# changelog

author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.11
changelog:
  -     *The following issues have been fixed in firmware version 14.32.1010:**
      
        * Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
        * The system could not create more than 128K QPs.
        * On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
        * Packet Pacing rate was used if asymmetric VFs was enabled.
        * Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
        * Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
        * The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.  
      
      
      **No fixes are included in firmware version 16.35.3502.**


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.10-3.1
changelog:
  -     *The following issues have been fixed in component version 1.0.10(B):**
      
        * Transaction test error was reported while deploying the component using SPP from HPE Linux SDR.
      
      
      
      **The following issues have been fixed in firmware version 14.32.1010:**
      
        * Firmware got into an unresponsive state and caused unexpected behavior when connecting an optical transceiver that support RxLOS and the remote side port was down.
        * The system could not create more than 128K QPs.
        * On rare occasions, the system got into an unresponsive state when a peer port went down while using an Optical module.
        * Packet Pacing rate was used if asymmetric VFs was enabled.
        * Incorrect RNR timeout when trying to set it during the rts2rts_qp transition.
        * Issue with RSS on IPSec flows in ConnectX-4 Lx led to performance degradation. In this scenario, the SPI optimization caused packets from a given host to hash to the same CPU core. The fix was to ignore SPI optimization according to l4_type in ConnectX-4 Lx adapter cards.
        * The GetInventory NC-SI command reported leading 0xf in firmware version when it started with 0.  
      
      
      **The following issues have been fixed in firmware version 16.35.3006:**
      
        * Packet loss that occurred when restarting the transmit. 
        * An issue that prevented RoCE malformed packets (UDP packet with dest_port equal to RoCE well known udp_dport (0x4791)) from being counted on the vport_counter when the function disables RoCE (through MODIFY_NIC_VPORT_CONTEXT command).
        * A memory leakage that occurred when closing connected QPs (Type RC/UC/XRC/DC).
        * Added a missing VLAN strip.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.11
changelog:
  -     *Firmware for the following devices has been updated to 14.32.1010:**
      
        * P21930-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4121A-XCAT Adapter)
        * P11341-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4621A-ACAB OCP3 Adapter)
      
      
      
      **Firmware for the following device has been updated to 16.35.3502:**
      
        * P21927-B21 (HPE Ethernet 100Gb 2-Port QSFP28 MCX516A-CCHT Adapter)
      
      
      
      **New features and changes included in firmware version 14.32.1010:**
      
        * Added 3 new assert filters (Health buffer, NVlog, FW trace). The assert will be exposed now if its severity level is equal to or above the new filter.
        * Enabled Rate Limit per VM instead of VM-TC. This capability is implemented by adding support to a new Scheduling element type: rate limit elements that will connect to the rate_limit and will share its  rate limit.
        * Added support for asymmetrical VFs per PF. To enable it:PF_NUM_OF_VF_VALID must be true, and PF_NUM_OF_VF to a non-zero value.
        * Limited the external loopback speed to the used module's capabilities.
        * Improved linkup time when using the fast linkup capability.
        * Added support for the slow_restart and slow_restart_idle parameters to enable Zero Touch RoCE capability.  
      
      
      **New features and changes included in firmware version 16.35.3502:**
      
        * Modified the TCP IPv4 flows so that the steering TIR rx_hash_symmetric field is now valid only when both the SRC and DST fields are not set to zero.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.12
changelog:
  -     *No fixes have been included in firmware version 14.32.1900.**  
      
      
      **The following issues have been fixed in firmware version 16.35.4030:**
      
        * VF FLR would get stuck when its PF triggered the FLR as well.
        * Unexpected source UDP port appeared in RoCE packets when the firmware ignored a non-PF driver configuration for RoCE source UDP port control (as set in SET_HCA_CAP.sw_r_roce_src_udp_port).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.1
changelog:
  -     *Firmware for the following devices is updated to 14.26.4012:**
      
      P21930-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4121A-XCAT Adapter)
      
      **Firmware for the following devices is updated to 14.26.6000 :**
      
      P11341-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4621A-ACAB OCP3 Adapter)
      
      **Firmware for the following devices is updated to 16.26.4012:**
      
      P13188-B21 (HPE Ethernet 10/25Gb 2-port SFP28 MCX512F-ACAT Adapter )  
      P21927-B21 (HPE Ethernet 100Gb 2-Port QSFP28 MCX516A-CCAT Adapter)
      
      **Firmware for the following devices is updated to 16.26.6000:**
      
      P10112-B21 (HPE Ethernet 10/25Gb 2-port SFP28 MCX562A-ACAI OCP3 Adapter)
      
      **New features and changes in version  14.26.4012 and 16.26.4012 :**
      
        * Enabled the firmware by using the ICMD commands to deal with diagnostic counters similar to cmdif. They can be called via the vsec space. The counters' values are returned only via the tracer. The ICMD Query Caps indicate support and expose the list of the supported counters.
        * Zero-Touch-RoCE counters are now available to the user for debuggability purposes when using the Zero-Touch-RoCE feature.
        * Added Address Translation Service (ATS) support for MKEY and UMEM VPD Added support for exposing the VPD on the VF.
        * Added support for the following 
          * Reporting the supported affiliated and unaffiliated asynchronous events to DEVX users through the command interface.
          * Hairpin Drop Counter.
          * Hairpin and TM RNDV QPs to work with DevX.
          * creating software managed steering tables in eSwitch/FD
      
