To flash this firmware package, use the following iLOrest command. See http://www.hpe.com/servers/resttool to download the latest version of the iLOrest tool.
\n\nlocalhost OS example:
\nilorest flashfwpkg <file_name.fwpkg>
remote example:
\nilorest flashfwpkg <file_name.fwpkg> --url <iLO7_IP_Address> -u <iLO7_username> -p <iLO7_password>
Place the json file in the same folder as the fwpkg file.
\nThis firmware package can also be installed with the latest version of Smart Update Manager (SUM).
Added RBSU options for PCIe Resizable BAR (ReBAR) on Intel platforms. Operators can now enable or disable ReBAR and set a maximum negotiated BAR size (8 GB / 16 GB / 32 GB / 64 GB / 128 GB / 256 GB / 512 GB / Unlimited). The default is Enabled with Unlimited size. A reboot is required after changing either setting. Accessible via RBSU > PCIe Device Configuration > Advanced PCIe Configuration, and via Redfish at /redfish/v1/systems/1/bios/settings/.
Updated the vRAN workload profile based on Intel FlexRAN release 2.5. The vRAN profile now disables Speculative Lock and Clock Modulation, and maps C-State Efficiency Mode to Disabled.
Added Integrated Management Log (IML) entries for NVMe and M.2 slot firmware update operations. The IML now records both the previous and new firmware versions when an NVMe device firmware update is performed through RBSU, Redfish, or the UEFI Shell.
Added an IML entry to indicate when Mission Critical Mode boot recovery has been triggered. When Mission Critical Mode is enabled and the system initiates an AUX power cycle recovery, an IML event is now logged during early POST to inform administrators that the recovery feature was activated.
Enhanced diagnostic logging for embedded media unmount failures. Additional error detail strings are now reported when an unmount operation fails, improving the ability to identify the root cause of storage media issues during servicing.
Added Security Log Event logging for Server Configuration Lock changes made through Redfish. Previously, security log events were generated only when the setting was changed via RBSU.
Added support for Config C riser configuration (Slot2 PCIe) on DL110 Gen12. The system now recognizes both the legacy 2-slot riser layout and the new single-slot Config C topology on Slot2.
", "Fixes": "Important Notes:
This ROM version includes Intel UPLR4 reference code (BKC KSYVLLE.1.RPB.3038.P.25, RC 02.00.01.0306).Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.
\nTo streamline content and avoid duplication across documents, starting the Gen12 platform, the UEFI Workload Based Profiles and Tuning Guide has been deprecated, and the contents of this document are now available as part of the current UEFI System Utilities User Guide for HPE Compute Gen12 servers based on iLO7 (https://hpe.com/support/UEFIG12-iLO7-UG-en).
Firmware Dependencies:
NoneProblems Fixed:
Addressed an issue where Secure Boot could not be restored to the platform default value when a manufacturing default was triggered through iLO REST API or Redfish. On platforms where Secure Boot is disabled by default, it could remain enabled after the manufacturing default operation, and vice versa.
Resolved two SPDM-related boot issues. Systems no longer halt when iLO needs additional time for SPDM device discovery during POST. Additionally, servers no longer halt during POST with an \"SPDM authentication failure\" message when SPDM is disabled and iLO-BIOS communication is unresponsive. The system now reads the SPDM policy from a local cache, allowing normal boot when SPDM is disabled regardless of the communication channel state.
Resolved an issue where the system could unexpectedly halt during POST while executing Intelligent Diagnostics.
Corrected a condition where the RBSU menu displayed a \"Login with BMC Credentials\" option on platforms using OpenBMC, which does not support sharing login credentials with RBSU. The option is now suppressed when OpenBMC is detected.
Resolved an issue on Sierra Forest platforms where CPU and NUMA enumeration could incorrectly split logical threads across sockets, potentially impacting workload performance and NUMA locality. Sierra Forest processors do not support hyper-threading, and the thread count is now correctly set to one per core.
Corrected the RBSU Advanced Memory Protection Mode menu to no longer display ADDDC as a selectable option on DL110 Gen12. The Kaseyville platform does not support ADDDC per the Intel RAS specification.
Resolved an issue where the IOMMU setting could remain uninitialized after a firmware update, causing Intel VT-d and Hyper-Threading to be inadvertently disabled. The setting is now automatically aligned with the Intel default (Enabled) when detected in an uninitialized state.
