM traffic.
            To resolve this issue, enable the port traffic associated with the HP SUM application by performing the following steps:
  1. Bring up McAfee Host Intrusion Prevention
    • Windows Vista: From the system tray, click the McAfee icon -> Manage Features -> Host Intrusion Prevention
    • Windows 7: From the system tray, right click Host Intrusion Prevention icon -> Configure
  2. Select the Activity Log tab. Notice the entry in the Message column similar to the following: Blocked Incoming TCP from the HOST (x.x.x.x) during execution of HP SUM.
  3. Select the Firewall Policy tab.
  4. On the bottom of the screen, click Add (Add new rule).
  5. Use the following settings for the new firewall rules on your system.
    Action: Permit
    Protocol: IP - TCP
    Direction: Incoming
    Local Service: Single - http
    Remote Service: Range From: 1024 - To: 65535
    Address: Any Active
  6. Click OK to ensure new firewall rules have been implemented.
  7. Restart HP SUM.
  • During a Virtual Connect update, HP SUM may hang while reporting 100% complete for 30 minutes or more. In that case, exit HP SUM, verify the VC health and fix any reported errors. Then re-run HP SUM to verify if VC or other targets still need to be updated.
  • In some cases, target HP-UX nodes with more than 10 disks may hang in the "Discovering…” state.  If this happens, the target should be unchecked and the I/O FW update must be completed by manually copying the I/O component files (cp*.scexe) to the HP-UX system and executing them individually.
  • Do not use the “Reboot Now” button which appears after installing both an HP-UX target and its associated iLO in the same session, or the local machine running HP SUM may be rebooted unexpectedly along with the target system(s). Note: The “Reboot now” button only appears if you have not selected “Reboot to activate”.
    Alternatives are to use the option “Reboot to activate” before initiating the update so that HP SUM automatically reboots the target systems, or to manually reboot the target systems instead of using the “Reboot Now” button.
  • The error message "Unable to start hpsum session on remote target" may appear after adding a valid HP-UX target. One reason may be that the pciinfo module status has been changed. You may run the command "kcmodule –b yes -s pciinfo=best" and then retry adding the target.
  • If a target appears to hang with the status "Waiting for update on the associated host", exit HP SUM and restart the update on just that target.  This can happen if updates are attempted on OA, iLO and HP-UX all in the same HP SUM session.  The recommended update procedure is to update OA and iLO together in one session, then exit and update HP-UX I/O FW in a separate HP SUM session.
  • If you receive the message "Could not add the following requested repositories:" after selecting a directory to use with HP SUM, the HP SUM temporary directory must be removed and then HP SUM must be restarted.
    • Windows: From a command prompt enter: rmdir /S %temp%\hp_sum
    • Linux: From a shell prompt enter: rm –rf /tmp/hp_sum
  • If you receive the message "Connected to unknown SOAP server" while connecting to targets, another program is probably blocking HP SUM from using SSL port 443, close the other applications and try again. If the problem persists, please exit HP SUM and log out and log back in to clear any background processes that may be blocking HP SUM.
  • Refer to the HP SUM Release Notes for complete list of known HP SUM installation issues.

End User License Agreements:
Hewlett-Packard End User License Agreement
gSOAP Software End User License Agreement


Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [ ]  Panic,  [X]  Hang,  [  ]  Abort,   [ ]  Corruption,  [  ]  Memory Leak,
     [X]  Other: Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


Important:
TITLE: HP Smart Update Firmware - HP Integrity rx2800 i2 Rack-optimized/Data Center Servers (AH395A) or Carrier-Grade Servers (AT112A) or Office Friendly Server (OFS - AH396A) Firmware Bundle

READ BEFORE INSTALLING:
Please download the latest release notes for this release available here.

Note : View the Installation Instructions to know about Important Firmware Dependencies.

VERSION: 
HP Smart Update Firmware Bundle

Bundle Version : 26.36
System Firmware Version: 1.95
FPGA Firmware Version: 2.02
iLO-3 Firmware Version: 01.55.02
Power Monitor Firmware Version: 02.09

I/O Firmware Flash components (updates recommended):
rx2800 i2 built-in p410i SAS firmware: 5.78
Add-in Smart Array Adapters firmware bundle 2012.11.30:
    p411 : 5.78
InfiniBand Adapters firmware bundle 2012.11.30:
   HP 4X QDR Infiniband (592519-B21): 2.9.1000
Emulex Adapters firmware bundle 2013.01.31:
    1-port/2-port 4 Gb FC + 1000BT AD221A, AD222A, AD393A: FC ROM:  2.82x4, FC EFI:  4.01a5; LAN 4.3.01 
    1-port/2-port 8 Gb FC AH402A, AH403A: ROM:  2.02x2, EFI: 4.01a5
    NC552SFP 10Gb Flex-10 AT118A: ROM:  4.1.450.14 , EFI:  2.21AC
    2-port CN1000E AT111A: LAN & FC ROM:  4.1.450.14, LAN EFI:  2.21AC, FC EFI: 5.02A4
    8 Gb FC/10 Gb LAN AT094A: LAN ROM: 4.1.450.14, LAN EFI:  2.21AC , FC ROM:  2.02x2 , FC EFI:  4.01a5 
Intel and Broadcom Adapters firmware bundle 2012.11.30(b)
    rx2800 i2 embedded NIC: 4.3.01
    2-port/4-port 1000Base Ethernet AD337A, AD338A, AD339A: EFI 4.3.01
    4 Gb FC/1000Base Ethernet AD221A, AD222A, AD393A: EFI 4.3.01
    2-port 10 GbE AM225A, AM232A, AM233A: EFI 5.2.59, ROM 6.2.25
Qlogic Fibre Channel Host Bus Adapters firmware bundle: 2012.11.30
     1-port/2-port 8 Gb FC AH400A, AH401A: ROM 5.03.15, EFI 2.22
     
HP Smart Update Manager (HP SUM)
HP SUM Version : 5.3.5

Note:

  • On servers running HP-UX, I/O firmware may be updated using HP SUM 5.3.5 and the I/O components included in this bundle.
  • If a system FW update is pending, it will be activated at next server power off, and server can be powered on only after the firmware activation completes.  
    • To verify if a system FW update is pending, run the iLO3 MP “SYSREV” command and check if the Pending column shows any version for “System FW”.
    • Warning: If you reset the system while the SFW update is pending, the server may not be able to reboot due to a firmware mismatch between SFW and iLO. If that’s the case, power off the server to enable the new SFW activation and then power the server back on after activation is complete.
    • While the server is powered off, you can monitor the progress of the system firmware activation by running the iLO3 MP “FW” command from the Command Menu (CM). 
DESCRIPTION:
This bundle contains the HP Smart Update Manager (HP SUM) application with the firmware for HP Integrity rx2800 i2 Servers (System firmware (SFW), FPGA firmware, iLO-3 MP firmware & Power Monitor and IO firmware). This bundle can be used to update the firmware using the HP SUM application.

Note:
  • This bundle supports firmware update for all modes of HP Integrity rx2800 i2 server.
  • It is required to have appropriate SAS RAID firmware (version 5.78) and LAN-On-Motherboard (LOM) firmware (version 4.3.01 or later) installed on your server along with this firmware bundle, available on http://www.hp.com
    •  Current versions can be checked using the HP-UX commands “ioscan --kfnd ciss”, “sautil /dev/cissx vpd” and “nwmgr --q vpd --c lan0”
  • Any updates to the information below will be available on the release notes for HP Integrity rx2800 i2 Servers Bundle for HP Smart Update Manager, available on http://www.hp.com/
Refer to HP SUM 5.3.5 User Guide and Release notes for more information.

SUPERSEDES: 
HP Smart Update Firmware Bundle
Bundle Version : 26.35

System Firmware Version: 1.93
FPGA Firmware Version: 2.02
iLO-3 Firmware Version: 01.54.03
Power Monitor Firmware Version: 02.09

HP Smart Update Manager (HP SUM)
HP SUM Version : 5.2.0

PRODUCT MODEL(S):
HP Integrity rx2800 i2 Server Rack-optimized/Data Center 
HP Integrity rx2800 i2 Carrier-Grade Server with DC Power 
HP Integrity rx2800 i2 Office Friendly Server 

OPERATING SYSTEMS:
HP-UX 11i v3 OE Update Release for March 2010 (and later OE Releases)
Microsoft Windows Server 2008 R2
OpenVMS 8.4 

LANGUAGES:
International English

KNOWN FIRMWARE ISSUES:
None

 
DISCLAIMER:
The information in this document is subject to change without notice.
Hewlett-Packard makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.
This document contains proprietary information that is protected by copyright. All rights are reserved. No part of this document may be reproduced, photocopied, or translated to another language without the prior written consent of Hewlett-Packard Company.

(C) Copyright 1994-2013 Hewlett-Packard Development Company, L.P.