      **New features and changes in version  14.26.6000 and 16.26.6000 :**
      
        * Explicit Congestion Notification (_ECN_) is now automatically copied from the inner header to the outer header, unless defined otherwise in the SW steering. To disable this feature, need to write to the NV_SW_OFFLOAD_CONFIG file.
        * The eth_link_down_counter now counts logical link downs as well


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.2
changelog:
  -     *Firmware for the following devices is updated to 14.27.1016:**
      
      P21930-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4121A-XCAT Adapter)  
      P11341-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4621A-ACAB OCP3 Adapter)
      
      **Firmware for the following devices is updated to 16.27.1016:**
      
      P13188-B21 (HPE Ethernet 10/25Gb 2-port SFP28 MCX512F-ACAT Adapter)  
      P21927-B21 (HPE Ethernet 100Gb 2-Port QSFP28 MCX516A-CCHT Adapter)  
      P10112-B21 (HPE Ethernet 10/25Gb 2-port SFP28 MCX562A-ACAI OCP3 Adapter)
      
      **New features and changes in version 14.27.1016 and 16.27.1016:**
      
        * RoCE Selective Repeat introduces a new QP retransmission mode in RoCE: recovery from packet drop by resending the dropped packet and not only all the PSN window (Go-Back-N protocol). This new capability comes with the following limitations:  
                 Selective repeat cannot be used with AR  
                 Does not work with signature (T10-DIF)  
                 Does not work with Tag Matching enabled
        * Allows BMC to query and control NIC over RedFish API (https://www.dmtf.org/standards/redfish). Currently, the NIC supports reading data and setting basic Ethernet and InfiniBand parameters
        * Enables matching of source_vhca_port in the FDB flow for ECMP hardware offload on a single FDB.
        * Firmware can be now updated as well as DB strings while performing Live Firmware Patch.
        * Added support for dumping hardware steering entries (raw data) using the resource dump API.
        * The eth_link_down_counter now counts logical link downs as well.
        * Enables the device to generate events that will notify the user about any resource dumps updates. The resource dump owner (PF/ECPF) will be notified on the VF command failures by events that will contain the needed information to call the resource_dump command. The device will dump the resource in the standard resource dump sequence.
        * Added support for RSS based on inner headers of GTP-U tunneled packets.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.2
changelog:
  -     *Fixes in version 14.27.1016:**
      
        * The device to perform Direct memory access (DMA) into memory already returned to the OS during the transition between the pre-boot drivers to the OS driver.
        * Fixed a rare issue that resulted in HCA hanging during a FlexibleLOM (FLR) flow while unloading the PreBoot driver.
        * The Zero-Touch RoCE (ZTR) counters query to always return 0.
        * Fixed a performance degradation issue, and a high packet drop when single root input/output virtualization or SR-IOV was enabled and packets went through the FDB default behavior.
        * Network Controller Sideband Interface (NC-SI) bandwidth dropping to 20-40kBps with a high amount of package drops, in a network environment with high latency (over 110ms).
        * Due to the string DB not being updated after Live-Patch, the tracer cannot function after Live-Patch.
        * Fixed a issue that caused other active functions to receive a malformed Completion with Error (CQE) during driver (PF or VF) unload or FLR flows.
        * Prevented the adapter card from going into the bypass mode when the Board Management Controller (BMC) disabled the hardware arbitration.
        * The firmware to hang when an FLR occurred at the same time as the teardown. As a result, the teardown flow took a lock, and never released it because it was being aborted by an FLR.
      
      **Fixes in version 16.27.1016:**
      
        * Fixed an issue that in Multi-Host adapter cards that resulted in wrong handling of PCIe Reset(PERST) on auxiliary links.
        * Fixed an out-of-range issue when reading or writing the q_counters.
        * The device to perform DMA into memory already returned to the OS during the transition between the pre-boot driver to the OS driver.
        * The ZTR counters query to always return 0.
        * That prevented the adapter card from going into the bypass mode when the BMC disabled the hardware arbitration.
        * Required using a non-standard tool to perform the first Live Firmware Patch Update (LFWP) patching when used the GA firmware version.
        * Fixed redundant page consumption in the init_hca.
        * The sw_reset option was not supported when ATS was enabled.
        * Fixed a possible performance degradation in small packet sizes that occured when SWITCH_IPV4_TTL_MODIFY_ENABLE configuration was enabled in mlxconfig.
        * Due to the string DB not being updated after Live-Patch, the tracer cannot function after Live-Patch.
        * Other active functions to receive a malformed CQE during driver (PF or VF) unload or FLR flows.
        * Prevented PCI link from being established when the firmware was corrupted.
        * Triggered a FW assert and resulted in a wrong deallocation of a resource when Packet Pacing was enabled and a QP was being destroyed.
        * The firmware to hang when an FLR occurred at the same time as the teardown. As a result, the teardown flow took a lock, and never released it because it was being aborted by an FLR.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.3
changelog:
  -     *Firmware for the following devices is updated to 14.27.4000:**
      
