Filename

Size

Checksum

8348_810.1603.20160512b_update.hpm

67109473

78f7e4cd27133df5b84ad45b54aea6e1

OP810.00
For Impact, Severity and other Firmware definitions, Please refer to the below 'Glossary of firmware terms' url:
http://www14.software.ibm.com/webapp/set2/sas/f/power5cm/home.html#termdefs

8348_810.1603.20160512b / OP810.32

07/28/16

Impact:  New function      Severity:  NA

New features and functions

• • Support for the CAPI Compression Accelerator Adapter with Feature Codes #EJ1A and #EJ1B and CCIN 2CF0. This CAPI FPGA (Field Programmable Gate Array) adapter acts as a co-processor for the POWER8 processor chip handling specialized, repetitive function extremely efficiently. The adapter is preloaded with a GZIP application and is intended to run as a gzip accelerator. The GZIP application maximum bandwidth is the PCIe3 interface bandwidth. Use of the #EJ1A or #EJ1B adapter requires one #EC2A CAPI activation feature per system. This CAPI gzip feature does not run under PowerKVM but as a bare-metal install only for the following minimum Little Endian (LE) Linux distributions levels:

  • •Red Hat Enterprise Linux 7.2

  • •Ubuntu 14.04.5

  • •Ubuntu 16.04.1

8348_810.1603.20160310b / OP810.30

03/18/16

Impact:  Serviceability      Severity:  PE

New features and functions

• • Support was added for PowerKVM 3.1.0.1 with the following Linux Distributions as virtual guest machines: Little Endian: Red Hat Enterprise Linux 7.2, SUSE Linux Enterprise Server 12 (SP1), and Ubuntu 14.04.4.

• • Support was added for an account lockout policy on the BMC service processor. Multiple bad password attempts from a single source will lock out any new or current sessions with that user account for the lockout time period and log a SEL to document the security violation.

• • Support for procedure enumeration in a SEL to be able to decode procedure callouts. This can be used along with the problem determination procedure documentation in the IBM Knowledge Center to produce a repair action for the specific machine type/model that is having the problem. Previously, without this feature, IBM support was required to collect extended data for the failure.

• • Support was added to the BMC Advanced System Management (ASM) to allow customization of the NTP service for setting the BMC time and date. The "Configuration/NTP" panel is used to configure the NTP server or view the current settings.

• • Support was added to the BMC Advanced System Manager (ASM) to be able to verify a Simple Mail Transport Protocol (SMTP) configuration. The BMC "Configuration/SMTP" panel has a "Verify" button that is used to verify the configuration.

• • Support was added to be able to view the Golden and Primary side firmware version information at Petitboot.

• • Support was added to the BMC to allow Turbo Mode for the processors. Turbo Mode is the default for the systems. The Turbo Mode sensor is "green" when in Turbo Mode; "grey" when not in Turbo Mode; and "red" if the sensor has a fault.

• • Support was added to mirror boot output to the VGA console.

System Firmware changes that affect all systems

• • A problem was fixed in OPAL for intermittent errors in the module autoload function in the ibmpowernv driver. A compatible property "ibm.opal-sensor" was added to implement the fix for a smooth autoload in Linux.

• • A problem was fixed in OPAL for lost console output for serial consoles during power downs and reboots. If a power down or reboot is detected, the console output buffer is now flushed before proceeding with the operation.

• • A performance problem was fixed in OPAL for the PCI Host Bridge (PHB) to prevent the PHB L3 cache from retrying defunct entries in the L3 after a MSI end of information (EOI) has been received. The cache line is now flushed after updating the P/Q bits in the priority queue. The situation is improved (and thus performance) by sending a DCBF (Data Cache Block Flush) to force a flush of PHB cache. This improves interrupt performance, reducing latency per interrupt. The improvement will vary by workload.

• • A problem was fixed in Hostboot that caused up to 4 SEL entries to be generated for each checkstop ESEL reported to the BMC service processor. The extra SEL entries would happen if the BMC was busy at the time the SEL was reported.

• • A problem was fixed that prevented multiple NVIDIA Tesla K80 GPUs from being attached to one PCIe adapter. This prevented using a PCIe attached GPU drawer. This fix increases the PCIe MMIO (memory-mapped I/O) space to 1 TB from a previous maximum of 64 GB per PHB/PCIe slot.

• • A problem was fixed in the OPAL gard utility to remove gard records after guarded components have been replaced, Without the fix, Hostboot and the gard utility could be in disagreement on the replaced components, causing some components to still display as guarded after a repair.

• • A problem was fixed for opal-prd service segmentation violations when trying to handle processor A bus errors. With the fix, spare lanes are available to allow fault recovery and not fail the system.

• • A problem was fixed for the Golden Side of the Self-Boot Engine (SBE) pointing to the Primary PNOR. Without the fix, IBM support would not be able to fully change the system to the Golden Side. This problem originated in manufacturing for a small number of systems and does not affect normal operations of the system.

