• Fixed an issue which prevented VLAN tag Priority Code Point (PCP) in RX and TX from working properly.
• Fixed a PSOD case during installation when the RDMA module was not removed.
• Management interface port type field (nmlx-_en_MgmtIFPortType) reported incorrect value.

8Gb Standup & 8Gb Mezzanine

UEFI

• Firmware Management Protocol now supports flashing older Multiboot versions.
• Firmware Management Protocol SetImage no longer displays dots on the screen.
• The following HII (Human Interface Infrastructure) fields now require a reboot after value change:
  Legacy BIOS (Basic Input Output System) Selectable Boot

16Gb Standup & 16Gb Mezzanine

Firmware

• Bring up up-link in 32G or 16G optical environment (FEC (Forward Error Correction) only) when connected with remote device that is not setting the SN bit to zero and TC bit to 1 at the same time during the speed negotiation phase and delays transmitting NOS during LQT phase.
• Dropped FCP_CMD frame by a virtual port (VP index greater than 0) logged into the fabric via Fabric Login (FLOGI) while the primary adapter port (VP0) was disabled via Global VP (Virtual Port) Options bit 2 of Initialize Multi-ID Firmware MBC (0048h).

UEFI

• Firmware Management Protocol now supports flashing older Multiboot versions.
• Firmware Management Protocol SetImage no longer displays dots on the screen.
• The following HII (Human Interface Infrastructure) fields now require a reboot after value change:
  Fabric Assigned WWPN (World Wide Port Name), Fabric Assigned Boot Logical Unit (LUN), Legacy BIOS (Basic Input Output System) Selectable Boot.

16Gb/32Gb Standup

Firmware

• Bring up up-link in 32G or 16G optical environment (FEC (Forward Error Correction) only) when connected with remote device that is not setting the SN bit to zero and TC bit to 1 at the same time during the speed negotiation phase and delays transmitting NOS during LQT phase.

UEFI

• Firmware Management Protocol now supports flashing older Multiboot versions.
• Firmware Management Protocol SetImage no longer displays dots on the screen.
• The following HII (Human Interface Infrastructure)  fields now require a reboot after value change:
  FC (Fibre Channel) Tape, Fabric Assigned WWPN (World Wide Port Name), Fabric Assigned Boot LUN (Logical Unit), Legacy BIOS (Basic Input Output System) Selectable Boot.
• Changed Legacy BIOS (Basic Input Output System) Selectable Boot HII (Human Interface Infrastructure) default to Enabled.

8Gb Standup & 8Gb Mezzanine

BIOS

•  CTRL-Q cosmetic unexpected behavior

UEFI

•  Simple Control Transmission (SCT) 2.5 Extended Small Computer System Interface (SCSI) Pass Thru Protocol test incompleteness. PassThru_Func test no longer goes incomplete.
•  Operating System (OS) boot incomplete behavior when Read Only Memory (ROM) Based Setup-Utility (RBSU) Power On Self -Test (POST) Discovery Mode was set to Force Fast Discovery
•  Human Interface Infrastructure (HII) save unexpected behavior on Superdome servers. In the World Wide Name (WWN) Database menu, changes to Drive0 and Drive1 are now saved to Non  Volatile Random Access Memory (NVRAM)
•  Unexpected behavior which caused adapter to not appear on the Health Summary page.
•  Operating System (OS) boot incomplete behavior when Read Only Memory (ROM) Based Setup-Utility (RBSU) Power On Self -Test (POST) Discovery Mode was set to Auto
•  World Login unexpected behavior when Power On Self -Test (POST) Discovery Mode was set to Auto

16Gb Standup & 16Gb Mezzanine

UEFI

•  Simple Control Transmission (SCT) 2.5 Extended Small Computer System Interface (SCSI) Pass Thru Protocol test incompleteness. PassThru_Func test no longer goes incomplete

16Gb/32Gb Standup

UEFI

•  Human Interface Infrastructure (HII) save unexpected behavior. In the World Wide Name (WWN) Database menu, changes to Drive0 and Drive1 are now saved to Non Volatile Random Access Memory (NVRAM).
•  Corrected adapter name format in Read Only Memory (ROM) Based Setup-Utility (RBSU) menus.
•  Unexpected behavior that caused Non Volatile Random Access Memory (NVRAM) overwritten after Human Interface Infrastructure (HII) changes
•  Behavior that caused Human Interface Infrastructure (HII) fields to not revert back to original settings when ESC key was used to discard changes

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre. The revision of the microcode included in this System ROM addresses issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation. Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Ver. 2.56_01-22-2018 (B) contains support for VMware vSphere 6.7.  It is functionally equivalent to ver. 2.56_01-22-2018.  It is not necessary to upgrade with version 2.56_01-22-2018 (B) if a previous component revision was used to upgrade the firmware to ver. 2.56_01-22-2018.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

•     Corrects Activity LED behavior on HPE drive carrier.

• This firmware implements the Firmware Security Log Page.

• This firmware contains a change to prevent occasional command completion times in the 4-5 second window when command is received just as the drive is transitioning from active to Idle A.

• This firmware update eliminates a data integrity risk when an unaligned WRITE and VERIFY command is sent to a bad sector. During these conditions there is a potential for data intended to be written to disk to fail to be written.

• Firmware resolves a data mismanagement issue associated with unaligned sequential write operations.

Problems Fixed for HPG3 (B):

• The component would fail to flash drive firmware on a server with a Trusted Platform Module (TPM) enabled when using the /tpmbypass switch.

Problems Fixed for HPG3 (C):

• Component would fail to install drive firmware for drives present in a system configured with two or more external drive enclosures attached to an HP Host Bus Adapter H22x. The following message would be reported in the component log file - “Device appears more than once in tree”. The drive firmware installation failure was not observed in configurations having only one external drive enclosure attached to an HP Host Bus Adapter H22x.
• Component would cause an exception error when deployed on a computer with a fully qualified domain name greater than 40 characters in length.

The firmware in this product  addresses an issue where the "Reboot Required" icon is not highlighted after a NIC firmware update (via System Utilities->Embedded Application->Firmware Update) completes.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Known Issues:

• Fixes a data integrity risk which could occur during 4k or greater unaligned writes while the device incurs a smart trip event. During these conditions there is a potential for data intended to be written directly to disk to fail to be written.
• Eliminates a data integrity risk when an unaligned Write and Verify command is sent to a bad sector. During these conditions there is a potential for data intended to be written to disk to fail to be written. 

This product addresses an issue where the link status for an ‘HPE Synergy 3820C 10/20Gb Converged Network Adapter’ that is configured in a Link Aggregation Group (LAG) using ‘HPE Virtual Connect SE 40Gb F8 Module for Synergy’ may show as down at the Virtual Connect (VC) management console.

• Addressed an issue where SNMP trap cpqRackEnclosureManagerLinkUp was not sent after an Onboard Administrator failover.

• Addressed online help content issues seen in the previous version of Onboard Administrator.

Security

   The following security vulnerabilities were fixed:

• CVE-2017-8105 - Addressed a memory corruption vulnerability caused by a buffer overflow.

• CVE-2016-10244 – Addressed a vulnerability which might allow a remote attacker to cause denial-of-service via a crafted file.

Issues and workarounds

Browsers

• OA GUI is not accessible in Chrome versions 43.0.2357.10 to 44.0.2383.The issue was caused by a “regression” in Chrome (or WebKit). Customers should use an alternative browser like Firefox or Internet Explorer or try a different version of Chrome.
• SSO-to-iLO connection from the OA using an iLO host name fails with Microsoft Internet Explorer11 on Windows 8. On a Windows 8 system with Internet Explorer 10 or Internet Explorer 11, if the OA web GUI session is loaded using a host name instead of an IP address, an attempt to open an iLO window using SSO from the OA web GUI might result in the iLO page loading in the OA web GUI window instead of the intended new window. This issue was determined to be a bug in Internet Explorer and is expected to be fixed in a future release or update for Internet Explorer. To work around this issue, either use an IP address to load the OA Web GUI, or turn off Protected Mode for the appropriate zone in Internet Explorer’s settings. This issue occurs only on Internet Explorer browsers.