      P21930-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4121A-XCAT Adapter)  
      P11341-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4621A-ACAB OCP3 Adapter)
      
      **Firmware for the following devices is updated to 16.27.2008:**
      
      P13188-B21 (HPE Ethernet 10/25Gb 2-port SFP28 MCX512F-ACAT Adapter)  
      P21927-B21 (HPE Ethernet 100Gb 2-Port QSFP28 MCX516A-CCHT Adapter)  
      P10112-B21 (HPE Ethernet 10/25Gb 2-port SFP28 MCX562A-ACAI OCP3 Adapter)
      
      **New Feature and Changes in Version 12.27.4000:**
      
        * Added the following segments, as appeared in the PRM, to the Resource Dump: 
          * PRM_QUERY_QP
          * PRM_QUERY_CQ
          * PRM_QUERY_MKEY
          * QUERY_VNIC_ENV
      
      **New Feature and Changes in Version 16.27.2008:**
      
      **This release contains important reliability improvements and security hardening enhancements. Upgrade the firmware of the device to this release to improve the devices' firmware security and reliability.**
      
        * Improved init_hca performance in Parallel Function initialization.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.3
changelog:
  -     *Following issues have been fixed in firmware version 16.27.2008:**
      
        * Although the effective BER (after FEC) was expected to meet the design targets (e.g. 10e-14 or lower), occasionally it was higher.
        * High BER occured when connecting cables of type 0.5/1m DAC to an HDR speed.
        * The PCIe Tx parameters did not load correctly when the speed was changed after the PCIe link was disabled.
        * The desched_threshold field did not work properly.
        * The "roce_adp_retrans" counter was presenting the values of the "local_ack_timeout_err" counter.
        * If Relaxed Ordering was disabled by running the "setpci" command, it would not be functional even after re-enabling it by running the "setpci" command again.
      
      **Following issues have been fixed in firmware version 14.27.4000:**
      
        * The device hung while running the sw reset flow under heavy stress and with many open resources.
        * Low PXE performance observerd while using the VSC to trigger the send_ring_doorbells.
        * IPoIB and DC would not work together.
        * DC funtionality issues.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.4
changelog:
  -     *Following issues have been fixed in firmware version 14.29.1016 and 16.29.1016:**
      
        * Changed the default value of DCQCN's NP parameter min_time_between_cnps to 4 on all devices to support larger scalability of cluster.
        * An issue that caused packets to drop due to header size issues and/or failing checks. This issue was caused due to a Linux issue that caused VFs to set the wrong header size value in wqe_inline_header_mode input.
        * When MKEY_BY_NAME was enabled by NVCONFIG and a large number of VFs are configured, VM restart (VF/PF FLR) might take longer than when MKEY_BY_NAME was disabled.
        * In rare cases, a fatal error related to errors from the PCI transport layer might be reported during FLR.
        * An issue that caused the device to go to dead IRISC as one of the firmware semaphores could not be released when a speed change or port state change was triggered.
      
      **Following issues have been fixed in firmware version 16.29.1016:**
      
        * An issue that caused the eth_wqe_too_small counter to count ODP page faults.
        * A low performance was observed after enabling the RoCE Accelerator capability.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.4
changelog:
  -     *Firmware for the following devices is updated to 14.29.1016:**
      
      P21930-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4121A-XCAT Adapter)  
      P11341-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4621A-ACAB OCP3 Adapter)
      
      **Firmware for the following devices is updated to 16.29.1016:**
      
      P13188-B21 (HPE Ethernet 10/25Gb 2-port SFP28 MCX512F-ACAT Adapter)  
      P21927-B21 (HPE Ethernet 100Gb 2-Port QSFP28 MCX516A-CCHT Adapter)  
      P10112-B21 (HPE Ethernet 10/25Gb 2-port SFP28 MCX562A-ACAI OCP3 Adapter)
      
      **This release contains important reliability improvements and security hardening enhancements. Upgrade the firmware of the device to this release to improve the devices' firmware security and reliability.**
      
      **New Feature and Changes in Version 14.29.1016 and 16.29.1016:**
      
        * Ethernet wqe_too_small Mode: A per vPort that counts the number of packets that reached the Ethernet RQ but cannot fit into the WQE due to their large size. Additionally, we added the option to control if such packet will cause "CQE with Error" or "CQE_MOCK".
        * Hardware steering dump output used for debugging and troubleshooting.
      
      Added support for the following features:
      
        * cq_overrun counter: The counter represents the number of times CQs enter an error state due to overflow that occur when the device tries to post a CQE into a full CQ buffer.
        * Enabled the capability to allow Virtual Functions to send Pause Frames packets. (Beta)
        * Enabled 10/25GbE auto-sensing with 3rd party when using 10/25GbE optical cables.
      
      **New Feature and Changes in Version 16.29.1016:**
      
        * Hardware steering dump output used for debugging and troubleshooting.
      