• • A problem was fixed for an incorrect callout of DIMMs on a memory failure. The callout may not include the second DIMM in the DIMM pair when it should have. If the system continues to have memory issues and replacing a single DIMM does not fix the issue, replace the second DIMM in the DIMM pair.

• • A problem was fixed for Nessus security report compliance for SSLv3 and CRIME vulnerabilities. With the fix, the SSLv2 and SSLv3 protocols are disabled. Nessus will still report a CRIME vulnerability due to a limitation in the check but there is no exploit possible for it on the BMC service processor.

• • A problem was fixed for a SEL not being logged for a missing Power Supply Unit (PSU) and a failure to activate the power supply fault LED on the enclosure.

• • A problem was fixed for false SEL callouts for DIMMs with high temperatures after OS failed with a checkstop. There were no problems with the DIMMs but the checkstop handling had inadvertently disrupted the monitoring of the DIMM temperatures by the On-Chip Controller (OCC), causing the false SELs.

• • A problem was fixed for a false SEL callout of "OCC Active disabled" after the OS failed with a checkstop. There was no problem with the On-Chip Controller (OCC) that needed servicing.

• • A problem was fixed for an inband code update error when updating to the same level.

• • A problem was fixed for false SELs reported during the power off of the system for the power supplies. During the power off, the SEL of "Power Supply PSU Fault 2 | Power Supply AC lost" or "Power Supply PSU Fault 1 | Power Supply AC lost" is intermittently logged. There was no problem for the power supplies in this case.

• • A problem was fixed for ASM security issues reported by the Open Web Application Security Project (OWASP) ZED Attack Proxy (ZAP) scan tool. These changes to ASM include fixes for X-Frame-options, cookies, cache-control, password auto-complete, XSS protection, and X-content-type-options.

• • A problem was fixed for the ipmitool failing on the Write PNOR Partition Command and not writing the data expected, The command was not correctly erasing bits before writing, causing unexpected values to be written.

• • A problem was fixed for a error when disabling or enabling power limits while the system is running. The ipmitool "dcmi power deactivate" and "dcmi power activate" commands failed with On-Chip Controller SRCs of BC8A2A00 and BC8A2A03 logged.

• • A problem was fix for DHCP discovery on the BMC DHCP client when attached to a new network. The BMC failed to get a new dynamic IP address when attached to a new network unless an AC power cycle was done on the BMC. This also fixes the failure case where the networking is lost for a period of time and the BMC failed to get an IP address when the networking resumed.

• • A problem was fixed for the BMC FRU report to show the new data for a replaced power supply instead of the data for the original power supply.

• • A problem was fixed for a processor core being disabled and guarded showing as "grey" instead of "red" in the ASM sensor gui. A core that is guarded because of a fault should be detected present and disabled, with a sensor color of "red". The sensor color of "grey" indicates the core is missing.

• • A problem was fixed for false SELs being generated for the Power Supplies during system power on with message "Power Supply PSU Fault N | AC out-of-range, but present |" where "N" is 1 or 2. These are asserted and de-asserted. The false SELs have been removed as there is no error with the power supplies.

• • A problem was fixed for memory frequency not being throttled when required to keep power usage within limits.

• • A problem was fixed for USB device above the first instance having incorrect data. Raw commands used to inquire on these devices will return corrupt values.

• • A problem was fixed for logging to the uartlog and a limit of 64k was imposed on a single log file to prevent a runaway log.

• • A problem was fixed for missing SELs and FRU callouts associated with an ESEL for system checkstop errors. When ESELs occurred for fatal errors, there was a timing problem between the system shutdown and the delivery of the SELs to the BMC that caused the SELs to be lost. With the fix, the shutdown process is delayed until the SELs are processed.

• • A problem was fixed for missing SELs and FRU callouts associated with SMP A-bus faults. Predictive error SELs have bee added that point to the endpoints of the failing A-bus to go along with the existing Unrecoverable SEL that points to an isolation procedure.

• • A problem was fixed for SELs having incorrect entity instances so that, in the cases of multiple FRUs sharing the same type, the wrong FRU is called out. For example, the "ipmitool sel get" command returned a result that had a FRU description for "CPU 1" when it should have been "CPU 2"

• • A problem was fixed for over temperature readings from the hard drive adapters. The airflow impedance from the disk drives required an increase of the fan speeds for an idle system.

• • A problem was fixed for an ipmitool "PNOR Get Access Status" command failure getting overlaid with a good return code. The ipmi command did not return a status message nor an error message. With the fix, the error message is displayed for the failed command.

System Firmware changes that affect certain systems

• • A performance improvement was made for L3 cache prefetches in systems using Direct Memory Interface (DMI) adapters. Work load performances were improved by throttling back on L3 prefetches from the adapters when the cache became more than half way full with busy entries. Performance improvements vary with the type of work loads.