FIPS

Certificates smaller than 2048 bits in size are not compliant with FIPS requirements as enforced by the OA firmware starting with OA 4.20. When the OA running OA firmware version 4.40 or greater is operating in FIPS Mode ON/DEBUG and is configured with a 1024-bit LDAP certificate that was installed when running a previous version of OA firmware, FIPS Mode ON/DEBUG is considered to be operating in a degraded state due to the presence of the non-compliant certificate. While operating in this FIPS-Degraded Mode operational state, attempts to set FIPS Mode OFF from the OA GUI Network Access>FIPS tab will fail and show the error message The selected FIPS mode is already enabled. When the non-compliant certificate is removed, the FIPS-Degraded operational status is cleared, FIPS Mode can then be successfully set to OFF from the GUI interface. Note that the OA CLI command SET FIPS MODE OFF can be successfully used to set FIPS Mode OFF even with non-compliant 1024-bit LDAP certificates installed in the OA.

IRC

Unable to open .net IRC console for Gen10 Blades, Gen9 Blades also have the same issue. The Java applet and Webstart however, loads but the virtual media mounting fails. The work around is to launch the IRC through IRC Application (HP Lights-Out Stand Alone Remote Console) which is installed on terminal client.

EFM

To use EFM on Gen 10 Blades, please select options/filters “Make Bootable ISO file” and “Enclosure Firmware Management” while creating custom SPP ISO on HPSUM 8.0.0. Please refer to HPSUM 8.0.0 User guide for further details.

CAC

• In the CAC mode SSH, Telnet and XML Reply protocols will be disabled.
• Linked enclosure login will not work if the linked enclosure in CAC mode.
• If accurate Service account details are not provided, LDAP user login with certificate will fail.
• It is highly recommended to establish a recovery plan before getting started with CAC.  If something goes wrong with the OA configuration, the OA may be recovered through the serial port or Insight Display panel and USB KEY. Both methods require physical access to the OA.  However, if an LCD PIN has been configured (and forgotten) and local accounts have been disabled or CAC has been incorrectly configured then, the only way to recover is through a serial port. The two most common situations where OA recovery is needed are when LDAP has been configured incorrectly with local accounts disabled or when CAC has been configured without certificate access.

Configurable SSH Port Number                                               

If a Standby OA is running firmware version less than 4.85 and it is updated to firmware version greater than or equal to 4.85 using synchronize firmware feature from Active OA, after the firmware update and reboot of the Standby OA, SSH port will not open in the configured port number. The work around is to reboot the Standby OA and SSH port will open in the configured port in next boot. This issue will not occur in the case where SSH port is configured to default port 22 in the Active OA.

• Addressed an issue where OA "update iLO all" command fails in an enclosure with maximum Blades.
• Addressed an issue where a Warning Alert  was wrongly sent when a fan is reseated in an enclosure
• Addressed an issue where Remote Syslog logging would fail when OA failover happened in an IPv6 only environment.
• Enhanced OA to bring the server from a power throttled state back to normal power state upon an OA reboot to circumvent an unwarranted emergency brake.
• Fixed an issue where the Active and Standby OAs can have the same IP address in some rare situations.
• Resolved an issue where a Gen9 server’s host name gets cleared when the blade is rebooted.
• Addressed an issue where server blade Power ON will be delayed in enclosures with OA Firmware Version 4.60 and managed by HPE OneView, when the OA module is reset until OneView refreshes the servers.

Security

The following security vulnerabilities were fixed:

• CVE-2016-5387– Addressed a vulnerability which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request.
• CVE-2016-2183- Addressed a vulnerability against TLS ciphers with 64bit block size in which makes it easier for remote attackers to obtain cleartext data via an attack against a long-duration encrypted session
• CVE-2016-6515 - Addressed a vulnerability in OpenSSH which did not limit password lengths for password authentication, which allows remote attackers to cause a denial of service via a long string.
• CVE-2015-8215 - Addressed a vulnerability IPv6 stack which does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service.
• Addressed issue where in Onboard Administrator was vulnerable to Buffer overflow.
• Added the HSTS[HTTP strict transport security] support  in OA.
• Addressed a memory corruption vulnerability in the post-authentication sshd process.

Issues and workarounds

Browsers

• OA GUI is not accessible in Chrome versions 43.0.2357.10 to 44.0.2383.The issue was caused by a “regression” in Chrome (or WebKit). Customers should use an alternative browser like Firefox or Internet Explorer or try a different version of Chrome.
• SSO-to-iLO connection from the OA using an iLO host name fails with Microsoft Internet Explorer11 on Windows 8.On a Windows 8 system with Internet Explorer 10 or Internet Explorer 11, if the OA web GUI session is loaded using a host name instead of an IP address, an attempt to open an iLO window using SSO from the OA web GUI might result in the iLO page loading in the OA web GUI window instead of the intended new window. This issue was determined to be a bug in Internet Explorer and is expected to be fixed in a future release or update for Internet Explorer. To work around this issue, either use an IP address to load the OA Web GUI, or turn off Protected Mode for the appropriate zone in Internet Explorer’s settings. This issue occurs only on Internet Explorer browsers.

FIPS

Certificates smaller than 2048 bits in size are not compliant with FIPS requirements as enforced by the OA firmware starting with OA 4.20. When the OA running OA firmware version 4.40 or greater is operating in FIPS Mode ON/DEBUG and is configured with a 1024-bit LDAP certificate that was installed when running a previous version of OA firmware, FIPS Mode ON/DEBUG is considered to be operating in a degraded state due to the presence of the non-compliant certificate. While operating in this FIPS-Degraded Mode operational state, attempts to set FIPS Mode OFF from the OA GUI Network Access>FIPS tab will fail and show the error message The selected FIPS mode is already enabled. When the non-compliant certificate is removed, the FIPS-Degraded operational status is cleared, FIPS Mode can then be successfully set to OFF from the GUI interface. Note that the OA CLI command SET FIPS MODE OFF can be successfully used to set FIPS Mode OFF even with non-compliant 1024-bit LDAP certificates installed in the OA.

IRC

Unable to open .net IRC console for Gen10 Blades, Gen9 Blades also have the same issue. The Java applet and Webstart however, loads but the virtual media mounting fails. The work around is to launch the IRC through IRC Application (HP Lights-Out Stand Alone Remote Console) which is installed on terminal client.

EFM

To use EFM on Gen 10 Blades, please select options/filters “Make Bootable ISO file” and “Enclosure Firmware Management” while creating custom SPP ISO on HPSUM 8.0.0. Please refer to HPSUM 8.0.0 User guide for further details.

• This firmware contains a change to prevent occasional command completion times in the 4-5 second window when command is received just as the drive is transitioning from active to Idle A.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Known Issues:

• This firmware contains a change to prevent a drive reset issue, which may affect performance.

• Fixes a data integrity risk which could occur during 4k or greater unaligned writes while the device incurs a smart trip event. During these conditions there is a potential for data intended to be written directly to disk to fail to be written.
• Eliminates a data integrity risk when an unaligned Write and Verify command is sent to a bad sector. During these conditions there is a potential for data intended to be written to disk to fail to be written. 

• Fixes a data integrity risk which could occur during 4k or greater unaligned writes while the device incurs a smart trip event. During these conditions there is a potential for data intended to be written directly to disk to fail to be written.
• Eliminates a data integrity risk when an unaligned Write and Verify command is sent to a bad sector. During these conditions there is a potential for data intended to be written to disk to fail to be written. 

• Firmware version HPG4 prevents the occurrence of a rare issue which could lead to slow drive performance. This issue has the potential to impact all drives in configurations where the drives might be allowed to be idle for greater than 1 second.

• Fixed an occasional and potentially significant delay in completion time of the SANITIZE function, along with alignment of some settings, features and internal logging with specifications.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Known Issues:

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre. The revision of the microcode included in this System ROM addresses issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation. Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

• Internal multicast loopback issue that broke LACP bonding protocol.