FEEDBACK 
As we are continuing to improve the firmware management process we welcome your feedback on this document and on the firmware update process. 
TEAM-FWupdateFeedback@external.groups.hp.com

Notes:

HP Smart Update Manager (HP SUM) for Linux is supported on following Linux Operating System flavors:

  • Red Hat Enterprise Linux 6 Server (x86-64)
  • Red Hat Enterprise Linux 6 Server (x86)
  • Red Hat Enterprise Linux 5 Server (x86-64)
  • Red Hat Enterprise Linux 5 Server (x86)
  • SUSE LINUX Enterprise Server 11 (AMD64/EM64T)
  • SUSE LINUX Enterprise Server 11 (x86)
  • SUSE LINUX Enterprise Server 10 (AMD64/EM64T)
  • SUSE LINUX Enterprise Server 10 (x86)

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [ ]  Panic,  [X]  Hang,  [  ]  Abort,   [ ]  Corruption,  [  ]  Memory Leak,
     [X]  Other: Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


iLO 1.55.02:

  • Fixed a security vulnerability issue that exists in HP Integrated Lights-Out (iLO 3) versions 1.53.02 and lower for HP rx2800 i2. The vulnerability could be remotely exploited resulting in disclosure of information.  See SSRT100934 for more details.
  • When the serial port MUX is set to “Persistent AUX” mode and the server is A/C power cycled, the serial port MUX will retain the “persistent AUX” mode setting and will not reset to “iLO” mode.
  • The severity of the events “VOLTAGE_FAULT and VOLTAGE_LOW_CRITICAL” have been increased so that power supply events in SFM such as  "power supply failed or disconnected" and "power supply AC lost" will now be reported in HP-UX syslog for easier monitoring.
  • Fixed an issue where an idle SSH session to iLO3 from a PUTTY client may freeze or may get disconnected with an error message “Incoming packet was garbled on decryption”.
  • SSH connection to iLO from an OpenSSH 5.9 client will now work even when a reduced list of key-exchange algorithm is not indicated.
  • IPMI chassis status now properly reflects the sensor status when cover is off or after a fan failure.
  • MP-iLO’s 15 minute auto-logoff no longer truncates a V-media Create ISO Image.
  • Fixed an issue where specific systems would very rarely hang with the "BOOT_NOT_DETECTED" error after an A/C power cycle.
SFW 1.95:  
  • Fixed an issue where the execution of the SetTime firmware call might cause short system hangs of 12.75 seconds. Occasionally longer system hangs were observed. The problem may cause affected servers running in a Serviceguard cluster configuration with member timeout values slightly higher than the delay to fail with a Serviceguard INIT due to expiration of the Serviceguard safety timer. Note: other third party clustering products are affected by this issue too.
  • Fixed an issue where a failed CPU socket would not get de-configured, causing the system to hang and not boot to EFI shell, or to continuously reboot, with the error "BOOT_CPU_LATE_SELF_TEST_FAIL".
Boot Code 6.2.25 (from 6.2.21) for AM225A/AM232A/AM233A:
  • In some cases, only 2 PCI functions are exposed in multi-function mode.
 HBA FC FW version 2.02x2 (from 2.00a4) for AT094A, AH402A, AH403A:
  • I/O “illegal frames received” errors may be reported intermittently by FC disks linked through an 8Gb HP/Emulex FC card if a disk reset is performed during heavy I/O load.
TITLE: HP Smart Update Firmware - HP Integrity rx2800 i2 Rack-optimized/Data Center Servers (AH395A) or Carrier-Grade Servers (AT112A) or Office Friendly Server (OFS - AH396A) Firmware Bundle

READ BEFORE INSTALLING:
Please download the latest release notes for this release available here.

Note : View the Installation Instructions to know about Important Firmware Dependencies.

VERSION: 
HP Smart Update Firmware Bundle

Bundle Version : 26.36
System Firmware Version: 1.95
FPGA Firmware Version: 2.02
iLO-3 Firmware Version: 01.55.02
Power Monitor Firmware Version: 02.09

I/O Firmware Flash components (updates recommended):
rx2800 i2 built-in p410i SAS firmware: 5.78
Add-in Smart Array Adapters firmware bundle 2012.11.30:
    p411 : 5.78
InfiniBand Adapters firmware bundle 2012.11.30:
   HP 4X QDR Infiniband (592519-B21): 2.9.1000
Emulex Adapters firmware bundle 2013.01.31:
    1-port/2-port 4 Gb FC + 1000BT AD221A, AD222A, AD393A: FC ROM:  2.82x4, FC EFI:  4.01a5; LAN 4.3.01 
    1-port/2-port 8 Gb FC AH402A, AH403A: ROM:  2.02x2, EFI: 4.01a5
    NC552SFP 10Gb Flex-10 AT118A: ROM:  4.1.450.14 , EFI:  2.21AC
    2-port CN1000E AT111A: LAN & FC ROM:  4.1.450.14, LAN EFI:  2.21AC, FC EFI: 5.02A4
    8 Gb FC/10 Gb LAN AT094A: LAN ROM: 4.1.450.14, LAN EFI:  2.21AC , FC ROM:  2.02x2 , FC EFI:  4.01a5 
Intel and Broadcom Adapters firmware bundle 2012.11.30(b)
    rx2800 i2 embedded NIC: 4.3.01
    2-port/4-port 1000Base Ethernet AD337A, AD338A, AD339A: EFI 4.3.01
    4 Gb FC/1000Base Ethernet AD221A, AD222A, AD393A: EFI 4.3.01
    2-port 10 GbE AM225A, AM232A, AM233A: EFI 5.2.59, ROM 6.2.25
Qlogic Fibre Channel Host Bus Adapters firmware bundle: 2012.11.30
     1-port/2-port 8 Gb FC AH400A, AH401A: ROM 5.03.15, EFI 2.22
     
HP Smart Update Manager (HP SUM)
HP SUM Version : 5.3.5

Note:
  • On servers running HP-UX, I/O firmware may be updated using HP SUM 5.3.5 and the I/O components included in this bundle.
  • If a system FW update is pending, it will be activated at next server power off, and server can be powered on only after the firmware activation completes.  
    • To verify if a system FW update is pending, run the iLO3 MP “SYSREV” command and check if the Pending column shows any version for “System FW”.
    • Warning: If you reset the system while the SFW update is pending, the server may not be able to reboot due to a firmware mismatch between SFW and iLO. If that’s the case, power off the server to enable the new SFW activation and then power the server back on after activation is complete.
    • While the server is powered off, you can monitor the progress of the system firmware activation by running the iLO3 MP “FW” command from the Command Menu (CM). 
DESCRIPTION:
This bundle contains the HP Smart Update Manager (HP SUM) application with the firmware for HP Integrity rx2800 i2 Servers (System firmware (SFW), FPGA firmware, iLO-3 MP firmware & Power Monitor and IO firmware). This bundle can be used to update the firmware using the HP SUM application.

Note:
  • This bundle supports firmware update for all modes of HP Integrity rx2800 i2 server.
  • It is required to have appropriate SAS RAID firmware (version 5.78) and LAN-On-Motherboard (LOM) firmware (version 4.3.01 or later) installed on your server along with this firmware bundle, available on http://www.hp.com
    •  Current versions can be checked using the HP-UX commands “ioscan --kfnd ciss”, “sautil /dev/cissx vpd” and “nwmgr --q vpd --c lan0”
  • Any updates to the information below will be available on the release notes for HP Integrity rx2800 i2 Servers Bundle for HP Smart Update Manager, available on http://www.hp.com/
Refer to HP SUM 5.3.5 User Guide and Release notes for more information.

SUPERSEDES: 
HP Smart Update Firmware Bundle
Bundle Version : 26.35

System Firmware Version: 1.93
FPGA Firmware Version: 2.02
iLO-3 Firmware Version: 01.54.03
Power Monitor Firmware Version: 02.09

HP Smart Update Manager (HP SUM)
HP SUM Version : 5.2.0

PRODUCT MODEL(S):
HP Integrity rx2800 i2 Server Rack-optimized/Data Center 
HP Integrity rx2800 i2 Carrier-Grade Server with DC Power 
HP Integrity rx2800 i2 Office Friendly Server 

OPERATING SYSTEMS:
HP-UX 11i v3 OE Update Release for March 2010 (and later OE Releases)
Microsoft Windows Server 2008 R2
OpenVMS 8.4 

LANGUAGES:
International English

KNOWN FIRMWARE ISSUES:
None

 
DISCLAIMER:
The information in this document is subject to change without notice.
Hewlett-Packard makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.
This document contains proprietary information that is protected by copyright. All rights are reserved. No part of this document may be reproduced, photocopied, or translated to another language without the prior written consent of Hewlett-Packard Company.

(C) Copyright 1994-2013 Hewlett-Packard Development Company, L.P.

FEEDBACK 
As we are continuing to improve the firmware management process we welcome your feedback on this document and on the firmware update process. 
TEAM-FWupdateFeedback@external.groups.hp.com
Version:29.00 (19 Dec 2017)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


iLO 2.01.03: 

  • Fixed an issue where the HP-UX 1603 installation failed on BL860c i2 server when attempted through virtual media or DVD drive that was connected to the enclosure
  • vMedia applet can now be launched with Java 7 update 51 without requiring to add iLO URL
  • For browsers that do not support Java plugins or applets, virtual media applet can now be launched through Java web start launcher

p410i version 6.64:

  • Corrected thermal behavior with HDDs
Enhancements

iLO 2.01.03: 

  • The firmware implements new security enhancements which include support for TLS 1.2 and stronger cipher suites.
  • Enhanced robustness of iLO3 firmware to prevent firmware failure during terminal flow control

p410i version 6.64:

  • Performance enhancement when a drive starts to degrade due to excessive recovered media errors
  • Enhanced the controller SAS discovery logic to tolerate devices that may be resetting

Version:28.00 (3 Jan 2017)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


iLO 1.59.01: 

  • Fixed an issue where IRC (Integrated Remote Console) application sometimes did not load or work properly when accessed by a LDAP user.

Enhancements

iLO 1.59.01: 

  • Starting with iLO version 1.59.01, the self-signed certificate generated by iLO will have a SHA2 based signature (instead of SHA1 based).


Version:27 (31 Mar 2016)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in iLO 1.58.01:

  • Addressed the OpenSSL Poodle (Padding Oracle on Downgraded Legacy Encryption) vulnerability CVE-2014-3566 in iLO. Note: SSLv3 based connections to iLO webGUI are now disabled.

  • Fixed SSL/TLS MITM vulnerability CVE-2014-0224

  • Users can now successfully access the iLO3 GUI using Firefox version 23 or above.