• • A problem was fixed for the GPIO pin on BMC for battery check being programmed high. This can cause premature battery drain on TOD, causing a loss of TOD setting during loss of power.

8348_810.1549.20151116d / OP810.21

12/14/15

Impact:  Security      Severity:  PE

System Firmware changes that affect all systems

• •

• A problem was fixed for a firmware update failure where the Hardware Package Manager (HPM) fails at the end of the image upload with "compcode=0x81: Unknown (0x81)". This error was caused by logging conflicts in the BMC. If the fix for this problem cannot be applied because the firmware update is failing with "0x81", the BMC needs to be switched to the golden side prior to the firmware update. For this service, contact IBM Support at "http://www.ibm.com/support" to have them change the BMC to the golden side and do the firmware update.

• •A problem was fixed to close a security exposure for the BMC.

8348_810.1549.20151116c / OP810.20

12/08/15

Impact:  Serviceability      Severity:  PE

System Firmware changes that affect all systems

• •

• A problem was fixed for a BMC service processor system warm reset with chassis power off that intermittently caused a SEL for a "Hard reset" as "| Watchdog 2 Watchdog | Hard reset | Asserted".

• •A problem was fixed for the "CPU TEMP" processor temperature sensor reporting as "na" instead of providing the processor temperature as needed. For the failure, the report is shown this way: "CPU1 Temp | na | degrees C | na | 0.000 | 0.000 | 0.000 | 255.000 | 255.000 | 255.000".

• •A problem was fixed for the BMC becoming unresponsive and inaccessible from the network after system is running for 7 to 10 days. This was caused by a large memory leak on the BMC. When this failure occurs, the system administrator can allow the system to run until a power cycle (by unplugging the power cords after shutting down the system from the host OS) can be scheduled to clear the BMC of the error.

• •A problem was fixed in OPAL for NX unit checkstops not being reported in the system error log. These are rare NX faults that were forced by error injection methods in the IBM lab to detect the improper handling of the error condition by OPAL.

• •A problem was fixed in Hostboot that prevented the IPL of system when a DIMM error was not detected and memory was not guarded as needed to allow the IPL to continue. This error has SEL reference codes BC8A0D03 and BC8A1701 reported at the Hostboot istep 13.6 that does the memory initialization. Without the fix, the failing memory DIMM has to be manually replaced before the system will IPL. The location of the failed memory can be determined by diagnosing the SEL events.

8348_810.1543.20151105a / OP810.10

11/30/15

Impact:  Serviceability      Severity:  PE

System Firmware changes that affect all systems

• •

• A problem was fixed for the BMC service processor system error log (SEL) showing a non-relevant "Temperature CPU Diode Sensor" errror log. A change was made to filter the error logs since it is not a serviceable event.

• •A problem was fixed for the BMC service processor system error log (SEL) showing an extra SEL ("OCC 1 Active" or "OCC 2 Active sensor disabled") during a power off of the system. A change was made to filter the error logs since they do not pertain to a real problem.

• •A problem was fixed for a Nessus network security scan detecting that SSLv2 and SSLv3 protocols were active on the BMC. The BMC has been changed to disable SSLv3 and only use TLS to improve the security of the communications. This may affect BMC connectivity for users that have browsers still using the legacy protocols and those users may need to upgrade their clients to use TLS to fix the connection issues.

• •A problem was fixed for the BMC not being able to recover from an intermittent power supply fault. With the fix, the BMC retries the power on so that the power on is able to succeed and also provides a SEL for the initial power on fault.

• •A problem was fixed for the ipmitool retrieval of Power Sequencer extended System Error Logs (eSELs) from the BMC. Without the fix, these eSELs cannot be retrieved but they are needed for problem diagnostics.

• •A problem was fixed for a ssh service running unexpectedly in the petiboot environment. The ssh service is no longer run as it was not actively being used.

System firmware changes that affect certain systems




• •On a system with a Ubuntu guest running on a PowerKVM 3.1 host, a problem was fixed for PCI link reset errors on a IBM Power Raid (IPR) adapter. The PCI links may fail to train on a reset. The fix hardens the PCI fundamental reset by retrying as needed to complete the reset.

8348_810.1539.20151015a / OP810.00

10/30/15

Impact:  New      Severity:  New

New features and functions for MTM 8348-21C:

GA Level

NOTE: 

• •This firmware release supports only the OPAL Hypervisor and the Ubuntu  14.04.03 operating system. 

GA restrictions on use of the BMC Advanced System Managment (ASM) web gui for doing firmware updates:

1. •Use the Google Chrome browser at level 46.0.2490.71 m. Other browsers are failing for firmware updates.

2. •ASM firmware update of single components do not work. Select all components for update (which is the default).

3. •Back to back in-band update do not work and required reboot between two consecutive in-band updates.

4. •Preserve configuration menu is not provided as an option during the ASM HPM update flow. The user has to go to the ASM Maintenance menu and set appropriate preserve flags before using ASM to firmware updates.