Resolved an issue where the system could hang during POST on platforms using OpenBMC when out-of-band RAS calls were made to the BMC. OpenBMC does not support out-of-band RAS, and these calls are now skipped when OpenBMC is detected.
Resolved an issue where a NULL pointer dereference in clock buffer allocation could cause memory corruption or a system crash during POST if an internal memory allocation failed.
Addressed an issue where the system could encounter an assert during memory address translation when operating in mirror mode.
Addressed an issue where Self-Encrypting Drive (SED) keys containing null bytes could be incorrectly truncated, potentially preventing drive unlock operations. Keys are now always processed at their full length.
Mitigated CVE-2026-33416, a use-after-free vulnerability in the embedded LibPNG library.
Known Issues:
None", "Lang": "en" } ], "Version": "1.42_05-29-2026" }, { "ReleaseNotes": [ { "Enhancements": "Updated HPE branding logo to reflect the new HPE corporate identity.\nUpdated integrated NIC firmware to version 4.07 for DL110/EL140 Gen12.\nUpdated VROC driver to 9.3.0.1132.
Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, Key Manager, and Factory Options.
Added logic to prevent personally identifiable information (PII) from being written to AHS logs while retaining visibility on the serial console.
Added BootNext and CQTBOOTNEXT synchronization to ensure the iLO One-Time Boot option is cleared after the selected UEFI target has been launched, preventing unintended repeat boots.
Updated SMBIOS Type 9, Type 16, and Type 203 records to report CXL 2.X devices, enabling iLO and management tools to identify CXL memory controllers and slots.
Updated SMBIOS Type 234 to carry DPLL module serial and part number from FRU data for Rev.B modules on DL110/EL140 Gen12.
Improved ACPI table generation for C-state support.
Improved device name display: RBSU now falls back to the English device name for option ROMs that do not provide multi-language strings.
", "Fixes": "Important Notes:
This version of the System ROM contains updates aligned with Intel Kaseyville Granite Rapids-D XCC PV & HCC PLR4 BKC update.
Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.
\nFirmware Dependencies:
None
Problems Fixed:
Addressed an issue where the power-off action initiated from OneView could fail, causing the server profile not to be processed as expected.
Addressed an issue where NVMe drives could produce duplicate boot option entries after OS installation due to physical location information being incorrectly included in the structured string.
Addressed an issue where system crash log–related information could not be exported from AHS logs.
Addressed an issue where the OCP PCIe Auxiliary Power slot option in RBSU displayed the wrong OCP slot number on platforms where CPLD and PCA OCP numbering are reversed.
Addressed an issue to update SMBIOS Type 4 Maximum Processor Speed to 3500 MHz for DL110/EL140 Gen12 per specification.
Mitigates CVE-2026-22796: a type confusion vulnerability in the OpenSSL library's PKCS#7 signature verification path that could allow a denial-of-service condition when processing malformed PKCS#7 data.
Addressed an issue where the DIMM MapOut reason field in SMBIOS Type 232 displayed 0x00 after reboot DL110/EL140 Gen12. The HOB-first priority algorithm now correctly persists MapOut reason data across resets.
Addressed an issue where the VerifyMode setting had no display value in the Embedded UEFI Shell due to a string buffer allocation that did not account for the null terminator.
Addressed an issue where no SMBIOS Type9 records created for OCP slots when there is no devices installed in these slots.
Addressed an issue where system device names in RBSU might be incorrect in Japanese-language mode.
Known Issues:
None
", "Lang": "en" } ], "Version": "1.40_04-02-2026" } ], "SWKeys": [ { "Name": "U77", "SWKeyExpectedPath": "firmware:system" } ], "SchemaVersion": "2.0.0.0", "SupportedProducts": [ { "Family": "U77", "Model": "HPE ProLiant Compute DL110 Gen12" }, { "Family": "U77", "Model": "HPE ProLiant Compute EL140 Gen12" }, { "Family": "FTP", "Model": "FTP-Only System" } ], "UpgradeRequirements": "Recommended" }, "PackageFormat": "FWPKG-v2", "Type": "ComboFirmware", "UpdatableBy": [ "Bmc" ] }