      Added support for the following features:
      
        * HW support for Flow Metering to utilize Advanced Steering Operation (ASO). HW Flow Meter allows higher scale, more accuracy, and better performance compare to the FW Flow Metering.
        * Trust level for VFs. Once the VF is trusted, it will get a set of trusted capabilities.
        * 2 new Mini CQE formats:
        * Responder Mini CQE With Flow Tag Layout.
        * Responder Mini CQE With l3_l4_info Layout.
        * Steering DP hash flow groups.
        * ignore_flow_level is now enabled by the TRUST LEVEL access registry.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.4-3.1
changelog:
  -     *Firmware for the following devices is updated to 14.29.1016:**
      
      P21930-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4121A-XCAT Adapter)
      
      **Firmware for the following devices is updated to 14.31.1200:**  
      P11341-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4621A-ACAB OCP3 Adapter)
      
      **Firmware for the following devices is updated to 16.29.1016:**
      
      P21927-B21 (HPE Ethernet 100Gb 2-Port QSFP28 MCX516A-CCHT Adapter)
      
      **This release contains important reliability improvements and security hardening enhancements. Upgrade the firmware of the device to this release to improve the devices' firmware security and reliability.**
      
      **New Feature and Changes in Version 14.29.1016 and 16.29.1016:**
      
        * Ethernet wqe_too_small Mode: A per vPort that counts the number of packets that reached the Ethernet RQ but cannot fit into the WQE due to their large size. Additionally, we added the option to control if such packet will cause "CQE with Error" or "CQE_MOCK".
        * Hardware steering dump output used for debugging and troubleshooting.
        * cq_overrun counter: The counter represents the number of times CQs enter an error state due to overflow that occur when the device tries to post a CQE into a full CQ buffer.
        * Enabled the capability to allow Virtual Functions to send Pause Frames packets. (Beta).
        * Enabled 10/25GbE auto-sensing with 3rd party when using 10/25GbE optical cables.
      
      **New Feature and Changes in Version 16.29.1016:**
      
        * Hardware steering dump output used for debugging and troubleshooting.
        * HW support for Flow Metering to utilize Advanced Steering Operation (ASO). HW Flow Meter allows higher scale, more accuracy, and better performance compare to the FW Flow Metering.
        * Trust level for VFs. Once the VF is trusted, it will get a set of trusted capabilities.
        * 2 new Mini CQE formats:
        * Responder Mini CQE With Flow Tag Layout.
        * Responder Mini CQE With l3_l4_info Layout.
        * Steering DP hash flow groups.
        * ignore_flow_level is now enabled by the TRUST LEVEL access registry. 
      
      **New Feature and Changes in Version 14.31.1200:**
      
        * Added a new NVconfig per Port for a specific Finisar module which sets the port to work in AN mode and sets the module to No DME. This change does not affect the speed logic, only the FEC logic (FEC override). **Note**: If the port does not come up, switch to Force mode.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.4-3.1
changelog:
  -     *Following issues have been fixed in firmware version 14.29.1016 and 16.29.1016:**
      
        * Changed the default value of DCQCN's NP parameter min_time_between_cnps to 4 on all devices to support larger scalability of cluster.
        * An issue that caused packets to drop due to header size issues and/or failing checks. This issue was caused due to a Linux issue that caused VFs to set the wrong header size value in wqe_inline_header_mode input.
        * When MKEY_BY_NAME was enabled by NVCONFIG and a large number of VFs are configured, VM restart (VF/PF FLR) might take longer than when MKEY_BY_NAME was disabled.
        * In rare cases, a fatal error related to errors from the PCI transport layer might be reported during FLR.
        * An issue that caused the device to go to dead IRISC as one of the firmware semaphores could not be released when a speed change or port state change was triggered.
      
      **Following issues have been fixed in firmware version 16.29.1016:**
      
        * An issue that caused the eth_wqe_too_small counter to count ODP page faults.
        * A low performance was observed after enabling the RoCE Accelerator capability.
      
      **No fixes are included in firmware version 14.31.1200.**


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.4-2.1
changelog:
  -     *Firmware for the following devices is updated to 16.28.4200:**
      
      P13188-B21 (HPE Ethernet 10/25Gb 2-port SFP28 MCX512F-ACAT Adapter)  
      P10112-B21 (HPE Ethernet 10/25Gb 2-port SFP28 MCX562A-ACAI OCP3 Adapter)
      
      **New Feature and Changes in Version 16.28.4200:**
      
      **This release contains important reliability improvements and security hardening enhancements. Upgrade the firmware of the device to this release to improve the devices' firmware security and reliability.**
      
        * Enabled ASN1 and OCBB (DCi) MCTP HPE specific protocols.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.4-2.1
changelog:
  -     *Following issues have been fixed in firmware version 16.28.4200:**
      
        * Although the effective BER (after FEC) was expected to meet the design targets (e.g. 10e-14 or lower), occasionally it was higher.
        * High BER occured when connecting cables of type 0.5/1m DAC to an HDR speed.
        * The PCIe Tx parameters did not load correctly when the speed was changed after the PCIe link was disabled.
        * The desched_threshold field did not work properly.
        * The "roce_adp_retrans" counter was presenting the values of the "local_ack_timeout_err" counter.
        * If Relaxed Ordering was disabled by running the "setpci" command, it would not be functional even after re-enabling it by running the "setpci" command again.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.5
changelog:
  -     *Firmware for the following devices is updated to 14.31.1014:**
      