  • iLO will now allow two simultaneous telnet connection attempts and five simultaneous SSH connection attempts.

  • A Telnet session to iLO would rarely hang during an operation such as FPL dump where continuous stream of data was being sent by iLO to the client. This is now fixed.

  • Fixed an issue where system firmware would occasionally de-configure one or more DIMMs reporting DIMM SPD Checksum errors due to a timeout during AC power cycle of the system.

  • Fixed an issue where iLO sometimes displayed incorrect power input voltage value in the Power Meter Readings page.

  • Disabled export cipher encryption in iLO3.

Fixes in SFW 1.96 

  • In an HP Virtual Machine (HPVM) environment, the OS would rarely fail to capture CMC and MCA error logs. This is now fixed.
  • A server containing a PCI card which does not support PCI extended capability would sometimes hang without any error message while handling an MCA. This is now fixed.

Fixes in SAS FW 6.42 (from 6.22):    

  • Resolved an issue where, after doing a mode toggle at EFI ORCA, the controller name would not be displayed when running the command: “reconnect –r”
  • Resolved an issue where P411 (HBA mode) in Multi Initiator configuration, connected to share disk,  failed to boot from primary path at EFI
  • Added a new POST message 1813 to indicate bad or failed battery charge circuit
  • No longer display a POST error message 1805 “Cache Module Super–Cap is not installed” when the controller is configured to work without super-capacitors.

Fixes in SAS FW 6.22 (from version 5.78):

  • HP-UX boot may fail with READ Error (elf_load) if boot volume is built on SAS Logical Volume larger than 2TB
  • On rare occasions during power-up of an HP DS2200sb, the expander backplane would be unresponsive and the attached Smart Array Controller would not be allowed to discover attached drives.
  • The training of the DDR2 DIMMs has been improved in order to prevent the rare occasions when 1783 POST error messages displays followed by an unresponsive controller.
  • Protection has been added to prevent potential Smart Array controller hangs under rare conditions when hot-adding hard drives.
  • The Open Connection timeout was reduced to 900 microseconds so that SAS connections terminate gracefully and data transfer stalls are prevented.
  • The Smart Array controller would not connect to hard drives within 20ms under heavy stress.

Fixes in Intel EFI version 4.3.02 for rx2800 i2 and i4 LOM (from 4.3.01):

  • NIC EFI driver update was failing on some cards shipped with a flash memory chip (Atmel 25DF041A) that did not support the EFI driver. EFI driver version 4.3.02 fixes this issue.

Fixes in Emulex Firmware 4.9.416.12 (from 4.2.401.2212)

  • Critical/Serious Defects

    • When ISL (Inter-Switch Link) is disabled to remote site, local storage access is also lost

    • IOCXGBE: Pause frame storm seen under DEAD state condition

  • Medium/Low Defects

    • IOCXGBE:  Flow control behavior is not functioning as expected 

    • Link status is shown as DOWN in HP-UX & HII (Human Interface Infrastructure) though the interface is UP in OA

Fixes in Emulex firmware 4.2.401.2212 (from 4.1.450.14):

  • Critical: As the result of auto negotiation failure, the connection between LOM and ProCurve 6120XG may link up at 1Gbps instead of 10Gbps. This occurs intermittently (as often as once in 10 retries) after executing "Reset Server blade #" from the OA CLI.
    Affected Products - All BE3 based Cards and LOMs. This is also seen with 10G passthrough Interconnect module.
  • Boot failure might be seen after running commands "reconnect -r", "map -r" commands at EFi environment.
  • Boot from SAN intermittently fails during EFI bootstrap of a FCoE device that is busy.
  • FCOE EFI version truncated in VPD data that is displayed by ODE-FCFUPDATE tool at EFI.
  • On HP-UX the fcoc port driver state is displayed as AUTHENTICATION/DISCOVERY when fcocutil command is run to check the port information

 Fixes in NIC EFI driver 2.22.a1 (from 2.21.ac):

  • Reset to Defaults restores wrong power configuration. Reset to Default is issued from Device Manager->Emulex 10G NIC-> R/r or Erase Configuration;
    Symptom - Restoring the defaults shows an HP unsupported option: MultiChannel Option
Enhancements

iLO 1.58.01:

  • Users can now configure a security banner message to be displayed in the iLO login screen.

  • iLO now enables users to configure an idle session timeout for web based user interface.

  • An option is now provided in Integrity iLO3 to "Enforce AES/3DES" ciphers for network encryption.

  • Users are now able to create a custom CSR (Certificate Signing request) and to import a third party signed SSL certificate into iLO for secure iLO webGUI access.

  • Improved console performance from iLO version 1.56.02

    Note: For more information on these enhancements, refer to the latest HP Integrity iLO 3 Operations Guide

SAS 6.22 (from 5.78):

  • The maximum boot disk size supported with the LVM boot layout is enhanced from 2TB to 16TB with the release of fw version 6.22 and HP-UX B.11.31.1303

  • HBA/RAID mode toggle support is now available within ORCA. (Mode Toggle only supported for P410i controllers)

SAS FW 6.42 (p411, p711m):

  • Added support for HP MSA 2040 Storage (supported with p411 and p711m only)

Version:26.36 (4 Apr 2013)
Fixes

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [ ]  Panic,  [X]  Hang,  [  ]  Abort,   [ ]  Corruption,  [  ]  Memory Leak,
     [X]  Other: Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


iLO 1.55.02:

  • Fixed a security vulnerability issue that exists in HP Integrated Lights-Out (iLO 3) versions 1.53.02 and lower for HP rx2800 i2. The vulnerability could be remotely exploited resulting in disclosure of information.  See SSRT100934 for more details.
  • When the serial port MUX is set to “Persistent AUX” mode and the server is A/C power cycled, the serial port MUX will retain the “persistent AUX” mode setting and will not reset to “iLO” mode.
  • The severity of the events “VOLTAGE_FAULT and VOLTAGE_LOW_CRITICAL” have been increased so that power supply events in SFM such as  "power supply failed or disconnected" and "power supply AC lost" will now be reported in HP-UX syslog for easier monitoring.
  • Fixed an issue where an idle SSH session to iLO3 from a PUTTY client may freeze or may get disconnected with an error message “Incoming packet was garbled on decryption”.
  • SSH connection to iLO from an OpenSSH 5.9 client will now work even when a reduced list of key-exchange algorithm is not indicated.
  • IPMI chassis status now properly reflects the sensor status when cover is off or after a fan failure.
  • MP-iLO’s 15 minute auto-logoff no longer truncates a V-media Create ISO Image.
  • Fixed an issue where specific systems would very rarely hang with the "BOOT_NOT_DETECTED" error after an A/C power cycle.
SFW 1.95:  
  • Fixed an issue where the execution of the SetTime firmware call might cause short system hangs of 12.75 seconds. Occasionally longer system hangs were observed. The problem may cause affected servers running in a Serviceguard cluster configuration with member timeout values slightly higher than the delay to fail with a Serviceguard INIT due to expiration of the Serviceguard safety timer. Note: other third party clustering products are affected by this issue too.
  • Fixed an issue where a failed CPU socket would not get de-configured, causing the system to hang and not boot to EFI shell, or to continuously reboot, with the error "BOOT_CPU_LATE_SELF_TEST_FAIL".
Boot Code 6.2.25 (from 6.2.21) for AM225A/AM232A/AM233A:
  • In some cases, only 2 PCI functions are exposed in multi-function mode.
 HBA FC FW version 2.02x2 (from 2.00a4) for AT094A, AH402A, AH403A:
  • I/O “illegal frames received” errors may be reported intermittently by FC disks linked through an 8Gb HP/Emulex FC card if a disk reset is performed during heavy I/O load.
Enhancements

UEFI Driver 5.2.59 (from 5.2.58) for AM225A, AM232A, AM233A:

  •  Added Dynamic Network detection support

Version:26.35 (31 Oct 2012)
Fixes

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [ ]  Panic,  [X]  Hang,  [  ]  Abort,   [ ]  Corruption,  [  ]  Memory Leak,
     [  ]  Other: Risk to mission critical environments Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


FIXES:

SFW 1.93:

  • Duplicate SFM event 100819 might be displayed after replacing a CPU and booting a system.
  • In presence of a 2-slot I/O riser card, HP-UX ioscan might display an extra slot or syslog might show ACPI warnings similar to "could not find bd for ACPI handle".
  • System might take many extra minutes to boot to EFI if unreadable media is in DVD drive.
iLO-3 1.54.03:
  • Added functionality to disable iLO reset request from the FPGA while firmware is being programmed.
  • iLO serial task errors might cause an iLO hang.
  • iLO internal task priority changed to better insure that the watchdog timer task will reset iLO when necessary.
  • The virtual keyboard and mouse might stop working after an MP reset with OpenVMS.
FPGA 2.02:
  • An iLO firmware hang might prevent reset via the iLO physical presence button; a fifteen (15) second button hold now generates a hardware reset signal regardless of iLO firmware state.

Version:26.34 (3 Oct 2012)
Fixes

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [X]  Panic,  [X]  Hang,  [  ]  Abort,   [X]  Corruption,  [  ]  Memory Leak,
     [  ]  Other: Risk to mission critical environments Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


  • Fixed an issue where a memory update operation may not complete properly when an L2 cache line encounters a second single bit data error. This may result in the possibility of undefined system behavior. See Intel Specification Update for more information. If Specification Update link does not work, HP recommend to go to www.intel.com and search for the latest version of the Intel® Itanium® Processor 9300 Specification Update.
  • Fixed an issue where PAL returned no information on bus log overflow
  • Fixed an issue where an invalid log format may have been generated by hardware when multiple MLD errors occur in a small window

Version:26.21 (17 Oct 2011)
Fixes

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability. 

