Intel S9248WK2HAC Server System UEFI SUP 22.01.0097

BMC version 2.48.ce3e3bd2 implements new password complexity rules

- The B ons.

Note:

- There is a potential scenario where the user may upgrade to BMC firmware version 2.48.ce3e3bd2 or newer and perform a “BMC Factory default” restoration. This action will enforce the new password rules, setting the complexity to Medium, and forcing the user to follow the new password complexity rules.
- Users must set a password compliant with the selected complexity policy when setting a new password after BMC Factory default.
- If a BMC Factory default is not performed, the system will keep accepting the old password even if it does not comply with the new complexity rules.

Versions:

- System BIOS - R22.01.0097
- ME Firmware - 04.01.04.505.0
- BMC Firmware - Purley_2.86.2da97d3f
- FRUSDR - S9200WK_0.34_FRUSDR

BIOS Changes:

1.[HSD-ES]:[1509285222] PurleyPlatPkg/ProcessorErrorHandler: [IPU2021.1 PC RAS] Incorrect channel in PPR address after UCE error occur in mirrored backup region
2.[HSD-ES]:[1509285250] PurleyPcPkg/RasPkg: [IPU2021.1 PC RAS] ADDDC should do intra bank VLS when all ranks are unhealthy.
3.[HSD-ES]:[1509281933] PurleyPcPkg/WheaErrorInj: [IPU2021.1 PC RAS] SMI 0x9a mEinjParam address is not correctly passed to OS.
4.[HSD-ES]:[1509284076,1509297381] PurleyPcPkg/RasPkg: [IPU2021.1 PC RAS] Support single-rank bank VLS ADDDC
5.[HSD-ES]:[5388648] PurleyPlatPkg/ProcessorErrorHandler: [IPU 2021.1] [SKX] [CLX] [RAS] Disable fast string from SMI after the first poison detected when EMCA is enabled
6.[HSD-ES]:[22012477418] PurleyPlatPkg/ProcessorErrorHandler: [IPU 2021.1] [IPU-2021.1,Beta][Purley][Regression] Additional PPR entry is logged with incorrect information for DCU error.
7.[HSD-ES]:[22011769652] CpRcPkg/Library/BaseMemoryCoreLib: [IPU 2021.1] [NVDIMM-N] data is lost on warm boot when MRC sets setupChanged to 1
8.[HSD-ES]:[5355511] PurleyPlatPkg/SocketSetup, PurleySktPkg/PeiDxeCommonIioInitLib: [IPU 2021.1] Add option to throttle ability to create Posted Interrupts
9.[HSD-ES]:[5388662] PurleySktPkg/MemRas: [IPU 2021.1] [RAS] VLS operation uses non healthy rank as buddy rank
10.[HSD-ES]:[5388655] PurleySktPkg/ProcMemInit: [IPU 2021.1] Add Column Correction Disable Knob to BIOS
11.[HSD-ES]:[5388647] PurleySktPkg/Library/ProcMemInit, CpRcPkg/Library/BaseMemoryCoreLib, PurleyPlatPkg/Platform/Dxe/MemorySubClass: [IPU 2021.1] Fix critical KW Issues in Memory IP code
12.[HSD-ES]:[5388654] CpRcPkg/Library, PurleySktPkg/Library: [IPU 2021.1] Improve how MemTest failure list is being reset
13.[HSD-ES]:[5388609] [CVE-2020-12358] [IPU 2021.1] Attacker can change/crash SMI behavior by modifying the IioUdsData data structure
14.[HSD-ES]:[22011323440] PurleyRpPkg/PurleyPcPkg/AcpiPlatformTableLib/AcpiPlatformLibBdat: [IPU 2021.1] Added EWL to BDAT/ACPI table
15.[HSD-ES]:[5388593] [IPU 2021.1] [RAS] SMI will not be triggered on the new rank with increasing CE count over threshold while another spare copy ongoing in the same memory controller
16.[HSD-ES]:[5388649] PurleySktPkg/ProcMemErrReporting: [IPU 2021.1] [RAS] Ktiviral errors are not handled