• Fixed an issue which prevented VLAN tag Priority Code Point (PCP) in RX and TX from working properly.
• Fixed a PSOD case during installation when the RDMA module was not removed.
• Management interface port type field (nmlx-_en_MgmtIFPortType) reported incorrect value.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Known Issues:

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre. The revision of the microcode included in this System ROM addresses issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation. Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Known Issues:

•  iLO 4 unexpectedly restored itself to factory default settings when an user did not initiate the process. 
• When Auto Power-On is set to Always Power On to Restore Last Power State, the server might not power on after a cold reset. 
• False nonvolatile flash memory (NAND) test failures might occur after a firmware upgrade.
• Incorrect RAM and Storage values are displayed on the HPE OneView for VMware vCenter tab.
• Remote Support disk events include the text “Not Available” for the variables when data is missing.
• Some Power Supply information is missing from the iLO web interface.
• iLO displays Failed status instead of Disabled status when the Smart Array Cache Module battery is disconnected.
• An iLO SSH port disconnection issue was observed after more than two days of continuous operation.
• Values do not move up when the preceding entries in the Directory User Context fields are cleared.
• Boot failures might occur when booting with a MicroSD card in Legacy mode.
• Changed the resolution of a Redfish SSD wear field to display in percentage.
• The date and time settings are reset after a firmware update.
• The server powers on instead of shutting down when multiple power-on requests are sent.

SECURITY FIXES: 

  For the latest security bulletins and vulnerabilities addressed in this version, please visit: 
  https://support.hpe.com/hpesc/public/home  

Security best practices:

  Please refer to the HPE Integrated Lights-Out Security Technology Brief for the latest on security best practices at:
  http://www.hpe.com/support/iLO4_security_en

The following issues are resolved in iLO 4 version 2.55:

• Masked out errant failures due to charging of storage battery.
• Implemented cell voltage separation pre-failure warning for storage battery.
• iLO RESTful API output might display incorrect power supply information.
• iLO Federation group authentication errors might occur if you repeatedly add and remove groups during a query.
• An iLO RESTful API event subscription might be lost when DELETE and CREATE subscriptions occur at the same time that the transmitter waits to retry an action.
• During CAC smartcard authentication, the iLO RESTful API returns a session URI that incorrectly contains uppercase letters.
• In certain conditions, the Rest server becomes unavailable during a GET of the IELs.
• The iLO web interface language pack redirects to English.
• The iLO RESTful API output text represents upper threshold values as lower thresholds.
• The Linux openipmi driver does not poll the receive message queue if KCS host irq not enabled.
• The iLO RESTful API EthernetInterfaces link should be under the system/1 root resource, and not in the OEM section.
• SNMPv3 Engine Boot is not getting incremented on iLO reset.
• IPMI FRU read returns incorrect completion code for response too long.
• IPMI Get PEF Capabilities returns the number of valid table entries instead of the total number of table entries.  
• IPMI Set Boot Options for one time change for boot mode UEFI/Legacy fixed.  
• iLO restserver suspends when patching bad payload to external provider array.
• iLO REST API returned 500 internal error for a GET of systems/1/ leading to failed One View Profile Apply.
• iLO RESfulT API events are sending incorrect "Host" header when using IPv6.
• iLO time becomes Unset after update from 2.50 or prior to 2.54.

• Firmware version HPG4 prevents the occurrence of a rare issue which could lead to slow drive performance. This issue has the potential to impact all drives in configurations where the drives might be allowed to be idle for greater than 1 second.

• HPS4 firmware release resolved a firmware timing issue which occurred during drive long self-test and resulted in a timeout condition that caused the drive to become unrecognized by the system.

• HPS4 firmware release resolved a firmware timing issue which occurred during drive long self-test and resulted in a timeout condition that caused the drive to become unrecognized by the system.

• Reliability enhancement for applications that write data to a narrow range of tracks.

Known Issues:

• Firmware cannot be downgraded to HPG3 after updating to HPG4.

• RDMA_CM driver was causing the Queue Pair (QP) Rate Limit to be activate unexpectedly and reduce the bandwidth significantly on this QP.
• Low throughput when Eplicit Congestion Notification (ECN) was enabled in a many-to-one scenario.
• A rare issue that caused the firmware to hang.
• The maximum temperature in a setup was incorrectly reported as the current temperature regardless of the actual temperature.
• Virtual Addressing Capability incorrect report in NC-SI (Sideband).
• Enhanced RX sensitivity per Vcore.
• Disabled the option to write to the protected modules to avoid receiving NACK upon module initialization.
• Enabled cold_flicks reset when sending invalidate_all command to invalidate all the ECs.
• SR-IOV min & max rate limiter can only support up to 64 Virtual Functions (VFs) per port.
• Explicit Congestion Notification (ECN) did not function as expected when the number of QPs > ~500 per host.
• When using Unreliable Datagram (UD) RDMA over Converged Ethernet (RoCE) multicast traffic over SR-IOV, packets were scattered to all the attached QPs in the e-sw (PF and its VFs) and not only on the vport that was specified in the e-se FDB.

• This firmware implements the Firmware Security Log Page.

• This firmware contains a change to prevent occasional command completion times in the 4-5 second window when command is received just as the drive is transitioning from active to Idle A.

•  Fixed NVRAM CRC error

•  Fixed NVRAM CRC error

• This firmware implements the Firmware Security Log Page.

• Disabled multicast loopback to avoid a scenario that prevented MAC learning in some configurations.
• Encapsulated traffic (VXLAN/Geneve) directed to NetQ RSS queue was not distributed through all queues’ channels, thus did not utilize the RSS feature.

• Traffic loss of large packets occured after MTU change.

-Removed action over FAULT_SENSED bit due to incorrect algorithm.

-Removed action over FAULT_SENSED bit due to incorrect algorithm.

• This firmware improves HDD reliability when HDDs are exposed to long periods of host inactivity that exceed 1 second. HDDs may become unresponsive when using HDD firmware prior to version HPG5.  This firmware also contains a change which prevents an incorrect reassign status of a repaired sector from being logged.

• This firmware implements the Firmware Security Log Page.

• This firmware contains a change to prevent occasional command completion times in the 4-5 second window when command is received just as the drive is transitioning from active to Idle A.

• Updated to support Service Pack for ProLiant version 2017.07.0.
  Note: If component version 2017.01.20 was previously installed, then it is not necessary to upgrade to version 2017.01.20(A).

Issues resolved in version 2017.01.20:

• Fixes minor installation issue with the driver on VMware vSphere 6.5.

• This firmware contains a change to prevent a drive reset issue, which may affect performance.

• This firmware contains a change to prevent a drive reset issue, which may affect performance.

• Firmware corrects an issue where drives were not found during Power-On Self-Test device discovery.

• This firmware contains several low level maintenance fixes including debug data retrieval through read buffer.  The fixes addressed events observed in a specialized lab testing environment, and are not expected to be experienced in customer use case scenarios.

• Fix libpci dependencies for hp-ams installation on Red Hat Enterprise Linux 7.2
• Prioritized VLAN interfaces before Ethernet interfaces to correctly obtain the fibre channel controller information within hp-ams
• Ensure the proper bounds are validated before releasing memory with Scandir

• Changed priority of handling for NIC interfaces
• Added support for the following new hardware options:
  • HPE XL1x0r Ethernet 10Gb 2-port 568FLR-MMT Adapter
  • HPE SGI Performance Dual Plane CX5 InfiniBand EDR with 2x1-port HCA Mezzanine Card (Ethernet Only)
  • HPE Ethernet 10Gb 2-port 522FLR-T Converged Network Adapter
  • HPE Smart Array P824i-p Controller

• DDR cache could be randomly disabled after several boots
• The controller could become unresponsive while in HBA mode during the creation of a partition/file system

.

This product addresses an issue where the link status for an ‘HPE Synergy 3820C 10/20Gb Converged Network Adapter’ that is configured in a Link Aggregation Group (LAG) using ‘HPE Virtual Connect SE 40Gb F8 Module for Synergy’ may show as down at the Virtual Connect (VC) management console.

• An HPE ProLiant Gen9 server upgraded to System ROM version 2.40_02-17-2017 will stop responding during Power-On Self-Test (POST) when performing a warm boot if the system is configured with HPE Dual 8GB microSD Enterprise Midline USB Kit (741279-B21) , which has controller firmware version FW 1.3.2.202. For additional information, refer to HPE Customer Advisory a00016609en_us

• This firmware contains a change to prevent occasional command completion times in the 4-5 second window when command is received just as the drive is transitioning from active to Idle A.