 [  ] Critical 
     [  ]  Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak, 
     [  ]  Other: Risk to mission critical environments Security 
     [  ]  Hardware Enablement,  [  ] Software Enablement 
 [  ]  Recommended 
 [X]  Optional 
     [X] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical 
 [  ] Initial Customer Release 


iLO

  • Fixed an issue where the web GUI could show the fan running at over 100% of maximum speed.
Enhancements

iLO

  • Support HP Integrity rx2800 i2 Carrier-Grade Server with DC Power Server (Telco/NEBS certified) and Thermal Policy

Version:26.12 (14 Sep 2011)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [  ] Critical
     [  ]  Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak,
     [  ]  Other: Risk to mission critical environments Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [X]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


SFW

  • Illegal memory configurations could cause a system abort during boot after a DIMM de-allocation. Now, the system will boot with reduced memory and display appropriate alerts.
  • Fixed an issue where CMC (Correctable Machine Check) log may not be generated after a recoverable LLC (Last Level Cache) error
iLO
  • The iLO GUI, System Health screen, no longer displays Altitude Eq Temperature because this sensor is NOT a temperature sensor and it did not display correct information.
  • Updated the Event Dictionary
Enhancements

SFW

  • Enable support for SAS tape boot (requires to use HP Integrity Smart Array firmware (SAS IO firmware) version 5.06 or later).
  • Added extra debug logging for CPU "uncore" during a system abort.

Version:26.06 (25 May 2011)
Fixes

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

However, if the systems are used in Mission Critical environments, then HP recommends that the update to this revision of firmware be performed during the next system maintenance period in order to improve system reliability.

[X] Critical
     [  ]  Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak,
     [X]  Other: Risk to mission critical environments Security
     [  ]  Hardware Enablement,  [X] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


SFW

  • EFI shell extended characters were forced to an off state when entering the boot manager and restored to their previous state when returning to the shell
  • The level 5 IODISC_RP_LINK_TRAIN_ERR event could be erroneously displayed and cause HP-UX to fail to discover the IPMI device
  • Certain events were not sent while in virtual mode during system OS shutdown
  • A failed DIMM would no longer show as de-allocated after reboot
  • The SM BUS speed was set too high during an MCA, potentially leading to nested MCAs
  • Corrected memory interleaving problem causing MCA in HP rx2800 i2 server with 8x16GB and 4x4GB DIMMs
iLO
  • A rare issue occurred in which disconnecting Web SSL users from the Web interface on the "Active Users" tab of the "Status Summary Page" could disallow subsequent web connections. This could be remedied by resetting iLO from the TUI(Terminal User Interface).
  • The iLO reset command could be performed from the CLI(Command Line Interface) (xd –r) or the GUI while a FW update was in progress.
  • During a FW upgrade, an iLO reset from the iLO GUI was reported to be successful at resetting the iLO although the reset was not successful
  • The iLO command prompt could hang from invalid or missing parameters. This could be remedied by resetting from iLO GUI or using SSH exec "xd -r"
  • iLO GUI "system health" page may not load completely on a fully loaded system.
  • Issues occurred with command line LDAP usage
  • A dropped LAN connection during firmware update could cause a firmware update command or HP SUM command to cease operation. iLO now detects the dropped connection, and reports the error.
  • HP SUM failed to successfully update HP rx2800 i2 server with mixed Firmware versions.
  • iLO TUI(Terminal User Interface) PR command and "power & reset" GUI page would fail if firmware upgrade was in process.
  • The iLO GUI, System Health screen, no longer displays Altitude Eq Temperature because this sensor is NOT a temperature sensor and it did not display correct information.
Enhancements

  • Support for power management from iLO and OS including Advanced Power Capping and Power Regulation
SFW
  • System now generates event for USB over-current condition at EFI
  • Improved the analysis of MCA logs in case of uncorrectable errors by extending data reporting
  • Improved internal tracking of correctable memory errors count on x8 DRAMs
iLO
  • Viewing the forward progress log is now supported in the iLO GUI
  • Availability and usability have been enhanced.

Version:21.07 (18 Feb 2011)
Fixes

Upgrade Requirement:
Critical - HP requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [  ]  Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak,
     [  ]  Other __________
     [  ]  Hardware Enablement,  [X] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


  • Fixed an issue where the “String buffer too small” error message could be displayed during a network installation of the server, eventually leading to a system panic.
  • Improved boot stability by fixing several potential occurrences of MCAs during boot.
  • Health state does not return to 'OK' when temperature goes from Critical to OK. In order to clear this error a system power cycle was required.
  • Fixed an issue in which the DIMM Slot location for DIMM errors was being reported as decimal numbers when it should have been reported as hexadecimal numbers.
  • An issue in which LDAP did not expect the format user@domain.com has been fixed in the iLO web GUI. The problem still exists in the iLO CLI. The work around is to configure the LDAP server to use an alternative format.
  • The System Health Page in the iLO Web GUI now displays temperatures appropriately.
  • An issue in which the VMEDIA connections event was logged without an IP address has been fixed.
  • An issue with the rare loss of an EFI configuration change has been addressed.
  • vMedia performance and reliability has been improved.
  • Error handling/containment/logging has been improved.
  • Fixed iLO3 Web GUI’s System Inventory page [?] Help icon that lead to error.
  • Fatal fan state should now display fatal in the iLO Web GUI instead of warning.
  • Pending firmware state with system power ON will now get cleared when AC power loss is detected.
  • Power Supply failed state is now persistent when system is turned off.
  • iLO Web GUI will no longer show fan units as failed after completion of a pending SFW update.
  • Issue of locator UID status displaying not available after SFW upgrade is now fixed.
  • Issue of empty IO Slots reported as occupied is fixed.

Version:18.03 (8 Feb 2011)
Enhancements

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

UPDATE RECOMMENDATION: Initial Customer Release

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [  ] Critical
     [  ]  Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak,
     [  ]  Other __________
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [X] Initial Customer Release


Initial Release


Type: Firmware (Entitlement Required) - System
Version: 26.36(4 Apr 2013)
Operating System(s):
HP-UX 11.31 (IA)
Microsoft Windows Server 2008 R2
OS Independent
OpenVMS v8.4

Description

This bundle contains the HP Smart Update Manager (HP SUM) application with the firmware for HP Integrity rx2800 i2 Servers (System firmware (SFW), FPGA firmware, iLO-3 MP firmware & Power Monitor and IO firmware). This bundle can be used to update the firmware using the HP SUM application.

Enhancements

UEFI Driver 5.2.59 (from 5.2.58) for AM225A, AM232A, AM233A:

  •  Added Dynamic Network detection support

Installation Instructions

Prerequisites:

  • iLO-3 MP(s) must be on the network (reachable from local system) and have static IP or be configured with DHCP.
  • An http daemon, service or IDS (Intrusion Detection System) running in the local system may interfere with HP SUM connecting to remote hosts, hence these services may need to be disabled when HP SUM is running.
  • Please see the HP Smart Update Manager User Guide for any prerequisites required for HP SUM.
For latest dependencies on SAS IO and LOM, refer to this matrix:
HP Release Sets for rx2800 i2 and i4 servers

To ensure the integrity of your download, HPE recommends verifying your results with the following SHA-256 Checksum values:

fdaa91526602f4cdb0570885505e297beadb5cdb598e9bf86944f2f81b7a3f4e rx2800i2_fw_bndl_lin.tar.gz.md5sum
5735d26328b79335981a0d8cd187fbd4906ca2e4b3bb9319966bda67bd5760c0 rx2800i2_fw_bndl_lin.tar.gz

Reboot Requirement:
Reboot is required after installation for updates to take effect and hardware stability to be maintained.


Installation:
Please review all instructions and the "Hewlett-Packard Support Tool License Terms" or your Hewlett-Packard support terms and conditions for precautions, scope of license, restrictions, and limitation of liability and warranties, before installing this package. It is important that you read and understand these instructions completely before you begin. This can determine your success in completing the firmware update.

NOTE: This version of HPSUM allows updating of I/O card firmware online on HP-UX.  Please review instructions for using this feature.

A. Extracting and Running HP SUM

  1. Download the firmware bundle binary <filename>.exe or <filename>.tar.gz in a new folder on your system.
  2. Extract the bundle:
    • Windows: double click <filename>.exe then click “Extract”
    • Linux: gunzip <filename>.tar.gz; tar -xvf <filename>.tar
  3. The above steps will extract the contents of the bundle in the new folder where the bundle file is located. HP SUM and firmware components will reside in the same folder.
  4. Execute hpsum, located in the extracted folder, by logging as a user with Administrator or root privilege.  Executing hpsum will bring up a graphical user interface of the HP Smart Update Manager (HP SUM).
NOTE: HP SUM also provides a Command Line Interface (CLI) that allows user to perform scripted installations in silent mode. For more information please refer to the HP SUM User Guide or the "CLIHelp.txt" file in the extracted folder.