17.[HSD-ES]:[5388645] [CVE-2020-24486] [IPU 2021.1] MemSetLocal may overwirte PEI stack
18.[HSD-ES]:[5388610] PurleyPlatPkg/Ras/Whea/WheaErrorInj: [CVE-2020-12360] [IPU 2021.1] SMI 0x9a mEinjParam address is not correctly passed to OS
19.[HSD-ES]: [5388646, 1508362522] PurleySktPkg/MemRas: [IPU 2021.1] Bank reverse VLS should not be allowed when single DIMM ,single rank is present.
20.[HSD-ES]:[5388594, 5388595] PurleyPlatPkg/ProcessorErrorHandler: [IPU 2021.1] Channel and bank information of PPR entry for the UCE PS error is wrong when the error is happening in mirrored backup region
21.[HSD-ES]:[5388658] PurleySktPkg/Library/ProcMemInit: [IPU 2021.1] Avoid MemTest type 17 logs invalid errors on DDR4 DIMMs
22.[HSD-ES]:[5388650] PurleySktPkg/Library, CpRcPkg/Library: [IPU 2021.1] Prevent CPGC Timeout during MemTest
23.[HSD-ES]:[05388630] PurleySktPkg/ProcMeminit: [IPU 2021.1] Support for 1:2 (NM:FM) ratio memory mode configuration for AEP
24.[HSD-ES]:[1509336085] PurleyPcPkg/Roms: The pointers coming from untrusted source can't be overlap or within SMM range.
25.[HSD-ES]: [N/A] PurleyPCPkg/StitchingPkg/ME/SPS: Integrate SPS E5_04_01_04_505_0 to Trunk
26.[HSD-ES]: [N/A] PurleyPCPkg/StitchingPkg/Microcode: Integrate Microcode 04003102 for CLX B0 and 05003102 for CLX B1
27.[HSD-ES]: [N/A] PurleyPCPkg/StitchingPkg: Integrate IntelDCPersistentMemoryDriver v01.00.00.3515 to S9200WK Trunk
28.[HSD-ES]: [N/A] PurleyPCPkg/StitchingPkg: Integrate BIOS ACM 1.7.43 PW and SINIT ACM 1.7.4A PW to purley trunk
29.[HSD-ES]:[1508891772] PurleyPcPkg/RasPkg: There is no PPR info record when inject CE error with parameter "PatrolConsume = True"
30.[HSD-ES]:[CCB3402] CpPcRestrictedPkg/BootOrder: CCB3402 - Add a new marker line, FORCE_EFI_BOOT_SILENT.
31.[HSD-ES]:[CCB3402] CpPcRestrictedPkg/BootOrder: CCB3402 - Port StartupMarkfileBootorder driver from Whitley
32.[HSD-ES]:[1508841518] PurleyPcPkg/RasPkg: Rank CE Time Window does not work
33.[HSD-ES]:[1508895086,1508895344] CpPcRestrictedPkg/Ipmi: BMC user setup does not report error if user2 name input is same as other user such as user3,BMC user setup does not report error if input user name is the same as user 14 or user 15 name
34.[HSD-ES]: [N/A] PurleyPcPkgTool: [S9200WK] Change the BIOS ID back to 2X.01.0119
35.[HSD-ES]:[1508841411] PurleyPcPkg/RasPkg: Rank CE will disable after inject 11 times error
36.[HSD-ES]:[1508733401] PurleyPcPkg/RasPkg: SUT will reboot after 3rd strike when do ADDDC test
37.[HSD-ES]:[CCB3356] CpPcRestrictedPkg/Ipmi: CCB3356 - Modify BIOS setup behavior around complex password
38.[HSD-ES]:[1508961754]PurleyPcPkg/PprVlsErrorLogListener: The debug log will show “[PPR] Entry already existed for” when inject 2nd CE just DIMM slot is different
39.[HSD-ES]:[CCB3390,2103639586] PurleyPcPkg/RasPkg: CCB3390 2nd Patch - ECC error logs will be generated after inject several PPR error on different one by one with BIOS 0X020312
40.[HSD-ES]:[CCB3390] PurleyPcPkg/RasPkg: CCB#3390: Request PPR within SW Error Threshold Flow for new row entries
41.[Hsd-Es]:[1508838608] PurleyPcPkg/RasPkg: Handle CSMI during VLS
42.[HSD-ES]:[CCB3389] PurleyPcPkg/RasPkg: CCB#3389: PPR Runtime request SEL event