• This firmware implements a feature which performs a random seek after 100ms of host inactivity.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Known Issues:

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre. The revision of the microcode included in this System ROM addresses issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation. Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Ver. 2.56_01-22-2018 (B) contains support for VMware vSphere 6.7.  It is functionally equivalent to ver. 2.56_01-22-2018.  It is not necessary to upgrade with version 2.56_01-22-2018 (B) if a previous component revision was used to upgrade the firmware to ver. 2.56_01-22-2018.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

• This firmware improves HDD reliability when HDDs are exposed to long periods of host inactivity that exceed 1 second. HDDs may become unresponsive when using HDD firmware prior to version HPD4.  This firmware also contains a change which prevents an incorrect reassign status of a repaired sector from being logged.

• This firmware improves potential timeouts that could occur during the write error recovery process (causing the drive to internally reset), and corrects possible data mismanagement issues.

• DDR cache could be randomly disabled after several boots
• The controller could become unresponsive while in HBA mode during the creation of a partition/file system

This PSOD happens because a Netpoll scheduling delay leads to a cmd_cmpl_wait timeout false alarm. The 240 msec wait time is not sufficient for the HWRM_RING_FREE command to complete.

• Compute modules do not power on after restoring power to Frame.
• When you use iLO Virtual Media to install an operating system, installation might fail when iLO is configured to use the Shared Network Port.
• In rare cases, a server runs out of available SSH sessions because the sessions are not reclaimed when a client disconnects.
• iLO 5 unexpectedly restored itself to the factory default settings when a user did not initiate the process.
• When Auto Power-On is set to Always Power On or Restore Last Power State, the server might not power on after a cold reset.
• iLO cannot display the HP Ethernet 1Gb 4-port 331i Adapter MAC address.
• NVMe drive model numbers are incorrect or inconsistent.
• Clearing the oemHPE_usercntxt## from the command line clears the value, even though error messages might be displayed.
• Fixed Single Sign-On when in CNSA mode.
• Added support for RSA-PSS certificate signatures.

For the latest security bulletins and vulnerabilities, please visit: 
https://support.hpe.com/hpesc/public/home  

Please refer to the HPE Integrated Lights-Out 5 Security Technology Brief for the latest on security best practices at: 
http://www.hpe.com/support/ilo5-security-en

• NVMe drive details are not displayed in the iLO web interface for HPE ProLiant XL190r Gen10 servers.
• The system BIOS version is missing in AlertMail messages.
• The IPMI Get Chassis Capabilities and Get Chassis Status commands do not reflect the Chassis Intrusion state.
• Virtual Media devices are inaccessible when two virtual devices are mounted simultaneously.
• Patched configuration file system.
• The IPMI pre-watchdog-timeout interrupt does not occur when no watchdog action is selected.
• Intermittent loss of network interface card (NIC) and drive detection (P408e-m controller) by BIOS on system boot up of HPE ProLiant BL460c servers.

• This firmware corrects possible unrecovered errors caused by the track refresh algorithm not working properly.

Problems Fixed for HPG7 (B):

• The component would fail to flash drive firmware on a server with a Trusted Platform Module (TPM) enabled when using the /tpmbypass switch.

Problems Fixed for HPG7 (C):

• Component would fail to install drive firmware for drives present in a system configured with two or more external drive enclosures attached to an HP Host Bus Adapter H22x. The following message would be reported in the component log file - “Device appears more than once in tree”. The drive firmware installation failure was not observed in configurations having only one external drive enclosure attached to an HP Host Bus Adapter H22x.
• Component would cause an exception error when deployed on a computer with a fully qualified domain name greater than 40 characters in length.

• Reliability enhancement for applications that write data to a narrow range of tracks.

Changed the settings in the SAS Expander to support disk discovery when 12Gb SAS HDDs are installed in the enclosure 

Changed the settings in the SAS Expander to support disk discovery when 12Gb SAS HDDs are installed in the enclosure 

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Known Issues:

This product addresses an issue where the link status for an ‘HPE Synergy 3820C 10/20Gb Converged Network Adapter’ that is configured in a Link Aggregation Group (LAG) using ‘HPE Virtual Connect SE 40Gb F8 Module for Synergy’ may show as down at the Virtual Connect (VC) management console.

• Add a check for zero capacity LUNs (Logical Units) and avoid creating device path for them.
• HP StoreFabric CN1200E Dual Port Converged Network Adapter FCoE function only show "Slot 3 Port 3:CN1200E Function 2-FCoE"

UEFI:

• Boot From SAN(BFS) volume is seen offline during Microsoft Windows 2016 Operating System install with 11.2.1263.19 Firmware
• Removal of Boot entry from card Basic Input /Output System(BIOS) caused a red screen on HPE ProLiant ML350 Gen10 Server

BIOS/Firmware:

• HP FlexFabric 20Gb 2-port 650M Adapter goes missing from Operating System (OS) post 1.1.183.624 firmware flash
• Excessive number of timeouts overflowing Noted All or Nothing Gate(NAND)
• For HP StoreFabric CN1200E 10Gb Converged Network Adapter and HPE StoreFabric CN1200E-T 10GBASE-T Converged Network Adapter Firmware Active Health System (AHS) log incorrect part number
• Name of HP StoreFabric CN1200E 10Gb Converged Network Adapter show incomplete in Active Health System (AHS)
• For HP FlexFabric 20Gb 2-port 650FLB Adapter “Function Driver” is missing in Active Health System (AHS) field
• Ports of HP FlexFabric 10Gb 2-port 556FLR-SFP+ Adapter/HPE StoreFabric CN1200E-T 10GBASE-T Converged Network Adapter will become Disconnected in ESXI6.0 update 3 Operating System
• Server Profile Health Status is not stable during Power on

For more details please go through the document titled "Fibre Channel and Fibre Channel Over Ethernet Host Bus Adapters - Unmapping LUNS From Storage Might Result in a Purple Diagnostic Screen on VMware ESXi 5.5, 6.0, or 6.5 " at the following link:

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00042449en_us

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre. The revision of the microcode included in this System ROM addresses issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation. Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Ver. 2.56_01-22-2018 (B) contains support for VMware vSphere 6.7.  It is functionally equivalent to ver. 2.56_01-22-2018.  It is not necessary to upgrade with version 2.56_01-22-2018 (B) if a previous component revision was used to upgrade the firmware to ver. 2.56_01-22-2018.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version

Known Issues:

None

• HPG6 firmware improves drive reliability where disk drives are exposed to long periods of host inactivity which exceed 1 second.

• HPG6 firmware improves drive reliability where disk drives are exposed to long periods of host inactivity which exceed 1 second.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Known Issues:

• This firmware corrects a potential issue where the data in the reserved tracks is not properly updated, eliminating the risk of a drive not finishing the boot process on power up.
• Other maintenance fixes and updates are also included with the new firmware.

• This firmware improves potential timeouts that could occur during the write error recovery process (causing the drive to internally reset), and corrects possible data mismanagement issues.

• This firmware contains a change to prevent occasional command completion times in the 4-5 second window when command is received just as the drive is transitioning from active to Idle A.

• Fixes a rare but potential data integrity error during low 5v drive voltage and specific sequential data streaming conditions, which could result in data written to incorrect sectors.

Problems Fixed for HPG5 (B):

• The component would fail to flash drive firmware on a server with a Trusted Platform Module (TPM) enabled when using the /tpmbypass switch.

Problems Fixed for HPG5 (C):

• Component would fail to install drive firmware for drives present in a system configured with two or more external drive enclosures attached to an HP Host Bus Adapter H22x. The following message would be reported in the component log file - “Device appears more than once in tree”. The drive firmware installation failure was not observed in configurations having only one external drive enclosure attached to an HP Host Bus Adapter H22x.
• Component would cause an exception error when deployed on a computer with a fully qualified domain name greater than 40 characters in length.

• The threshold condition byte of cpqHoMibStatusArray aligns with cpqHoFileSysCondition.
• Read /proc/tty/driver/serial to replace /proc/ioports as data source. The purpose is to correct the order of tty serial port shown on HPE SMH.
• Updated the “memory device type detail” information for LRDIMM/DIMM/RDIMM. The purpose is to recognize the value from SMBIOS and show the memory type detail information.

• Reliability enhancement for applications that write data to a narrow range of tracks.

Known Issues:

• Firmware cannot be downgraded to HPG3 after updating to HPG4.