B. Installing the Firmware Components using HP SUM - Graphical User Mode
  1. Welcome Screen:
    • Once started, a page displays with HP SUM introduction content on it. The introduction describes HP SUM, its usage and enhancements.
  2. Source Selections Screen:
    • The Source Selections screen allows you to choose directories where smart components are located.
    • The directory where HP SUM is running from is automatically added as the default repository.
    • You can optionally have HP SUM check downloads.hpe.com for additional firmware or software smart components.  This could include newer components for servers supported in this bundle, plus components for other server types.
    • HP SUM will build an inventory of firmware bundles - packages that can be used to update firmware.
    • Click the "Next" button to move on to the next step.
  3. Select Targets Screen:
    • This screen is used to specify which targets you want to update.
    • Targets can be added one at a time, or a range can be searched.
    • Credentials must be supplied for each target.
    • Once added, targets can also be managed in groups.  See the HP SUM user guide for details.
    • Click the “Next” button to move on to the next step.
    •  
    • NOTE on order of preforming updates: Any updates to OA, VC and iLO firmware should be done in one HP SUM session first, then exit HP SUM and perform updates to HP-UX I/O firmware in a separate HP SUM session. 
    • NOTE on HP-UX I/O firmware: If you want to update I/O card firmware online through HP-UX you must add an IP address for the production HP-UX OS as a target on this screen along with HP-UX root user credentials. 
    • NOTE for enclosures: The Onboard Administrator IP address can be added as the first target and HP SUM will find all of the servers and Virtual Connect in the enclosure automatically. A pop up dialog will appear suggesting to add the found associated targets. HP SUM will be able to use the OA credentials to log into the blades iLOs automatically.
    • NOTE: “localhost” is not applicable for installing the firmware updates included in this bundle.
  4. Review/Install Updates Screen:
    • The suggested updates for each target are displayed on this screen.
    • This screen also allows for retrieving details of the updates, selecting between available revisions, forcing downgrades and choosing reboot to activate options.
    • For more details and component level granularity, select the item and click the "Select Components" link.
      NOTE: If firmware is the latest or already up-to-date version, HP SUM displays the message "Already-up-to-date". You can override and choose to perform force reinstallation or downgrade the firmware by clicking the "Installation Option" and checking “Force Install” option.
      NOTE: Integrity System Firmware update supports delayed activation - where the new firmware gets downloaded to the iLO but is programmed only when you power down the system at a convenient time. Delayed activation is the default setting for SFW update. This setting can be changed by doing the following actions:
      • Click "Configure Now" on the Select Components page
      • Select the "Upload and Activate" checkbox.
        • If "Upload and Activate" is selected, HP SUM will do the following actions:
          • Send a graceful shutdown and power off request to the system as part of the update
          • Then power up the system after the System Firmware has been programmed.
        • If you choose to do the power off manually, the programming will take approximately 8 minutes to complete the programming operation before power can be turned on again.
    • NOTE: Integrity Superdome 2 nPartition firmware updates can be applied while the partition is Active, but the partition must be rebooted to have the firmware update take effect.  HP SUM defaults to not reboot Active partitions.  If you would like HP SUM to include the partition reboot as part of the firmware update process then:
      • Click “Select Devices” on the Select Components page
      • Click “Reboot to Activate” next to the Active partitions you  want to reboot.
    • If you choose to not continue with install on one or more targets, you can uncheck the box on the left of the target.
    • Updates can be scheduled for future times by clicking the “Schedule” button. Once schedules are defined, the “Install” button must still be clicked to activate the schedule.
    • Click the “Install” button to start update on all of the checked targets.
    • HP SUM will display the progress of the firmware update on each target.
    • A status and link to the logs will be displayed for each target at the end of the update.  

HP SUM User Guides: HP SUM KNOWN ISSUES:
  • HP SUM fails on Windows due to McAfee firewalls. This is a known issue with McAfee that McAfee firewalls block HP SUM traffic.
            To resolve this issue, enable the port traffic associated with the HP SUM application by performing the following steps:
  1. Bring up McAfee Host Intrusion Prevention
    • Windows Vista: From the system tray, click the McAfee icon -> Manage Features -> Host Intrusion Prevention
    • Windows 7: From the system tray, right click Host Intrusion Prevention icon -> Configure
  2. Select the Activity Log tab. Notice the entry in the Message column similar to the following: Blocked Incoming TCP from the HOST (x.x.x.x) during execution of HP SUM.
  3. Select the Firewall Policy tab.
  4. On the bottom of the screen, click Add (Add new rule).
  5. Use the following settings for the new firewall rules on your system.
    Action: Permit
    Protocol: IP - TCP
    Direction: Incoming
    Local Service: Single - http
    Remote Service: Range From: 1024 - To: 65535
    Address: Any Active
  6. Click OK to ensure new firewall rules have been implemented.
  7. Restart HP SUM.
  • During a Virtual Connect update, HP SUM may hang while reporting 100% complete for 30 minutes or more. In that case, exit HP SUM, verify the VC health and fix any reported errors. Then re-run HP SUM to verify if VC or other targets still need to be updated.
  • In some cases, target HP-UX nodes with more than 10 disks may hang in the "Discovering…” state.  If this happens, the target should be unchecked and the I/O FW update must be completed by manually copying the I/O component files (cp*.scexe) to the HP-UX system and executing them individually.
  • Do not use the “Reboot Now” button which appears after installing both an HP-UX target and its associated iLO in the same session, or the local machine running HP SUM may be rebooted unexpectedly along with the target system(s). Note: The “Reboot now” button only appears if you have not selected “Reboot to activate”.
    Alternatives are to use the option “Reboot to activate” before initiating the update so that HP SUM automatically reboots the target systems, or to manually reboot the target systems instead of using the “Reboot Now” button.
  • The error message "Unable to start hpsum session on remote target" may appear after adding a valid HP-UX target. One reason may be that the pciinfo module status has been changed. You may run the command "kcmodule –b yes -s pciinfo=best" and then retry adding the target.
  • If a target appears to hang with the status "Waiting for update on the associated host", exit HP SUM and restart the update on just that target.  This can happen if updates are attempted on OA, iLO and HP-UX all in the same HP SUM session.  The recommended update procedure is to update OA and iLO together in one session, then exit and update HP-UX I/O FW in a separate HP SUM session.
  • If you receive the message "Could not add the following requested repositories:" after selecting a directory to use with HP SUM, the HP SUM temporary directory must be removed and then HP SUM must be restarted.
    • Windows: From a command prompt enter: rmdir /S %temp%\hp_sum
    • Linux: From a shell prompt enter: rm –rf /tmp/hp_sum
  • If you receive the message "Connected to unknown SOAP server" while connecting to targets, another program is probably blocking HP SUM from using SSL port 443, close the other applications and try again. If the problem persists, please exit HP SUM and log out and log back in to clear any background processes that may be blocking HP SUM.
  • Refer to the HP SUM Release Notes for complete list of known HP SUM installation issues.

Release Notes

End User License Agreements:
Hewlett-Packard End User License Agreement
gSOAP Software End User License Agreement


Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [ ]  Panic,  [X]  Hang,  [  ]  Abort,   [ ]  Corruption,  [  ]  Memory Leak,
     [X]  Other: Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


Important:
TITLE: HP Smart Update Firmware - HP Integrity rx2800 i2 Rack-optimized/Data Center Servers (AH395A) or Carrier-Grade Servers (AT112A) or Office Friendly Server (OFS - AH396A) Firmware Bundle

READ BEFORE INSTALLING:
Please download the latest release notes for this release available here.

Note : View the Installation Instructions to know about Important Firmware Dependencies.

VERSION: 
HP Smart Update Firmware Bundle

Bundle Version : 26.36
System Firmware Version: 1.95
FPGA Firmware Version: 2.02
iLO-3 Firmware Version: 01.55.02
Power Monitor Firmware Version: 02.09

I/O Firmware Flash components (updates recommended):
rx2800 i2 built-in p410i SAS firmware: 5.78
Add-in Smart Array Adapters firmware bundle 2012.11.30:
    p411 : 5.78
InfiniBand Adapters firmware bundle 2012.11.30:
   HP 4X QDR Infiniband (592519-B21): 2.9.1000
Emulex Adapters firmware bundle 2013.01.31:
    1-port/2-port 4 Gb FC + 1000BT AD221A, AD222A, AD393A: FC ROM:  2.82x4, FC EFI:  4.01a5; LAN 4.3.01 
    1-port/2-port 8 Gb FC AH402A, AH403A: ROM:  2.02x2, EFI: 4.01a5
    NC552SFP 10Gb Flex-10 AT118A: ROM:  4.1.450.14 , EFI:  2.21AC
    2-port CN1000E AT111A: LAN & FC ROM:  4.1.450.14, LAN EFI:  2.21AC, FC EFI: 5.02A4
    8 Gb FC/10 Gb LAN AT094A: LAN ROM: 4.1.450.14, LAN EFI:  2.21AC , FC ROM:  2.02x2 , FC EFI:  4.01a5 
Intel and Broadcom Adapters firmware bundle 2012.11.30(b)
    rx2800 i2 embedded NIC: 4.3.01
    2-port/4-port 1000Base Ethernet AD337A, AD338A, AD339A: EFI 4.3.01
    4 Gb FC/1000Base Ethernet AD221A, AD222A, AD393A: EFI 4.3.01
    2-port 10 GbE AM225A, AM232A, AM233A: EFI 5.2.59, ROM 6.2.25
Qlogic Fibre Channel Host Bus Adapters firmware bundle: 2012.11.30
     1-port/2-port 8 Gb FC AH400A, AH401A: ROM 5.03.15, EFI 2.22
     
HP Smart Update Manager (HP SUM)
HP SUM Version : 5.3.5

Note:

  • On servers running HP-UX, I/O firmware may be updated using HP SUM 5.3.5 and the I/O components included in this bundle.
  • If a system FW update is pending, it will be activated at next server power off, and server can be powered on only after the firmware activation completes.  
    • To verify if a system FW update is pending, run the iLO3 MP “SYSREV” command and check if the Pending column shows any version for “System FW”.
    • Warning: If you reset the system while the SFW update is pending, the server may not be able to reboot due to a firmware mismatch between SFW and iLO. If that’s the case, power off the server to enable the new SFW activation and then power the server back on after activation is complete.
    • While the server is powered off, you can monitor the progress of the system firmware activation by running the iLO3 MP “FW” command from the Command Menu (CM). 
DESCRIPTION:
This bundle contains the HP Smart Update Manager (HP SUM) application with the firmware for HP Integrity rx2800 i2 Servers (System firmware (SFW), FPGA firmware, iLO-3 MP firmware & Power Monitor and IO firmware). This bundle can be used to update the firmware using the HP SUM application.