43.[HSD-ES]:[1508923841] PurleyPcPkg/Restricted: Add "Disable FRB-2 if any bit is enabled" in "Adv MemTest Options" setup help information.
44.[Hsd-ES]:[CCB3272] PurleyPcPkg/RasPkg: Only record a single SEL entry for a single VLS copy during ADDDC
45.[Hsd-ES]:[1508774126] PurleyPcPkg/RasPkg: Handle SMI and CE Threshold for ADDDC handler
46.[HSD-ES]:[1507980834] PurleyPcPkg/RasPkg: TC2B fourth strike does not intiate any spare action
47.[HSD-ES]:[1507980834] PurleyPcPkg/RasPkg: Fix report incorrect bank number in case rank VLS.
48.[HSD-ES]:[1508779249] PurleyPcPkg/RasPkg: CE error triggered need inject over threshold errors after 2nd waiting for Correctable Error Time window
49.[Hsd-ES]:[1508773048] PurleyPcPkg/RasPkg: Bank error counter not clear when reach the time of correctable error time window
50.[Hsd-ES]:[1508772732] PurleyPcPkg/RasPkg: SW Bank Threshold, and Time Window only available when PcieErrEn != 0
51.[HSD-ES]:[CCB3243] PurleyPcPkg/RasPkg: Improve algorithm for when DSG Commercial BIOS enters VLS mode
52.[Hsd-ES]:[CCB3245] PurleyPcPkg/Restricted: Log AMT and PPR results in SEL - 2nd Patch
53.[HSD-ES]:[22011859965] CpPcRestrictedPkg/Library: MCA Recovery (Data Poison) should be enabled by default
54.[HSD-ES]: [2103636701] CpPcRestrictedPkgIpmi: The help notes for enable complex password is incorrect in the BIOS setup when set password complexity to "Medium" or "High" in EWS
55.[HSD-ES]:[1508903960] PurleyPcPkg/Restricted: Fix incorrect SEL info for AMT & PPR
56.[Hsd-ES]:[CCB3245] PurleyPcPkg/Restricted: Log AMT and PPR results in SEL
57.[HSD-ES]:[1507916987] PurleyPcPkg/Restricted: [S9200WK]Please replace BIOS RAID Option "Intel RSTe" to "Intel VROC (SATA RAID)"
58.[HSD-ES]:CCB 2707] PurleyPcPkg/Platform: CCB#2707: Customer ask for a way/tool to change SMBIOS Type0- BIOS Vendor String from Intel to DataON
59.[HSD-ES]:[1508903926] PurleyPcPkg/Restricted: The help info is not including bit 16 -19 about Adv MemTest Options
60.[Hsd-ES]:[1508836794] PurleyPcPkg/PlatformSetupVariableSyncLib: Leaky bucket interval not triggering when expected
61.[HSD-ES]:[1508836736] PurleyPcPkg: Enable Samsung and Hynix AMT test
62.[HSD-ES]:[1508639116, CCB3275] PurleyPcPkg/Uba:CCB3275 Enable NIC 190 and Storage(NVMe) 194 SMBIOS Table
63.[Hsd-ES]:[1507175309,2103629389] PurleyPlatPkg/Rsa/RsaInit: Send BIOS ID to BMC in RSD module
64.[HSD-ES]:[2103636820] CpPcRestrictedPkg/Ipmi: CCB3158 Integrate BMC features developed by InSyde
65.[Hsd-ES]:[2207690589] PurleyPcPkg/Uba: Unreleased product code names and build paths retrievable in capsule files.
66.[HSD-ES]: [N/A] PurleyPCPkg/StitchingPkg/ME/SPS: revert LBGNC_Full.xml changes.
67.[HSD-ES]: [N/A] PurleyPcPkg/Restricted: Switch back to SPS folder in the path: PurleyPcPkg/Restricted/Tool/ for ME stitching
68.[HSD-ES]: [N/A] PurleyPcPkgTool: [S9200WK] Change the BIOS ID to 22.01.0097
69.[HSD-ES]:[2103641990] CpPcRestrictedPkg/SetupBrowserDxe: Use the BIOS UI to modify the BMC password, it actually does not take effect.
70.[HSD-ES]:[1509426826] CpPcRestrictedPkg/Bds: The copyright should be Copyright (c) 2006-2021 instead of Copyright(c) 2006-2020.