• Sending Work Requests (WRs) with multiple entries where the first entry was less than 18 bytes used to fail.
• When the interface was down, ethtool counters ceased to increase. As a result, RoCE traffic counters were not always incremented.
• Compilation errors of MLNX_OFED over kernel when CONFIG_PTP_1588_CLOCK parameter was not set.
• System used to hang when trying to allocate multiple device memory buffers from different processes simultaneously.

• RPM commands used to fail and create a core file occassionally after reboot, with messages such as “Bus error (core dumped)”, causing the openibd service to fail to start.
• RoCEv2 multicast traffic using RDMA-CM with IPv4 address were not received by the adapter.
• ethtool -P output was 00:00:00:00:00:00 when using old kernels.
• Replaced a few “GPL only” legacy libibverbs function with upstream implementation that conforms with libibverbs GPL/BSD dual license model.
• ACCESS_REG command failure used to appear upon RoCE Multihost driver restart in dmesg.
• Concurrent client requests got corrupted when working in persistent server mode due to a race condition on the server side.
• Client side did not exit gracefully in RTT mode when the server side was not reachable.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Known Issues:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre. The revision of the microcode included in this System ROM addresses issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation. Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Ver. 2.56_01-22-2018 (B) contains support for VMware vSphere 6.7.  It is functionally equivalent to ver. 2.56_01-22-2018.  It is not necessary to upgrade with version 2.56_01-22-2018 (B) if a previous component revision was used to upgrade the firmware to ver. 2.56_01-22-2018.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

• HPG6 firmware improves drive reliability where disk drives are exposed to long periods of host inactivity which exceed 1 second.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Known Issues:

• HPK3 firmware resolved an issue that caused the disk activity ring, which is located on NVME SSD drive carrier, to constantly spin regardless of drive activity status.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Known Issues:

• HPK3 firmware resolved an issue that caused the disk activity ring, which is located on NVME SSD drive carrier, to constantly spin regardless of drive activity status.

In a system configured with the HPE Dynamic Smart Array B140i Controller and higher than 128 CPU (cores), a system failure event would occur.

The firmware in this product  addresses an issue where the "Reboot Required" icon is not highlighted after a NIC firmware update (via System Utilities->Embedded Application->Firmware Update) completes.

• This firmware improves HDD reliability when HDDs are exposed to long periods of host inactivity that exceed 1 second. HDDs may become unresponsive when using HDD firmware prior to version HPD7. 

• This firmware also contains a change which prevents an incorrect reassign status of a repaired sector from being logged.

• This firmware prevents asserts on a sequential write which can result in devices being lost from the configuration. It also preserves persistent reservation through downloads which prevents loss of performance.

For more details please go through the document titled "Fibre Channel and Fibre Channel Over Ethernet Host Bus Adapters - Unmapping LUNS From Storage Might Result in a Purple Diagnostic Screen on VMware ESXi 5.5, 6.0, or 6.5 " at the following link:

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00042449en_us

• HPG6 firmware improves drive reliability where disk drives are exposed to long periods of host inactivity which exceed 1 second.

• Improves the drive idle time behavior by reducing long periods of track dwell time, which if not implemented, could increase media lube depletion and reduce drive reliability.  

• Prioritized VLAN interfaces before Ethernet interfaces to correctly obtain the fibre channel controller information within hp-ams
• Ensure the proper bounds are validated before releasing memory with Scandir

• Changed priority of handling for NIC interfaces
• Added support for the following new hardware options:
  • HPE XL1x0r Ethernet 10Gb 2-port 568FLR-MMT Adapter
  • HPE SGI Performance Dual Plane CX5 InfiniBand EDR with 2x1-port HCA Mezzanine Card (Ethernet Only)
  • HPE Ethernet 10Gb 2-port 522FLR-T Converged Network Adapter
  • HPE Smart Array P824i-p Controller

• After long term use of the HDD, a rare condition might occur following a power cycle where the drive heads may land on areas of the disk containing data, which could potentially cause data loss or mechanical damage. Firmware version HPGD prevents this condition from occurring.

Problems Fixed for HPGD (G):

• Component would fail to install drive firmware for drives present in a system configured with two or more external drive enclosures attached to an HP Host Bus Adapter H22x. The following message would be reported in the component log file - “Device appears more than once in tree”. The drive firmware installation failure was not observed in configurations having only one external drive enclosure attached to an HP Host Bus Adapter H22x.

Problems Fixed for HPGD (J):

• When attempting to update drive firmware in a VMware vSphere 6.5 environment, the update would fail and the event was logged as a segmentation fault error.

• After long term use of the HDD, a rare condition might occur following a power cycle where the drive heads may land on areas of the disk containing data, which could potentially cause data loss or mechanical damage. Firmware version HPGD prevents this condition from occurring.

Problems Fixed for HPGD (G):

• Component would fail to install drive firmware for drives present in a system configured with two or more external drive enclosures attached to an HP Host Bus Adapter H22x. The following message would be reported in the component log file - “Device appears more than once in tree”. The drive firmware installation failure was not observed in configurations having only one external drive enclosure attached to an HP Host Bus Adapter H22x.

Problems Fixed for HPGD (J):

• When attempting to update drive firmware in a VMware vSphere 6.5 environment, the update would fail and the event was logged as a segmentation fault error.

• Firmware improves a NAND threshold level to strengthen differentiation of NAND states to mitigate excessive reallocation of NAND Blocks (Grown Bad Blocks). For important information about this resolved issue, refer to HPE Customer Bulletin a00027721.

• This firmware eliminates a data integrity risk when an unaligned Write and Verify command is sent to a bad sector. During these conditions there is a potential for data intended to be written to disk to fail to be written.

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre.  The revision of the microcode included in this System ROM does NOT have issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation.  Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Ver. 2.56_01-22-2018 (B) contains support for VMware vSphere 6.7.  It is functionally equivalent to ver. 2.56_01-22-2018.  It is not necessary to upgrade with version 2.56_01-22-2018 (B) if a previous component revision was used to upgrade the firmware to ver. 2.56_01-22-2018.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre.  The revision of the microcode included in this System ROM does NOT have issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation.  Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

• Sending Work Requests (WRs) with multiple entries where the first entry was less than 18 bytes used to fail.
• When the interface was down, ethtool counters ceased to increase. As a result, RoCE traffic counters were not always incremented.
• Compilation errors of MLNX_OFED over kernel when CONFIG_PTP_1588_CLOCK parameter was not set.
• System used to hang when trying to allocate multiple device memory buffers from different processes simultaneously.

• RPM commands used to fail and create a core file occassionally after reboot, with messages such as “Bus error (core dumped)”, causing the openibd service to fail to start.
• RoCEv2 multicast traffic using RDMA-CM with IPv4 address were not received by the adapter.
• ethtool -P output was 00:00:00:00:00:00 when using old kernels.
• Replaced a few “GPL only” legacy libibverbs function with upstream implementation that conforms with libibverbs GPL/BSD dual license model.
• ACCESS_REG command failure used to appear upon RoCE Multihost driver restart in dmesg.
• Concurrent client requests got corrupted when working in persistent server mode due to a race condition on the server side.
• Client side did not exit gracefully in RTT mode when the server side was not reachable.

• This firmware improves HDD reliability when HDDs are exposed to long periods of host inactivity that exceed 1 second. HDDs may become unresponsive when using HDD firmware prior to version HPG1. 
• This firmware also contains a change which prevents an incorrect reassign status of a repaired sector from being logged.

• This firmware prevents asserts on a sequential write which can result in devices being lost from the configuration. It also preserves persistent reservation through downloads which prevents loss of performance.

• Under rarely occurring conditions where a host error occurred during a write with 4K unaligned sectors, the write operation might result in stale data. Firmware HPD4 prevents the possibility of stale data occurring under these conditions.

• After greater than 2 seconds of idle time following a forced power transition or no activity, random seeks might not occur as required. Firmware HPD4 initiates random seeks following  the device being placed into a forced power condition. Random seeks are necessary to maintain the reliability and life of the device.

• This firmware improves HDD reliability when HDDs are exposed to long periods of host inactivity that exceed 1 second. HDDs may become unresponsive when using HDD firmware prior to version HPD7. 

• This firmware also contains a change which prevents an incorrect reassign status of a repaired sector from being logged.