Note:
  • This bundle supports firmware update for all modes of HP Integrity rx2800 i2 server.
  • It is required to have appropriate SAS RAID firmware (version 5.78) and LAN-On-Motherboard (LOM) firmware (version 4.3.01 or later) installed on your server along with this firmware bundle, available on http://www.hp.com
    •  Current versions can be checked using the HP-UX commands “ioscan --kfnd ciss”, “sautil /dev/cissx vpd” and “nwmgr --q vpd --c lan0”
  • Any updates to the information below will be available on the release notes for HP Integrity rx2800 i2 Servers Bundle for HP Smart Update Manager, available on http://www.hp.com/
Refer to HP SUM 5.3.5 User Guide and Release notes for more information.

SUPERSEDES: 
HP Smart Update Firmware Bundle
Bundle Version : 26.35

System Firmware Version: 1.93
FPGA Firmware Version: 2.02
iLO-3 Firmware Version: 01.54.03
Power Monitor Firmware Version: 02.09

HP Smart Update Manager (HP SUM)
HP SUM Version : 5.2.0

PRODUCT MODEL(S):
HP Integrity rx2800 i2 Server Rack-optimized/Data Center 
HP Integrity rx2800 i2 Carrier-Grade Server with DC Power 
HP Integrity rx2800 i2 Office Friendly Server 

OPERATING SYSTEMS:
HP-UX 11i v3 OE Update Release for March 2010 (and later OE Releases)
Microsoft Windows Server 2008 R2
OpenVMS 8.4 

LANGUAGES:
International English

KNOWN FIRMWARE ISSUES:
None

 
DISCLAIMER:
The information in this document is subject to change without notice.
Hewlett-Packard makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.
This document contains proprietary information that is protected by copyright. All rights are reserved. No part of this document may be reproduced, photocopied, or translated to another language without the prior written consent of Hewlett-Packard Company.

(C) Copyright 1994-2013 Hewlett-Packard Development Company, L.P.

FEEDBACK 
As we are continuing to improve the firmware management process we welcome your feedback on this document and on the firmware update process. 
TEAM-FWupdateFeedback@external.groups.hp.com

Notes:

HP Smart Update Manager (HP SUM) for Linux is supported on following Linux Operating System flavors:

  • Red Hat Enterprise Linux 6 Server (x86-64)
  • Red Hat Enterprise Linux 6 Server (x86)
  • Red Hat Enterprise Linux 5 Server (x86-64)
  • Red Hat Enterprise Linux 5 Server (x86)
  • SUSE LINUX Enterprise Server 11 (AMD64/EM64T)
  • SUSE LINUX Enterprise Server 11 (x86)
  • SUSE LINUX Enterprise Server 10 (AMD64/EM64T)
  • SUSE LINUX Enterprise Server 10 (x86)

Fixes

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [ ]  Panic,  [X]  Hang,  [  ]  Abort,   [ ]  Corruption,  [  ]  Memory Leak,
     [X]  Other: Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


iLO 1.55.02:

  • Fixed a security vulnerability issue that exists in HP Integrated Lights-Out (iLO 3) versions 1.53.02 and lower for HP rx2800 i2. The vulnerability could be remotely exploited resulting in disclosure of information.  See SSRT100934 for more details.
  • When the serial port MUX is set to “Persistent AUX” mode and the server is A/C power cycled, the serial port MUX will retain the “persistent AUX” mode setting and will not reset to “iLO” mode.
  • The severity of the events “VOLTAGE_FAULT and VOLTAGE_LOW_CRITICAL” have been increased so that power supply events in SFM such as  "power supply failed or disconnected" and "power supply AC lost" will now be reported in HP-UX syslog for easier monitoring.
  • Fixed an issue where an idle SSH session to iLO3 from a PUTTY client may freeze or may get disconnected with an error message “Incoming packet was garbled on decryption”.
  • SSH connection to iLO from an OpenSSH 5.9 client will now work even when a reduced list of key-exchange algorithm is not indicated.
  • IPMI chassis status now properly reflects the sensor status when cover is off or after a fan failure.
  • MP-iLO’s 15 minute auto-logoff no longer truncates a V-media Create ISO Image.
  • Fixed an issue where specific systems would very rarely hang with the "BOOT_NOT_DETECTED" error after an A/C power cycle.
SFW 1.95:  
  • Fixed an issue where the execution of the SetTime firmware call might cause short system hangs of 12.75 seconds. Occasionally longer system hangs were observed. The problem may cause affected servers running in a Serviceguard cluster configuration with member timeout values slightly higher than the delay to fail with a Serviceguard INIT due to expiration of the Serviceguard safety timer. Note: other third party clustering products are affected by this issue too.
  • Fixed an issue where a failed CPU socket would not get de-configured, causing the system to hang and not boot to EFI shell, or to continuously reboot, with the error "BOOT_CPU_LATE_SELF_TEST_FAIL".
Boot Code 6.2.25 (from 6.2.21) for AM225A/AM232A/AM233A:
  • In some cases, only 2 PCI functions are exposed in multi-function mode.
 HBA FC FW version 2.02x2 (from 2.00a4) for AT094A, AH402A, AH403A:
  • I/O “illegal frames received” errors may be reported intermittently by FC disks linked through an 8Gb HP/Emulex FC card if a disk reset is performed during heavy I/O load.

Important

TITLE: HP Smart Update Firmware - HP Integrity rx2800 i2 Rack-optimized/Data Center Servers (AH395A) or Carrier-Grade Servers (AT112A) or Office Friendly Server (OFS - AH396A) Firmware Bundle

READ BEFORE INSTALLING:
Please download the latest release notes for this release available here.

Note : View the Installation Instructions to know about Important Firmware Dependencies.

VERSION: 
HP Smart Update Firmware Bundle

Bundle Version : 26.36
System Firmware Version: 1.95
FPGA Firmware Version: 2.02
iLO-3 Firmware Version: 01.55.02
Power Monitor Firmware Version: 02.09

I/O Firmware Flash components (updates recommended):
rx2800 i2 built-in p410i SAS firmware: 5.78
Add-in Smart Array Adapters firmware bundle 2012.11.30:
    p411 : 5.78
InfiniBand Adapters firmware bundle 2012.11.30:
   HP 4X QDR Infiniband (592519-B21): 2.9.1000
Emulex Adapters firmware bundle 2013.01.31:
    1-port/2-port 4 Gb FC + 1000BT AD221A, AD222A, AD393A: FC ROM:  2.82x4, FC EFI:  4.01a5; LAN 4.3.01 
    1-port/2-port 8 Gb FC AH402A, AH403A: ROM:  2.02x2, EFI: 4.01a5
    NC552SFP 10Gb Flex-10 AT118A: ROM:  4.1.450.14 , EFI:  2.21AC
    2-port CN1000E AT111A: LAN & FC ROM:  4.1.450.14, LAN EFI:  2.21AC, FC EFI: 5.02A4
    8 Gb FC/10 Gb LAN AT094A: LAN ROM: 4.1.450.14, LAN EFI:  2.21AC , FC ROM:  2.02x2 , FC EFI:  4.01a5 
Intel and Broadcom Adapters firmware bundle 2012.11.30(b)
    rx2800 i2 embedded NIC: 4.3.01
    2-port/4-port 1000Base Ethernet AD337A, AD338A, AD339A: EFI 4.3.01
    4 Gb FC/1000Base Ethernet AD221A, AD222A, AD393A: EFI 4.3.01
    2-port 10 GbE AM225A, AM232A, AM233A: EFI 5.2.59, ROM 6.2.25
Qlogic Fibre Channel Host Bus Adapters firmware bundle: 2012.11.30
     1-port/2-port 8 Gb FC AH400A, AH401A: ROM 5.03.15, EFI 2.22
     
HP Smart Update Manager (HP SUM)
HP SUM Version : 5.3.5

Note:
  • On servers running HP-UX, I/O firmware may be updated using HP SUM 5.3.5 and the I/O components included in this bundle.
  • If a system FW update is pending, it will be activated at next server power off, and server can be powered on only after the firmware activation completes.  
    • To verify if a system FW update is pending, run the iLO3 MP “SYSREV” command and check if the Pending column shows any version for “System FW”.
    • Warning: If you reset the system while the SFW update is pending, the server may not be able to reboot due to a firmware mismatch between SFW and iLO. If that’s the case, power off the server to enable the new SFW activation and then power the server back on after activation is complete.
    • While the server is powered off, you can monitor the progress of the system firmware activation by running the iLO3 MP “FW” command from the Command Menu (CM). 
DESCRIPTION:
This bundle contains the HP Smart Update Manager (HP SUM) application with the firmware for HP Integrity rx2800 i2 Servers (System firmware (SFW), FPGA firmware, iLO-3 MP firmware & Power Monitor and IO firmware). This bundle can be used to update the firmware using the HP SUM application.

Note:
  • This bundle supports firmware update for all modes of HP Integrity rx2800 i2 server.
  • It is required to have appropriate SAS RAID firmware (version 5.78) and LAN-On-Motherboard (LOM) firmware (version 4.3.01 or later) installed on your server along with this firmware bundle, available on http://www.hp.com
    •  Current versions can be checked using the HP-UX commands “ioscan --kfnd ciss”, “sautil /dev/cissx vpd” and “nwmgr --q vpd --c lan0”
  • Any updates to the information below will be available on the release notes for HP Integrity rx2800 i2 Servers Bundle for HP Smart Update Manager, available on http://www.hp.com/
Refer to HP SUM 5.3.5 User Guide and Release notes for more information.