      P21930-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4121A-XCAT Adapter)
      
      **Firmware for the following devices is updated to 14.31.1200:**
      
      P11341-B21 (HPE Ethernet 10Gb 2-port SFP+ MCX4621A-ACAB OCP3 Adapter)
      
      **Firmware for the following devices is updated to 16.31.1014:**
      
      P21927-B21 (HPE Ethernet 100Gb 2-Port QSFP28 MCX516A-CCHT Adapter)
      
      
      
      **New features and changes included in version 14.31.1014:**
      
        * Implemented a new NC-SI command get_debug_info to get mstdump via the NC-SI protocol to debug a device if the PCI link fails for any given reason.
        * support for Enabling/Disabling NIC and RDMA (port/partition) was included via the UEFI HII system settings.
        * Increased the maximum number of MSIX per VF to 127.
        * Added a new bit ("data_in_order") to query the QP and allow a process/library to detect when the AR is enabled.
        * A new flex parser to support GENEVE hardware offload and ICMP.
        * When the non-page-supplier-FLR funcion is initiated, the firmware triggers a page event to the page supplier to indicate that all pages should be returned for the FLR function.
      
      **New features and changes included in version 14.31.1200:**
      
        * Implemented a new NC-SI command get_debug_info to get mstdump via the NC-SI protocol to debug a device if the PCI link fails for any given reason.
        * support for Enabling/Disabling NIC and RDMA (port/partition) was included via the UEFI HII system settings.
        * Increased the maximum number of MSIX per VF to 127.
        * Added a new bit ("data_in_order") to query the QP and allow a process/library to detect when the AR is enabled.
        * A new flex parser to support GENEVE hardware offload and ICMP.
        * When the non-page-supplier-FLR funcion is initiated, the firmware triggers a page event to the page supplier to indicate that all pages should be returned for the FLR function.                                                                                                                                
        * Added a new NVconfig per Port for a specific Finisar module. This new NVconfig sets the port to work in AN mode and sets the module to No DME. This change does not affect the speed logic, only the FEC logic (FEC override). Note: If the port does not go up, switch to Force mode.                                                                                                                        
      
      **New features and changes included in version 16.31.1014:**
      
        * NIC scheduling feature support has been disabled for non-privileged functions.
        * Implemented a new NC-SI command get_debug_info to get mstdump via the NC-SI protocol to debug a device if the PCI link fails for any given reason.
        * support for Enabling/Disabling NIC and RDMA (port/partition) was included via the UEFI HII system settings.
        * Increased the maximum number of MSIX per VF to 127.
        * Asymmetrical MSIX Configuration: This feature allows the device to be configured with a different number of MSIX vectors per physical PCI functions.To use this feature, please follow these steps:
        *         Clear NUM_PF_MSIX_VALID to disable global symmetrical MSIX configuration.
        *         Set PF_NUM_PF_MSIX_VALID to enable asymmetrical per Physical Function MSIX configuration.
        *         Configure PF_NUM_PF_MSIX per physical PCI function.
        * RDMA partitioning and RDMA counters in IB mode.
        * Added a new bit ("data_in_order") to query the QP and allow a process/library to detect when the AR is enabled.
        * A new flex parser to support GENEVE hardware offload and ICMP.
        * When the non-page-supplier-FLR funcion is initiated, the firmware triggers a page event to the page supplier to indicate that all pages should be returned for the FLR function.
        * Enabled UID 0 to create resources with UMEM (User Memory).
        * Receiving and sending native IB packets from/to the software (including all headers) via raw IBL2 QPs.
        * RX RDMA NIC flow table on an IB port. Now the software can steer native IB packets to raw IB receive queues according to the DLID and  the DQPN.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.4.65
changelog:
  -     This product now supports SUSE Linux Enterprise Server 15.
      
      This product now supports the following network adapters:
      
        * HPE Synergy 4820C 10/25Gb Converged Network Adapter
        * HPE StoreFabric CN1200R-T Converged Network Adapter
        * HPE StoreFabric CN1300R Converged Network Adapter


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.6.27
changelog:
  -     This product corrects an issue where the WWPN information is missing in an
      adapter's FCoE configuration menu (under 'System Utilities'->'System
      Configuration' menu).  
      This product corrects an issue where server hangs during POST when a network
      adapter is connected to the HPE Synergy 20Gb Interconnect Link Module.  
      This product corrects an issue where the initiator does not stay logged into
      the target in an FCoE connection.  
      This product corrects an issue where the link status continues to show as UP
      on the switch side even after a network adapter is disabled in the OS.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.7.16
changelog:
  -     This product now supports the HPE Synergy 6820C 25/50Gb Converged Network
      Adapter.
      
      This product now allows modification of the settings under the 'Port Level
      Configuration' sub-menu under the adapter's configuration menu (located at
      'System Utilities'(F9 at POST)->'System Configuration') when OneView Profile
      with 'manage manually' option is applied to the server.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.7.16
changelog:
  -     This product corrects an issue where the firmware update fails when the first
      port is disabled on the network adapter.
      
      This product corrects an issue where not all devices are discovered as part of
      firmware update on a multi-root-complex platforms like Integrity, Superdome
      etc.
      