• This firmware prevents asserts on a sequential write which can result in devices being lost from the configuration. It also preserves persistent reservation through downloads which prevents loss of performance.

• The PortRcvPkts counter was prevented from being cleared after resetting it..
• System Time Out on the configuration cycle of the VFs when more than 10 Virtual Functions performed FLR and the completion Time Out value was configured to a range of less than 16 msec.
• The server hung and resulted in NMI (Non-maskable interrupt) when run-ning “mlxfwtop –d mt4103_pci_cr0” while restarting the driver in parallel (from a differ-ent thread). In this case, the downstream bridge over the device reported completion timeout error. 
• In flow_steering, BMC could not receive a ping over IPV6 after running bmc_reboot.
• While closing the HCA (Host Channel Adapters), RX packet caused bad access to resources that did not exist, and consequently caused the QPCGW or the irisc to get stuck.
• The master SMLID and the LID was either 0 or 0xFFFF when the port was neither active nor armed.
• ibdump could not capture all MADs packets.
• Link could not go up after reboot.
• A rare issue caused the PCIe configuration cycle that arrived during the time of sw_reset to generate 2 completions. 
• NC-SI (Network Controller Sideband Interface) did not work when adding the disable_stat-ic_steering_ini field in the ini file, due to memory allocation issue for this field in the scratchpad.

Fixes submitted in version 14.22.1414 :

• A temperature normalization function calculation issue. Now the cable gain that is not pure integer is taken into account was fixed.
• An issue related to the parser of object 0x8 in ASN that caused different structure in response was fixed.
• Added the option to avoid unintentionally powering off the backplane port cage upon reboot when in standby mode.
• An issue that caused the driver to return a wrong logical OR of the 2 physical ports, when querying the vport state when the LAG was enabled wre fixed.
• Increased the Full Wire Speed (FWS) threshold value to improve EDR link results.
• An issue that resulted in “Destroy LAG” command failure if a VFs received an FLR while its affinity QPs were open.
• When RoCE Dual Port mode is enabled, tcpdump is not functional on the 2nd port.

• The PortRcvPkts counter was prevented from being cleared after resetting it.
• Fixed an issue which caused a system Time Out on the configuration cycle of the VFs when more than 10 Virtual Functions performed FLR and the completion Time Out value was configured to a range of less than
  16 msec.
• Fixed an issue that caused the server to hang and result in NMI when running “mlxfwtop –d mt4103_pci_cr0” while restarting the driver in parallel (from a different thread). In this case, the downstream bridge over the device reported completion timeout error.
• Fixed an issue in flow_steering where BMC could not receive a ping over IPV6 after running bmc_reboot.
• Fixed an issue while closing the HCA, where RX packet caused bad access to resources that did not exist, and consequently caused the QPCGW or the irisc to get stuck.
• Fixed an issue where the masterSM LID and the LID was either 0 or 0xFFFF when the port was neither active nor armed.
• Fixed an issue that prevented ibdump from capturing all MADs packets.
• Fixed an issue that prevented the link to go up after reboot.
• Fixed a rare issue that cause the PCIe configuration cycle that arrived during the time of sw_reset to generate 2 completions.
• Fixed an issue that caused NC-SI not to work when adding the disable_static_steering_ini field in the ini file, due to memory allocation issue for this field in the scratchpad.

Fixes submitted in version 14.21.2800:

• Fixed an issue that caused QP connection timeout due to firmware not being able to handle duplicate packets with AckReq bit set. The fix stopped ignoring duplicate AckReq packets to avoid timeout on the sender side.
• MPFS load balance (DUP_MAC_ACTION==LOAD_BALANCE(1)) is not working as long as IB_ROUTING_MODE/SRIOV_IB_ROUTING_MODE is configured to LID.
• Fixed an issue that caused a SX engine deadlock (the SX engine handles software port/priority changes for a specific Send Queue) when more than a single SX engine handled the "prio diff" flow simultaneously, thus caused the hardware to get stuck.
  The issue happened as the firmware releases the SX engine and waits for various operation to complete. However, due to a race that allows a different transaction to get into the SX engine and cause the lock to be taken by it, the SX engine release is prevented.
• Fixed an issue that caused the system to hang while changing QPTS/QPDPM/QPDP parameters during traffic.
• Fixed unfairness between senders in RoCE LAG while ECN is configured.
• Fixed an issue which displayed diagnostic counters only on the adapter that was initialized first, which is the counters’ owner. The owner received correct values, while the other adapter only received zeros.
• Fixed an issue that caused the rdma_cm traffic to fail on the 2nd port when more than 32 VFs were configured, when the RoCE Dual Port vHCA (a.k.a Multi-Port vHCA: MPV) feature was enabled.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

Firmware Dependencies:

Problems Fixed:

Known Issues:

-Removed action over FAULT_SENSED bit due to incorrect algorithm.

-Removed action over FAULT_SENSED bit due to incorrect algorithm.

Ver. 1.0.9 (F) contains support for new server products.  It is functionally equivalent to ver. 1.0.9.  It is not necessary to upgrade with Revision F if a previous component revision was used to upgrade the firmware to ver. 1.0.9.

Firmware Dependencies:

None

Problems Fixed:

Addresses an issue in which the minimum power capping value was incorrectly being calculated on certain systems. This fix increases the accuracy of the minimum capping value set during POST.

Known Issues:

None

Ver. 1.0.9(D) contains updates to the component packaging and is functionally equivalent to ver. 1.0.9.  It is not necessary to upgrade with Revision D if a previous component Revision was used to upgrade the firmware to version 1.0.9.

Firmware Dependencies:

None

Problems Fixed:

Addresses an issue in which the minimum power capping value was incorrectly being calculated on certain systems. This fix increases the accuracy of the minimum capping value set during POST.

Known Issues:

None

• During HPE ProLiant BL460c Gen10 server boot operation, the drive was not detected by the storage controller.

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for the Speculative Store Bypass (also known as Variant 4) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3639. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

None

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for the Speculative Store Bypass (also known as Variant 4) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3639. Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

None

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre. The revision of the microcode included in this System ROM addresses issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation. Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

• Sending Work Requests (WRs) with multiple entries where the first entry was less than 18 bytes used to fail.
• When the interface was down, ethtool counters ceased to increase. As a result, RoCE traffic counters were not always incremented.
• Compilation errors of MLNX_OFED over kernel when CONFIG_PTP_1588_CLOCK parameter was not set.
• System used to hang when trying to allocate multiple device memory buffers from different processes simultaneously.

• RPM commands used to fail and create a core file occassionally after reboot, with messages such as “Bus error (core dumped)”, causing the openibd service to fail to start.
• RoCEv2 multicast traffic using RDMA-CM with IPv4 address were not received by the adapter.
• ethtool -P output was 00:00:00:00:00:00 when using old kernels.
• Replaced a few “GPL only” legacy libibverbs function with upstream implementation that conforms with libibverbs GPL/BSD dual license model.
• ACCESS_REG command failure used to appear upon RoCE Multihost driver restart in dmesg.
• Concurrent client requests got corrupted when working in persistent server mode due to a race condition on the server side.
• Client side did not exit gracefully in RTT mode when the server side was not reachable.

• During a hot removal/hot plug event, the drive failed discovery operation. To address this problem, the drive firmware handling of the Start/Stop Unit command has been improved.

• This firmware prevents asserts on a sequential write which can result in devices being lost from the configuration. It also preserves persistent reservation through downloads which prevents loss of performance.

• This firmware improves HDD reliability when HDDs are exposed to long periods of host inactivity that exceed 1 second. HDDs may become unresponsive when using HDD firmware prior to version HPD6. 

• This firmware also contains a change which prevents an incorrect reassign status of a repaired sector from being logged.

• This firmware contains a change to prevent an incorrect sense code from being posted when a Stop command is received during power-on sequence.