SUPERSEDES: 
HP Smart Update Firmware Bundle
Bundle Version : 26.35

System Firmware Version: 1.93
FPGA Firmware Version: 2.02
iLO-3 Firmware Version: 01.54.03
Power Monitor Firmware Version: 02.09

HP Smart Update Manager (HP SUM)
HP SUM Version : 5.2.0

PRODUCT MODEL(S):
HP Integrity rx2800 i2 Server Rack-optimized/Data Center 
HP Integrity rx2800 i2 Carrier-Grade Server with DC Power 
HP Integrity rx2800 i2 Office Friendly Server 

OPERATING SYSTEMS:
HP-UX 11i v3 OE Update Release for March 2010 (and later OE Releases)
Microsoft Windows Server 2008 R2
OpenVMS 8.4 

LANGUAGES:
International English

KNOWN FIRMWARE ISSUES:
None

 
DISCLAIMER:
The information in this document is subject to change without notice.
Hewlett-Packard makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material.
This document contains proprietary information that is protected by copyright. All rights are reserved. No part of this document may be reproduced, photocopied, or translated to another language without the prior written consent of Hewlett-Packard Company.

(C) Copyright 1994-2013 Hewlett-Packard Development Company, L.P.

FEEDBACK 
As we are continuing to improve the firmware management process we welcome your feedback on this document and on the firmware update process. 
TEAM-FWupdateFeedback@external.groups.hp.com

Revision History

Version:29.00 (19 Dec 2017)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


iLO 2.01.03: 

  • Fixed an issue where the HP-UX 1603 installation failed on BL860c i2 server when attempted through virtual media or DVD drive that was connected to the enclosure
  • vMedia applet can now be launched with Java 7 update 51 without requiring to add iLO URL
  • For browsers that do not support Java plugins or applets, virtual media applet can now be launched through Java web start launcher

p410i version 6.64:

  • Corrected thermal behavior with HDDs
Enhancements

iLO 2.01.03: 

  • The firmware implements new security enhancements which include support for TLS 1.2 and stronger cipher suites.
  • Enhanced robustness of iLO3 firmware to prevent firmware failure during terminal flow control

p410i version 6.64:

  • Performance enhancement when a drive starts to degrade due to excessive recovered media errors
  • Enhanced the controller SAS discovery logic to tolerate devices that may be resetting

Version:28.00 (3 Jan 2017)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


iLO 1.59.01: 

  • Fixed an issue where IRC (Integrated Remote Console) application sometimes did not load or work properly when accessed by a LDAP user.

Enhancements

iLO 1.59.01: 

  • Starting with iLO version 1.59.01, the self-signed certificate generated by iLO will have a SHA2 based signature (instead of SHA1 based).


Version:27 (31 Mar 2016)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.


Fixes in iLO 1.58.01:

  • Addressed the OpenSSL Poodle (Padding Oracle on Downgraded Legacy Encryption) vulnerability CVE-2014-3566 in iLO. Note: SSLv3 based connections to iLO webGUI are now disabled.

  • Fixed SSL/TLS MITM vulnerability CVE-2014-0224

  • Users can now successfully access the iLO3 GUI using Firefox version 23 or above.

  • iLO will now allow two simultaneous telnet connection attempts and five simultaneous SSH connection attempts.

  • A Telnet session to iLO would rarely hang during an operation such as FPL dump where continuous stream of data was being sent by iLO to the client. This is now fixed.

  • Fixed an issue where system firmware would occasionally de-configure one or more DIMMs reporting DIMM SPD Checksum errors due to a timeout during AC power cycle of the system.

  • Fixed an issue where iLO sometimes displayed incorrect power input voltage value in the Power Meter Readings page.

  • Disabled export cipher encryption in iLO3.

Fixes in SFW 1.96 

  • In an HP Virtual Machine (HPVM) environment, the OS would rarely fail to capture CMC and MCA error logs. This is now fixed.
  • A server containing a PCI card which does not support PCI extended capability would sometimes hang without any error message while handling an MCA. This is now fixed.

Fixes in SAS FW 6.42 (from 6.22):    

  • Resolved an issue where, after doing a mode toggle at EFI ORCA, the controller name would not be displayed when running the command: “reconnect –r”
  • Resolved an issue where P411 (HBA mode) in Multi Initiator configuration, connected to share disk,  failed to boot from primary path at EFI
  • Added a new POST message 1813 to indicate bad or failed battery charge circuit
  • No longer display a POST error message 1805 “Cache Module Super–Cap is not installed” when the controller is configured to work without super-capacitors.

Fixes in SAS FW 6.22 (from version 5.78):

  • HP-UX boot may fail with READ Error (elf_load) if boot volume is built on SAS Logical Volume larger than 2TB
  • On rare occasions during power-up of an HP DS2200sb, the expander backplane would be unresponsive and the attached Smart Array Controller would not be allowed to discover attached drives.
  • The training of the DDR2 DIMMs has been improved in order to prevent the rare occasions when 1783 POST error messages displays followed by an unresponsive controller.
  • Protection has been added to prevent potential Smart Array controller hangs under rare conditions when hot-adding hard drives.
  • The Open Connection timeout was reduced to 900 microseconds so that SAS connections terminate gracefully and data transfer stalls are prevented.
  • The Smart Array controller would not connect to hard drives within 20ms under heavy stress.

Fixes in Intel EFI version 4.3.02 for rx2800 i2 and i4 LOM (from 4.3.01):

  • NIC EFI driver update was failing on some cards shipped with a flash memory chip (Atmel 25DF041A) that did not support the EFI driver. EFI driver version 4.3.02 fixes this issue.

Fixes in Emulex Firmware 4.9.416.12 (from 4.2.401.2212)

  • Critical/Serious Defects

    • When ISL (Inter-Switch Link) is disabled to remote site, local storage access is also lost

    • IOCXGBE: Pause frame storm seen under DEAD state condition

  • Medium/Low Defects

    • IOCXGBE:  Flow control behavior is not functioning as expected 

    • Link status is shown as DOWN in HP-UX & HII (Human Interface Infrastructure) though the interface is UP in OA

Fixes in Emulex firmware 4.2.401.2212 (from 4.1.450.14):

  • Critical: As the result of auto negotiation failure, the connection between LOM and ProCurve 6120XG may link up at 1Gbps instead of 10Gbps. This occurs intermittently (as often as once in 10 retries) after executing "Reset Server blade #" from the OA CLI.
    Affected Products - All BE3 based Cards and LOMs. This is also seen with 10G passthrough Interconnect module.
  • Boot failure might be seen after running commands "reconnect -r", "map -r" commands at EFi environment.
  • Boot from SAN intermittently fails during EFI bootstrap of a FCoE device that is busy.
  • FCOE EFI version truncated in VPD data that is displayed by ODE-FCFUPDATE tool at EFI.
  • On HP-UX the fcoc port driver state is displayed as AUTHENTICATION/DISCOVERY when fcocutil command is run to check the port information

 Fixes in NIC EFI driver 2.22.a1 (from 2.21.ac):

  • Reset to Defaults restores wrong power configuration. Reset to Default is issued from Device Manager->Emulex 10G NIC-> R/r or Erase Configuration;
    Symptom - Restoring the defaults shows an HP unsupported option: MultiChannel Option
Enhancements

iLO 1.58.01:

  • Users can now configure a security banner message to be displayed in the iLO login screen.

  • iLO now enables users to configure an idle session timeout for web based user interface.

  • An option is now provided in Integrity iLO3 to "Enforce AES/3DES" ciphers for network encryption.

  • Users are now able to create a custom CSR (Certificate Signing request) and to import a third party signed SSL certificate into iLO for secure iLO webGUI access.

  • Improved console performance from iLO version 1.56.02

    Note: For more information on these enhancements, refer to the latest HP Integrity iLO 3 Operations Guide

SAS 6.22 (from 5.78):

  • The maximum boot disk size supported with the LVM boot layout is enhanced from 2TB to 16TB with the release of fw version 6.22 and HP-UX B.11.31.1303

  • HBA/RAID mode toggle support is now available within ORCA. (Mode Toggle only supported for P410i controllers)

SAS FW 6.42 (p411, p711m):

  • Added support for HP MSA 2040 Storage (supported with p411 and p711m only)

Version:26.36 (4 Apr 2013)
Fixes

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [ ]  Panic,  [X]  Hang,  [  ]  Abort,   [ ]  Corruption,  [  ]  Memory Leak,
     [X]  Other: Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


iLO 1.55.02:

  • Fixed a security vulnerability issue that exists in HP Integrated Lights-Out (iLO 3) versions 1.53.02 and lower for HP rx2800 i2. The vulnerability could be remotely exploited resulting in disclosure of information.  See SSRT100934 for more details.
  • When the serial port MUX is set to “Persistent AUX” mode and the server is A/C power cycled, the serial port MUX will retain the “persistent AUX” mode setting and will not reset to “iLO” mode.
  • The severity of the events “VOLTAGE_FAULT and VOLTAGE_LOW_CRITICAL” have been increased so that power supply events in SFM such as  "power supply failed or disconnected" and "power supply AC lost" will now be reported in HP-UX syslog for easier monitoring.
  • Fixed an issue where an idle SSH session to iLO3 from a PUTTY client may freeze or may get disconnected with an error message “Incoming packet was garbled on decryption”.
  • SSH connection to iLO from an OpenSSH 5.9 client will now work even when a reduced list of key-exchange algorithm is not indicated.
  • IPMI chassis status now properly reflects the sensor status when cover is off or after a fan failure.
  • MP-iLO’s 15 minute auto-logoff no longer truncates a V-media Create ISO Image.
  • Fixed an issue where specific systems would very rarely hang with the "BOOT_NOT_DETECTED" error after an A/C power cycle.
SFW 1.95:  
  • Fixed an issue where the execution of the SetTime firmware call might cause short system hangs of 12.75 seconds. Occasionally longer system hangs were observed. The problem may cause affected servers running in a Serviceguard cluster configuration with member timeout values slightly higher than the delay to fail with a Serviceguard INIT due to expiration of the Serviceguard safety timer. Note: other third party clustering products are affected by this issue too.
  • Fixed an issue where a failed CPU socket would not get de-configured, causing the system to hang and not boot to EFI shell, or to continuously reboot, with the error "BOOT_CPU_LATE_SELF_TEST_FAIL".
Boot Code 6.2.25 (from 6.2.21) for AM225A/AM232A/AM233A:
  • In some cases, only 2 PCI functions are exposed in multi-function mode.
 HBA FC FW version 2.02x2 (from 2.00a4) for AT094A, AH402A, AH403A:
  • I/O “illegal frames received” errors may be reported intermittently by FC disks linked through an 8Gb HP/Emulex FC card if a disk reset is performed during heavy I/O load.
Enhancements