      This product corrects an issue where the system hangs during POST with red
      screen when iSCSI boot LUN is re-exported (after a previous unexport
      operation) from the iSCSI host (HPE 3PAR StoreServ Storage).
      
      This product corrects an issue where 'HPE Synergy 4820C 10/20/25Gb Converged
      Network Adapter' disappears after changing its link speed under its
      configuration menu (located at 'System Utilities'(F9 at POST)->'System
      Configuration').
      
      This product corrects an issue where the configuration settings of the
      adapter, connected to a server managed by OneView profile, may be reset to
      defaults after a system reboot.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.8.12
changelog:
  -     This product addresses an issue where 2nd port reports "function type:
      disabled" with HPE Ethernet 10Gb 2-port 524SFP+ Adapter.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.9.8
changelog:
  -      This product corrects the abnormal disconnection of iLO web page while performing under Shared Networking on Flexible-LOM.
        * This product addresses an issue where the HPE Ethernet 10/25Gb 2-port 622FLR-SFP28 adapter and  HPE Ethernet 10/25Gb 2-port 621SFP28 Adapter UMCE (Uncorrectable Machine Check Exception) was followed by Unrecoverable I/O error, Uncorrectable PCI express error on Server and one of the ports suddenly no longer can send or receive traffic.
        * This product addresses an issue where driver doesn't load upon booting up by correct memory relocation.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.11.0
changelog:
  -     This product addresses an issue where the modification on string format of
      firmware update payload.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.21.3
changelog:
  -     This product now supports Red Hat Enterprise Linux 8 Update 6, Liunx 9 and
      SUSE Linux Enterprise Server 15 Service Pack 4.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.22.0
changelog:
  -     This product addresses an issue where Max Number of Virtual Machine
      Queues/Physical Function shows zero value in AHS


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.2.14
changelog:
  -     This product addresses an issue where the Wake-On-Lan setting on the second
      port isn't correctly enabled when the network adapter's configuration settings
      are restored to default in the 'System Utilities' (F9 on POST) under the
      'System Configuration' menu.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.3.12
changelog:
  -      This product addresses an issue where the inlet temperature is incorrectly reported.
        * This product addresses an issue where the Wake-On-LAN setting is not properly set on the second port after the defaults are restored.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.4.24
changelog:
  -      This product corrects an issue where booting to Preboot eXecution Environment (PXE) may not work after applying the OneView server profile when the System ROM is set to 'Legacy BIOS Mode'.
        * This product addresses an issue where the FCoE boot parameters cannot be configured in the adapter's configuration menu (under 'System Utilities'->'System Configuration' menu) when OneView profile with connections set to 'manually managed' is applied to the system.
        * This product corrects an issue where certain settings/changes (CHAP, boot mode etc) in the OneView server profile are not reflected in the adapters' configuration menu (under 'System Utilities'->'System Configuration' menu) after applying the OneView server profile.
        * This product corrects an issue where the virtual World Wide Port Name(WWPN)/World Wide Node Name(WWNN) are not programmed properly when applying the OneView server profile.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.21.15
changelog:
  -      This product corrects an issue where the Maximum Transmission Unit (MTU) setting value reverts to the default value after a system reboot.
        * This product corrects an issue where an adapter's configuration menu doesn't correctly prompt for reboot after changes are made that require a reboot.
        * This product corrects a high latency issue seen during high ping activity.
        * This product corrects an issue where OneView displays the error message "Server profile settings conflict with the server hardware configuration" when applying the server profile to a server running VMware ESXi 6.x.
        * This product corrects an issue where the iSCSI settings configured in the OneView Profile are not correctly applied to the adapter.
        * This product corrects an issue where an error message is seen when entering the 'MBA Configuration Menu' under the adapter's settings (under the 'System Utilities->System Configuration' menu) and attempting to restore the defaults. 
        * This product corrects an issue where the iSCSI multipath does not work correctly in 'Legacy BIOS Mode'.
        * This product corrects an issue where the virtual World Wide Port Name(WWPN)/World Wide Node Name(WWNN) are not programmed properly when applying the OneView Server Profile.
        * This product addresses an issue where the user sees the error message "Unable to find a FibreChannel boot source for server" in OneView when applying the Server Profile with Fibre Channel network paths configured.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.22.15
changelog:
  -     This product corrects an issue where users may see an error message when they
      attempt to restore the adapter's configuration settings to defaults by
      pressing F7 under the 'System Utilities->System Configuration' menu.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.24.15
changelog:
  -     This product corrects an issue where a server does not boot via a network
      adapter in Legacy BIOS Mode.  
      This product corrects an issue where a server, across repeated reboots, is
      unable to boot into iSCSI LUN.  
      This product corrects an issue where a firmware update performed in UEFI fails
      when multiple adapters are connected to the system.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.24.16
changelog:
  -     This product addresses an issue where the network adapter doesn't properly
      report increased temperatures, causing potential system shutdown.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.25.10
changelog:
  -     This product corrects an issue where the link status is not updated
      immediately to the switch when network adapter interface is brought down in
      the Operating System.
      