Firmware Dependencies:

Problems Fixed:

Known Issues:

• Add a check for zero capacity LUNs (Logical Units) and avoid creating device path for them.
• HP StoreFabric CN1200E Dual Port Converged Network Adapter FCoE function only show "Slot 3 Port 3:CN1200E Function 2-FCoE"

UEFI:

• Boot From SAN(BFS) volume is seen offline during Microsoft Windows 2016 Operating System install with 11.2.1263.19 Firmware
• Removal of Boot entry from card Basic Input /Output System(BIOS) caused a red screen on HPE ProLiant ML350 Gen10 Server

BIOS/Firmware:

• HP FlexFabric 20Gb 2-port 650M Adapter goes missing from Operating System (OS) post 1.1.183.624 firmware flash
• Excessive number of timeouts overflowing Noted All or Nothing Gate(NAND)
• For HP StoreFabric CN1200E 10Gb Converged Network Adapter and HPE StoreFabric CN1200E-T 10GBASE-T Converged Network Adapter Firmware Active Health System (AHS) log incorrect part number
• Name of HP StoreFabric CN1200E 10Gb Converged Network Adapter show incomplete in Active Health System (AHS)
• For HP FlexFabric 20Gb 2-port 650FLB Adapter “Function Driver” is missing in Active Health System (AHS) field
• Ports of HP FlexFabric 10Gb 2-port 556FLR-SFP+ Adapter/HPE StoreFabric CN1200E-T 10GBASE-T Converged Network Adapter will become Disconnected in ESXI6.0 update 3 Operating System
• Server Profile Health Status is not stable during Power on

• Mask off Scope bits in retry delay.
• Track if INQ (Inquiry) was sent, and send INQ (Inquiry) to all LUNs (Logical Unit).
• Prevent re_login trigger from sending too many commands
• Prevent multiple active discovery commands per session
• Correction to non-existent fabric name.
• Remove RDP (Read Diagnostic Parameter) response size cropping for logged out port.
• Fix supported speed ranges in FDMI/RDP (Fabric Device Management Interface /Read Diagnostic Parameter).
• GPID (Get Node Identification) Data unexpected terminations.
• Re-login for N-port Handle in use.
• Re-login is being triggered too fast.
• Reported supported link speeds.
• Add correction to fc (Fibre Channel) host stats (Statistics).

The following issue was previously documented as resolved in driver version 8.07.00.50.07.0-k8:

• Unexpected behavior with SCSI Inquiry command processing which sometimes caused QLogic FC HBAs to experience I/O appearing to be unresponsive for longer than 20 minutes when connected to EMC VPLEX 8Gb FC Tachyon ports

• This firmware contains several low level maintenance fixes including debug data retrieval through read buffer.  The fixes addressed events observed in a specialized lab testing environment, and are not expected to be experienced in customer use case scenarios.

• The threshold condition byte of cpqHoMibStatusArray aligns with cpqHoFileSysCondition.
• Read /proc/tty/driver/serial to replace /proc/ioports as data source. The purpose is to correct the order of tty serial port shown on HPE SMH.
• Updated the “memory device type detail” information for LRDIMM/DIMM/RDIMM. The purpose is to recognize the value from SMBIOS and show the memory type detail information.

• This firmware contains a change to prevent occasional command completion times in the 4-5 second window when command is received just as the drive is transitioning from active to Idle A.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre. The revision of the microcode included in this System ROM addresses issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation. Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Ver. 2.56_01-22-2018 (B) contains support for VMware vSphere 6.7.  It is functionally equivalent to ver. 2.56_01-22-2018.  It is not necessary to upgrade with version 2.56_01-22-2018 (B) if a previous component revision was used to upgrade the firmware to ver. 2.56_01-22-2018.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre. The revision of the microcode included in this System ROM addresses issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation. Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Ver. 2.56_01-22-2018 (B) contains support for VMware vSphere 6.7.  It is functionally equivalent to ver. 2.56_01-22-2018.  It is not necessary to upgrade with version 2.56_01-22-2018 (B) if a previous component revision was used to upgrade the firmware to ver. 2.56_01-22-2018.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

In a system configured with the HPE Dynamic Smart Array B140i Controller and higher than 128 CPU (cores), a system failure event would occur.

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Firmware Dependencies:

Problems Fixed:

This revision of the System ROM includes the latest revision of the Intel microcode which provides mitigation for the Rogue Register Read (also known as Variant 3a) security vulnerability. A Medium level CVE has been assigned to this issue with ID CVE-2018-3640. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis. This security vulnerability is not unique to HPE servers and impacts any systems utilizing impacted processors.

Addressed an issue where uncorrectable Quick Path Interlink (QPI) errors would not be reported properly and logged to the Integrated Management Log. Previously, the system would become unresponsive during boot with no indication of a failure.

Addressed an issue where systems configured Intel Xeon E5-2600 v4 processors and 64GB LRDIMMs may experience a Machine Check Exception or NMI event when under heavy stress. This issue is not unique to HPE Servers.

Addressed an issue where the HPE RESTful settings for Software Initiator iSCSI may not be available in the resource registry.

Known Issues:

This revision of the System ROM includes the latest revision of the Intel microcode which, in combination with operating system updates, provides mitigation for Variant 2 of the Side Channel Analysis vulnerability, also known as Spectre. The revision of the microcode included in this System ROM addresses issues with more frequent reboots and unpredictable system behavior which impacted the previous Intel microcode which was part of the Spectre Variant 2 mitigation. Additional information is available from Intel’s Security Exploit Newsroom, https://newsroom.intel.com/press-kits/security-exploits-intel-products/.

Ver. 2.56_01-22-2018 (B) contains support for VMware vSphere 6.7.  It is functionally equivalent to ver. 2.56_01-22-2018.  It is not necessary to upgrade with version 2.56_01-22-2018 (B) if a previous component revision was used to upgrade the firmware to ver. 2.56_01-22-2018.

Firmware Dependencies:

None

Problems Fixed:

Updated the Intel processor microcode to the latest version.

Known Issues:

None

This product addresses an issue where the link status for an ‘HPE Synergy 3820C 10/20Gb Converged Network Adapter’ that is configured in a Link Aggregation Group (LAG) using ‘HPE Virtual Connect SE 40Gb F8 Module for Synergy’ may show as down at the Virtual Connect (VC) management console.

• unexpected behavior with incomplete path reporting that would cause an unexpectedly high number of dropped frames reported by the target and driver
•  driver abort request to properly abort ELS (Extended Link Services)  command

This driver version, 11.4.249.0, resolves an unexpected behavior with incomplete path reporting that would cause an unexpectedly high number of dropped frames reported by the target and driver

For more details please go through the document titled "Fibre Channel and Fibre Channel Over Ethernet Host Bus Adapters - Unmapping LUNS From Storage Might Result in a Purple Diagnostic Screen on VMware ESXi 5.5, 6.0, or 6.5 " at the following link:

https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00042449en_us

• This firmware resolves several drive issues including internal resets, firmware download functionality, and performance issues.  This firmware could improve the robustness of the system by eliminating these possible issues within the drive.

8Gb Standup & 8Gb Mezzanine

UEFI

• Firmware Management Protocol now supports flashing older Multiboot versions.
• Firmware Management Protocol SetImage no longer displays dots on the screen.
• The following HII (Human Interface Infrastructure) fields now require a reboot after value change:
  Legacy BIOS (Basic Input Output System) Selectable Boot

16Gb Standup & 16Gb Mezzanine

Firmware

• Bring up up-link in 32G or 16G optical environment (FEC (Forward Error Correction) only) when connected with remote device that is not setting the SN bit to zero and TC bit to 1 at the same time during the speed negotiation phase and delays transmitting NOS during LQT phase.
• Dropped FCP_CMD frame by a virtual port (VP index greater than 0) logged into the fabric via Fabric Login (FLOGI) while the primary adapter port (VP0) was disabled via Global VP (Virtual Port) Options bit 2 of Initialize Multi-ID Firmware MBC (0048h).

UEFI

• Firmware Management Protocol now supports flashing older Multiboot versions.
• Firmware Management Protocol SetImage no longer displays dots on the screen.
• The following HII (Human Interface Infrastructure) fields now require a reboot after value change:
  Fabric Assigned WWPN (World Wide Port Name), Fabric Assigned Boot Logical Unit (LUN), Legacy BIOS (Basic Input Output System) Selectable Boot.

16Gb/32Gb Standup

Firmware

• Bring up up-link in 32G or 16G optical environment (FEC (Forward Error Correction) only) when connected with remote device that is not setting the SN bit to zero and TC bit to 1 at the same time during the speed negotiation phase and delays transmitting NOS during LQT phase.