UEFI Driver 5.2.59 (from 5.2.58) for AM225A, AM232A, AM233A:

  •  Added Dynamic Network detection support

Version:26.35 (31 Oct 2012)
Fixes

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [ ]  Panic,  [X]  Hang,  [  ]  Abort,   [ ]  Corruption,  [  ]  Memory Leak,
     [  ]  Other: Risk to mission critical environments Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


FIXES:

SFW 1.93:

  • Duplicate SFM event 100819 might be displayed after replacing a CPU and booting a system.
  • In presence of a 2-slot I/O riser card, HP-UX ioscan might display an extra slot or syslog might show ACPI warnings similar to "could not find bd for ACPI handle".
  • System might take many extra minutes to boot to EFI if unreadable media is in DVD drive.
iLO-3 1.54.03:
  • Added functionality to disable iLO reset request from the FPGA while firmware is being programmed.
  • iLO serial task errors might cause an iLO hang.
  • iLO internal task priority changed to better insure that the watchdog timer task will reset iLO when necessary.
  • The virtual keyboard and mouse might stop working after an MP reset with OpenVMS.
FPGA 2.02:
  • An iLO firmware hang might prevent reset via the iLO physical presence button; a fifteen (15) second button hold now generates a hardware reset signal regardless of iLO firmware state.

Version:26.34 (3 Oct 2012)
Fixes

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [X]  Panic,  [X]  Hang,  [  ]  Abort,   [X]  Corruption,  [  ]  Memory Leak,
     [  ]  Other: Risk to mission critical environments Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


  • Fixed an issue where a memory update operation may not complete properly when an L2 cache line encounters a second single bit data error. This may result in the possibility of undefined system behavior. See Intel Specification Update for more information. If Specification Update link does not work, HP recommend to go to www.intel.com and search for the latest version of the Intel® Itanium® Processor 9300 Specification Update.
  • Fixed an issue where PAL returned no information on bus log overflow
  • Fixed an issue where an invalid log format may have been generated by hardware when multiple MLD errors occur in a small window

Version:26.21 (17 Oct 2011)
Fixes

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability. 

 [  ] Critical 
     [  ]  Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak, 
     [  ]  Other: Risk to mission critical environments Security 
     [  ]  Hardware Enablement,  [  ] Software Enablement 
 [  ]  Recommended 
 [X]  Optional 
     [X] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical 
 [  ] Initial Customer Release 


iLO

  • Fixed an issue where the web GUI could show the fan running at over 100% of maximum speed.
Enhancements

iLO

  • Support HP Integrity rx2800 i2 Carrier-Grade Server with DC Power Server (Telco/NEBS certified) and Thermal Policy

Version:26.12 (14 Sep 2011)
Fixes

Upgrade Requirement:
Recommended - HPE recommends users update to this version at their earliest convenience.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [  ] Critical
     [  ]  Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak,
     [  ]  Other: Risk to mission critical environments Security
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [X]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


SFW

  • Illegal memory configurations could cause a system abort during boot after a DIMM de-allocation. Now, the system will boot with reduced memory and display appropriate alerts.
  • Fixed an issue where CMC (Correctable Machine Check) log may not be generated after a recoverable LLC (Last Level Cache) error
iLO
  • The iLO GUI, System Health screen, no longer displays Altitude Eq Temperature because this sensor is NOT a temperature sensor and it did not display correct information.
  • Updated the Event Dictionary
Enhancements

SFW

  • Enable support for SAS tape boot (requires to use HP Integrity Smart Array firmware (SAS IO firmware) version 5.06 or later).
  • Added extra debug logging for CPU "uncore" during a system abort.

Version:26.06 (25 May 2011)
Fixes

Upgrade Requirement:
Critical - HPE requires users update to this version immediately.

However, if the systems are used in Mission Critical environments, then HP recommends that the update to this revision of firmware be performed during the next system maintenance period in order to improve system reliability.

[X] Critical
     [  ]  Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak,
     [X]  Other: Risk to mission critical environments Security
     [  ]  Hardware Enablement,  [X] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


SFW

  • EFI shell extended characters were forced to an off state when entering the boot manager and restored to their previous state when returning to the shell
  • The level 5 IODISC_RP_LINK_TRAIN_ERR event could be erroneously displayed and cause HP-UX to fail to discover the IPMI device
  • Certain events were not sent while in virtual mode during system OS shutdown
  • A failed DIMM would no longer show as de-allocated after reboot
  • The SM BUS speed was set too high during an MCA, potentially leading to nested MCAs
  • Corrected memory interleaving problem causing MCA in HP rx2800 i2 server with 8x16GB and 4x4GB DIMMs
iLO
  • A rare issue occurred in which disconnecting Web SSL users from the Web interface on the "Active Users" tab of the "Status Summary Page" could disallow subsequent web connections. This could be remedied by resetting iLO from the TUI(Terminal User Interface).
  • The iLO reset command could be performed from the CLI(Command Line Interface) (xd –r) or the GUI while a FW update was in progress.
  • During a FW upgrade, an iLO reset from the iLO GUI was reported to be successful at resetting the iLO although the reset was not successful
  • The iLO command prompt could hang from invalid or missing parameters. This could be remedied by resetting from iLO GUI or using SSH exec "xd -r"
  • iLO GUI "system health" page may not load completely on a fully loaded system.
  • Issues occurred with command line LDAP usage
  • A dropped LAN connection during firmware update could cause a firmware update command or HP SUM command to cease operation. iLO now detects the dropped connection, and reports the error.
  • HP SUM failed to successfully update HP rx2800 i2 server with mixed Firmware versions.
  • iLO TUI(Terminal User Interface) PR command and "power & reset" GUI page would fail if firmware upgrade was in process.
  • The iLO GUI, System Health screen, no longer displays Altitude Eq Temperature because this sensor is NOT a temperature sensor and it did not display correct information.
Enhancements

  • Support for power management from iLO and OS including Advanced Power Capping and Power Regulation
SFW
  • System now generates event for USB over-current condition at EFI
  • Improved the analysis of MCA logs in case of uncorrectable errors by extending data reporting
  • Improved internal tracking of correctable memory errors count on x8 DRAMs
iLO
  • Viewing the forward progress log is now supported in the iLO GUI
  • Availability and usability have been enhanced.

Version:21.07 (18 Feb 2011)
Fixes

Upgrade Requirement:
Critical - HP requires users update to this version immediately.

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [X] Critical
     [  ]  Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak,
     [  ]  Other __________
     [  ]  Hardware Enablement,  [X] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [  ] Initial Customer Release


  • Fixed an issue where the “String buffer too small” error message could be displayed during a network installation of the server, eventually leading to a system panic.
  • Improved boot stability by fixing several potential occurrences of MCAs during boot.
  • Health state does not return to 'OK' when temperature goes from Critical to OK. In order to clear this error a system power cycle was required.
  • Fixed an issue in which the DIMM Slot location for DIMM errors was being reported as decimal numbers when it should have been reported as hexadecimal numbers.
  • An issue in which LDAP did not expect the format user@domain.com has been fixed in the iLO web GUI. The problem still exists in the iLO CLI. The work around is to configure the LDAP server to use an alternative format.
  • The System Health Page in the iLO Web GUI now displays temperatures appropriately.
  • An issue in which the VMEDIA connections event was logged without an IP address has been fixed.
  • An issue with the rare loss of an EFI configuration change has been addressed.
  • vMedia performance and reliability has been improved.
  • Error handling/containment/logging has been improved.
  • Fixed iLO3 Web GUI’s System Inventory page [?] Help icon that lead to error.
  • Fatal fan state should now display fatal in the iLO Web GUI instead of warning.
  • Pending firmware state with system power ON will now get cleared when AC power loss is detected.
  • Power Supply failed state is now persistent when system is turned off.
  • iLO Web GUI will no longer show fan units as failed after completion of a pending SFW update.
  • Issue of locator UID status displaying not available after SFW upgrade is now fixed.
  • Issue of empty IO Slots reported as occupied is fixed.

Version:18.03 (8 Feb 2011)
Enhancements

Upgrade Requirement:
Optional - Users should update to this version if their system is affected by one of the documented fixes or if there is a desire to utilize any of the enhanced functionality provided by this version.

UPDATE RECOMMENDATION: Initial Customer Release

HP recommends systems used in Mission Critical environments update to this revision of firmware during the next system maintenance period in order to improve system reliability.

 [  ] Critical
     [  ]  Panic,  [  ]  Hang,  [  ]  Abort,   [  ]  Corruption,  [  ]  Memory Leak,
     [  ]  Other __________
     [  ]  Hardware Enablement,  [  ] Software Enablement
 [  ]  Recommended
 [  ]  Optional
     [  ] Hardware Enablement,  [  ]  Software Enablement, [  ]  non-critical
 [X] Initial Customer Release


Initial Release


Legal Disclaimer: Products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may have older product names and model numbers that differ from current models.