      This product corrects an issue where not all devices are discovered as part of
      firmware update on a multi-root-complex platforms like Integrity, Superdome,
      etc.
      
      This product corrects an issue where the system hangs with red screen when
      attempting to update the firmware via 'Firmware Update' feature under the
      'System Utilities > Embedded Applications' menu.
      
      This product corrects an issue where a firmware update fails.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.26.7
changelog:
  -     This product now remove supports Synergy and Blade Server.
      
      This product now supports the following operatings systems:
      
        * Red Hat Enterprise Linux 7 Update 7
        * Red Hat Enterprise Linux 8 Update 0
        * SUSE Linux Enterprise Server 15 SP1


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.26.7
changelog:
  -     This product addresses an incorrect local sequence number in the Link Layer
      Discovery Protocol (LLDP).
      
      This product addresses an issue where boot mode is not restored to the default
      value after a factory reset.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.26.30
changelog:
  -     This product addresses an Overheat issue that system shuts down automatically
      due to NIC temperature exceeding threshold.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.27.8
changelog:
  -      This product corrects the display problem of the adapter name under RBSU.
        * This products corrects some issues about the thermal reporting and temperature threadshold control of the adapter.
        * This product addresses an issue where unexpected UMCE(Uncorrectable Machine Check Exception) appeared when powering on the system with NPAR(Network Partitioning) enabled.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.27.50
changelog:
  -     This product addresses an issue where the Firmware installation failure when
      enabling secure boot under SUSE Linux Enterprise Server 15 SP2.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.28.50
changelog:
  -      **This product addressed the firmware update failure problem which may cause NIC FW corruption.**
        * **This product addressed the firmware update failure problem while the platform secure boot being enabled.**


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.30.2
changelog:
  -      This product addresses a cosmetic change in the adapter configuration page to reflect that DCBx is enabled and as long as LLDP is enabled.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.31.4
changelog:
  -     This product now supports Red Hat Enterprise Linux 8 Update 6, Liunx 9 and
      SUSE Linux Enterprise Server 15 Service Pack 4


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.9
changelog:
  -     This product addresses an incorrect local sequence number in the Link Layer
      Discovery Protocol (LLDP).
      
      This product addresses an issue where boot mode is not restored to the default
      value after a factory reset.
      
      This product addresses an issue where the F1 help messages "Number of VFs per
      PF" and "Legacy Boot Protocol" option display incorrectly in Japanese and
      Simplified Chinese languages.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.2.3
changelog:
  -     This product addresses an issue where powering on the system with any I/O
      virtualization functionality (NPAR, SR-IOV, etc) enabled results in an
      Uncorrectable Machine Check Exception (UMCE).  
      This product addresses an issue where the WOL option is displayed on the Human
      Interface Infrastructure (HII) menu for 534M and 630M mezzanine devices, even
      though WOL is not supported on those devices.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.2.3
changelog:
  -     This product now supports Red Hat Enterprise Linux 7, Updates 8 and 9.  
      This product now supports Red Hat Enterprise Linux 8, Updates 2 and 3.  
      This product now supports SUSE Linux Enterprise Server 12 SP5.  
      This product now supports SUSE Linux Enterprise Server 15 SP2.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.5.2
changelog:
  -     This product addresses an issue where the Maximum Transmission Unit (MTU)
      value of iSCSI function port is displayed as 0 bytes in AHS log.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20-2.1
changelog:
  -     Added support for the following Gen10 servers:
      
        * HPE ProLiant XL190r Gen10 Server
        * HPE ProLiant XL170r Gen10 Server
        * HPE ProLiant DL180 Gen10 Server
        * HPE ProLiant DL160 Gen10 Server
        * HPE ProLiant DL580 Gen10 Server
        * HPE ProLiant ML350 Gen10 Server
        * HPE ProLiant XL450 Gen10 Server
        * HPE ProLiant DL120 Gen10 Server


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20-3.1
changelog:
  -     Note: After running this component to update the NVMe Backplane PIC firmware,
      a server reboot is required for iLO to display the new NVMe Backplane PIC
      firmware version on iLO's Firmware Information page


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20-4.1
changelog:
  -     The following support was added in version 1.20(C). No new features were added
      in version 1.20(D).
      
        * Added support for the HPE ProLiant XL270d Gen10 Server


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20-4.1
changelog:
  -     Firmware Package version 1.20(D) addressed the following issue:
      
        * When using OneView, attempts to upgrade firmware from version 1.18 to 1.20 failed.
      
      Note: If the target device was previously updated to firmware version 1.20, it
      is not necessary to apply firmware update 1.20(D).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20-5.1
changelog:
  -     Note: If the target device was previously updated to firmware version 1.20, it
      is not necessary to apply firmware update 1.20(E).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.70
changelog:
  -     *General**
      
        * Addressed an issue where OA "update iLO all" command fails in an enclosure with maximum Blades.
        * Addressed an issue where a Warning Alert  was wrongly sent when a fan is reseated in an enclosure
        * Addressed an issue where the port mapping information for 560M Izzy adapter Mezz controller was not displayed correctly.
        * Addressed an issue where Remote Syslog logging would fail when OA failover happened in an IPv6 only environment.
        * Enhanced OA to bring the server from a power throttled state back to normal power state upon an OA reboot to circumvent an unwarranted emergency brake.
        * Fixed an issue where the Active and Standby OAs can have the same IP address in some rare situations.
        * Resolved an issue where a Gen9 server's host name gets cleared when the blade is rebooted.
        * Addressed an issue where server blade Power ON will be delayed in enclosures with OA Firmware Version 4.60 and managed by HPE OneView, when the OA module is reset until OneView refreshes the servers.
      