UEFI

• Firmware Management Protocol now supports flashing older Multiboot versions.
• Firmware Management Protocol SetImage no longer displays dots on the screen.
• The following HII (Human Interface Infrastructure)  fields now require a reboot after value change:
  FC (Fibre Channel) Tape, Fabric Assigned WWPN (World Wide Port Name), Fabric Assigned Boot LUN (Logical Unit), Legacy BIOS (Basic Input Output System) Selectable Boot.
• Changed Legacy BIOS (Basic Input Output System) Selectable Boot HII (Human Interface Infrastructure) default to Enabled.

8Gb Standup & 8Gb Mezzanine

BIOS

•  CTRL-Q cosmetic unexpected behavior

UEFI

•  Simple Control Transmission (SCT) 2.5 Extended Small Computer System Interface (SCSI) Pass Thru Protocol test incompleteness. PassThru_Func test no longer goes incomplete.
•  Operating System (OS) boot incomplete behavior when Read Only Memory (ROM) Based Setup-Utility (RBSU) Power On Self -Test (POST) Discovery Mode was set to Force Fast Discovery
•  Human Interface Infrastructure (HII) save unexpected behavior on Superdome servers. In the World Wide Name (WWN) Database menu, changes to Drive0 and Drive1 are now saved to Non  Volatile Random Access Memory (NVRAM)
•  Unexpected behavior which caused adapter to not appear on the Health Summary page.
•  Operating System (OS) boot incomplete behavior when Read Only Memory (ROM) Based Setup-Utility (RBSU) Power On Self -Test (POST) Discovery Mode was set to Auto
•  World Login unexpected behavior when Power On Self -Test (POST) Discovery Mode was set to Auto

16Gb Standup & 16Gb Mezzanine

UEFI

•  Simple Control Transmission (SCT) 2.5 Extended Small Computer System Interface (SCSI) Pass Thru Protocol test incompleteness. PassThru_Func test no longer goes incomplete

16Gb/32Gb Standup

UEFI

•  Human Interface Infrastructure (HII) save unexpected behavior. In the World Wide Name (WWN) Database menu, changes to Drive0 and Drive1 are now saved to Non Volatile Random Access Memory (NVRAM).
•  Corrected adapter name format in Read Only Memory (ROM) Based Setup-Utility (RBSU) menus.
•  Unexpected behavior that caused Non Volatile Random Access Memory (NVRAM) overwritten after Human Interface Infrastructure (HII) changes
•  Behavior that caused Human Interface Infrastructure (HII) fields to not revert back to original settings when ESC key was used to discard changes

• Switch name server entry, Port Symbols are displayed with dots at the end
• Non-descriptive Device name in Windows
• Request_Driver_Plogi(Port Login) Retry Delay
• Unexpected behavior of FC(Fibre Channel) speed - When transfer sizes above 8MB(MegaByte) are attempted, performance drops to almost zero by making mixed mode (I/O Control Block type 6 and 7) default and used IOCB (I/O Control Block) type 6 when IO(Input Output) size > 128K (> 0x20 segments)

• Disabled Non Uniform Memory Access(NUMA) by default, made mixed mode (Input Output Control Block (IOCB) type 6 and 7) default and used Input Output Control Block (IOCB) type 6 when Input Output (IO) size > 128K (> 0x20 segments)
• Fibre Channel (FC) speed unexpected behavior when transfer sizes above 8MB are attempted by enabling Non Uniform Memory Access (NUMA) support if number of nodes is greater than 2

• This firmware improves HDD reliability when HDDs are exposed to long periods of host inactivity that exceed 1 second. HDDs may become unresponsive when using HDD firmware prior to version HPD4.  This firmware also contains a change which prevents an incorrect reassign status of a repaired sector from being logged.

• Under rarely occurring conditions where a host error occurred during a write with 4K unaligned sectors, the write operation might result in stale data. Firmware HPx4 prevents the possibility of stale data occurring under these conditions.

• Improves the drive idle time behavior by reducing long periods of track dwell time, which if not implemented, could increase media lube depletion and reduce drive reliability.  

• HPK3 firmware resolved an issue that caused the disk activity ring, which is located on NVME SSD drive carrier, to constantly spin regardless of drive activity status.

• Fixes a rare but potential data integrity error during low 5v drive voltage and specific sequential data streaming conditions, which could result in data written to incorrect sectors.

Problems Fixed for HPG5 (C):

• Component would fail to install drive firmware for drives present in a system configured with two or more external drive enclosures attached to an HP Host Bus Adapter H22x. The following message would be reported in the component log file - “Device appears more than once in tree”. The drive firmware installation failure was not observed in configurations having only one external drive enclosure attached to an HP Host Bus Adapter H22x.

Problems Fixed for HPG5 (E):

• When attempting to update drive firmware in a VMware vSphere 6.5 environment, the update would fail and the event was logged as a segmentation fault error.

• Fixes a rare but potential data integrity error during low 5v drive voltage and specific sequential data streaming conditions, which could result in data written to incorrect sectors.

Problems Fixed for HPG5 (C):

• Component would fail to install drive firmware for drives present in a system configured with two or more external drive enclosures attached to an HP Host Bus Adapter H22x. The following message would be reported in the component log file - “Device appears more than once in tree”. The drive firmware installation failure was not observed in configurations having only one external drive enclosure attached to an HP Host Bus Adapter H22x.

Problems Fixed for HPG5 (E):

• When attempting to update drive firmware in a VMware vSphere 6.5 environment, the update would fail and the event was logged as a segmentation fault error.

• This firmware implements the Firmware Security Log Page.

• This firmware contains a change to prevent occasional command completion times in the 4-5 second window when command is received just as the drive is transitioning from active to Idle A.

• Driver is selecting to run LB (Loopback) rather than echo for F_Port
• If the SNS (Storage Name Service) fabric login appears incomplete, it would not be retried.
• If switch domain controller continuously tries to login, there exists a window where driver database and firmware database can go out of sync causing fabric discovery incomplete, and the login retry count is exhausted.
• The driver does not report minimum speeds correctly for 16G and 32G adapters.
• Echo ELS (Extended Link Services) test using QCC (QLogic Converge Console) CLI (Command Line Interface) was incomplete with invalid WWPN (World Wide Port Name) status.
• Re-login is being triggered too fast.
• Inquiry response snooping does not take into account the possibility of multiple scatter gather elements.
• Target devices are temporarily not accessible when the link toggle occurs on one of the target device paths.
• Driver would not send the full RDP (Read Diagnostic Parameter) response with a switch port that was not in the logged in state.
• Driver was advertising 1G speed support for 8G adapters.
• FDMI (Fabric Device Management Interface) info showing incorrect supported speeds for 16G mezzanine adapters in FDMI (Fabric Device Management Interface).

• Race between the firmware and the hardware during driver start which blocked outbound completions.
• The firmware did not send link_down event to the driver when running the close_port command.

Fixes in version 2.42.5000:

• PortRcvPkts counter was prevented from being cleared after resetting it.
• The system Timed Out on the configuration cycle of the Virtual Functions (VFs) when more than 10 Virtual Functions performed FLR and the completion Time Out value was configured to a range of less than 16 msec.
• The server hangs and results in NMI when running “mlxfwtop –d mt4103_pci_cr0” while restarting the driver in parallel (from a different thread). In this case, the downstream bridge over the device reported completion timeout error.
• In flow_steering, BMC could not receive a ping over IPV6 after running bmc_reboot.
• While closing the HCA, the RX packet caused bad access to resources that did not exist, and consequently caused the QPCGW or the irisc to get stuck.
• The master SMLID and the LID was either 0 or 0xFFFF when the port was neither active nor armed.
• ibdump could not capture all MADs packets.
• link did not go up after reboot.
• Fixed a rare issue that cause the PCIe configuration cycle that arrived during the time of sw_reset to generate 2 completions.
• Network Controller Sideband Interface (NC-SI) did not work when adding the disable_static_steering_ini field in the ini file, due to memory allocation issue for this field in the scratchpad.

Fixes in version 2.42.5004:

• In UEFI (Unified Extensible Firmware Interface) HII (Human Interface Infrastructure) menu, when using HPE Gen10 devices, both ports appear as port 1.
• In UEFI (Unified Extensible Firmware Interface) boot menu, when using HPE Gen10 devices,  the device name appears with an unneeded port number.