BMC Changes:

- Upgrade kernel to 4.9.282

FRUSDR Changes:

- Change KCS sensor name from "KCS Ctrl Mode" to "KCS Policy".
- Change Build package from BUILD 16 to BUILD 18.

GENERAL INSTALLATION PROCEDURE

1. Unzip the contents of the update package and copy all files to the root directory of a removable media (USB flash drive)
2. Insert the USB flash drive to any available USB port on the system to be updated
3. Power on the server and load the uEFI shell
4. Begin the update process running the Startup.nsh
5. Reboot the system after the update process has successfully completed

Web GUI update

1. Unzip the package onto your system
2. Log into the BMC web GUI
3. Navigate to Configuration, then Firmware Update
4. Click browse, and direct the browser to the location of Purley_1.04.f80688d0.bin
5. Click upload. Progress and status will be shown as the update progresses

UEFI update

1. Unzip package and load onto a flash drive
2. Boot to UEFI shell, and navigate to the folder where this package lives
3. Run fwUpdateBMC.nsh and follow the prompts

Verifying Updates:

01. After the final update has completed successfully, reboot the system
02. During POST, hit the <F2> Key when prompted to access the BIOS Setup Utility
03. From the BIOS Setup Utility main menu, hit the <F9> key to load BIOS defaults
04. Hit the <F10> key to Save Changes and Exit the BIOS defaults
04. At the main menu verify the BIOS revision is correct
05. Move cursor to the SERVER MANAGEMENT menu and hit Enter
06. Move cursor to the SYSTEM INFORMATION Option and hit Enter
07. Verify the BMC Firmware revision is correct
08. Verify the SDR revision is correct
09. Verify the ME Firmware revision is correct
10. Configure desired BIOS Option settings
11. Hit the F10 Key to Save Changes and Exit

About Firmware Updates:

Applying a newer firmware version than the one already installed on your unit can bring various enhancements, include workarounds for diverse problems encountered by the device, and improve or add newly developed features.

On the other hand, downgrading the firmware version can recover the device's functionality in the event of a software update either turning up faulty or causing the unit's overall performance to drop. However, bear in mind that applying an older firmware isn't recommended and might not always be possible.

When it comes to the update steps, due to the large variety of devices and numerous ways for installing a new firmware, it is recommended that you carefully read and understand the upgrade steps, and consider applying a different firmware only when you have familiarized yourself with the update method.

As the installation process is most of the times quite risky, this step should be taken by users that have the ability to successfully complete the update; regular users may initiate it at their own risk. Moreover, it's best that this task be performed in a steady power environment such as the one ensured by a UPS unit.

Therefore, if you consider applying this release, hit the download button, take into account all the aforementioned aspects, and update the device's firmware. Also make sure you constantly check with our website to ensure that you don't miss a single new release.