      **Security**
      
      The following security vulnerabilities were fixed:
      
        * CVE-2016-5387- Addressed a vulnerability which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request.
        * CVE-2016-2183- Addressed a vulnerability against TLS ciphers with 64bit block size in which makes it easier for remote attackers to obtain cleartext data via an attack against a long-duration encrypted session
        * CVE-2016-6515 - Addressed a vulnerability in OpenSSH which did not limit password lengths for password authentication, which allows remote attackers to cause a denial of service via a long string.
        * CVE-2015-8215 - Addressed a vulnerability IPv6 stack which does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service.
        * Addressed issue where in Onboard Administrator was vulnerable to Buffer overflow.
        * Added the HSTS[HTTP strict transport security] support  in OA.
        * Addressed a memory corruption vulnerability in the post-authentication sshd process.
      
      **Issues and workarounds**
      
      **Browsers**
      
        * OA GUI is not accessible in Chrome versions 43.0.2357.10 to 44.0.2383.The issue was caused by a "regression" in Chrome (or WebKit). Customers should use an alternative browser like Firefox or Internet Explorer or try a different version of Chrome.
        * SSO-to-iLO connection from the OA using an iLO host name fails with Microsoft Internet Explorer11 on Windows 8.On a Windows 8 system with Internet Explorer 10 or Internet Explorer 11, if the OA web GUI session is loaded using a host name instead of an IP address, an attempt to open an iLO window using SSO from the OA web GUI might result in the iLO page loading in the OA web GUI window instead of the intended new window. This issue was determined to be a bug in Internet Explorer and is expected to be fixed in a future release or update for Internet Explorer. To work around this issue, either use an IP address to load the OA Web GUI, or turn off Protected Mode for the appropriate zone in Internet Explorer's settings. This issue occurs only on Internet Explorer browsers.
      
      **FIPS**
      
      Certificates smaller than 2048 bits in size are not compliant with FIPS
      requirements as enforced by the OA firmware starting with OA 4.20. When the OA
      running OA firmware version 4.40 or greater is operating in FIPS Mode ON/DEBUG
      and is configured with a 1024-bit LDAP certificate that was installed when
      running a previous version of OA firmware, FIPS Mode ON/DEBUG is considered to
      be operating in a degraded state due to the presence of the non-compliant
      certificate. While operating in this FIPS-Degraded Mode operational state,
      attempts to set FIPS Mode OFF from the OA GUI Network Access>FIPS tab will
      fail and show the error message The selected FIPS mode is already enabled.
      When the non-compliant certificate is removed, the FIPS-Degraded operational
      status is cleared, FIPS Mode can then be successfully set to OFF from the GUI
      interface. Note that the OA CLI command SET FIPS MODE OFF can be successfully
      used to set FIPS Mode OFF even with non-compliant 1024-bit LDAP certificates
      installed in the OA.
      
      **IRC**
      
      Unable to open .net IRC console for Gen10 Blades, Gen9 Blades also have the
      same issue. The Java applet and Webstart however, loads but the virtual media
      mounting fails. The work around is to launch the IRC through IRC Application
      (HP Lights-Out Stand Alone Remote Console) which is installed on terminal
      client.
      
      **EFM **
      
      To use EFM on Gen 10 Blades, please select options/filters "_Make Bootable ISO
      file" and _"_Enclosure Firmware Management"_ while creating custom SPP ISO on
      HPSUM 8.0.0. Please refer to HPSUM 8.0.0 User guide for further details.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.71
changelog:
  -     Onboard Administrator 4.71 provides support for the following enhancements:
      
      ** Security **
      
           CAC Feature: The authentication mechanism in Onboard Administrator has been enhanced to support DoD  
           Common Access Card Personal Identification Verification devices. This feature enhances security by  
           supporting multi factor authentication and below are the core elements of the new Authorization mechanism  
           listed below:
      
        * During Authentication (occurs during SSL session establishment): Verifying revocation status using Online  
      Certificate Status Protocol (OCSP) or Offline Certificate Revocation List
      (CRL).
      
        * During Authentication (after SSL session establishment): The certificate's Subject Alternate Name (SAN)  
      or the Subject is validated against the User Principal Name (UPN) of the
      corresponding principal in Active Directory.
      
        * It is important to note that the local user accounts in OA are disabled in CAC mode.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.71
changelog:
  -     *Security**
      
      The following security issues were fixed:
      
        * Removed the support to generate keys with SHA1 in FIPS mode, as per the latest FIPS standards SHA1 is no longer allowed.
        * Removed the support for 1024 DH primes in FIPS mode, as per the latest FIPS standards.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.80
changelog:
  -     Onboard Administrator 4.71 provides support for the following enhancements:
      
      **Hardware additions**
      
        * BL460c Gen 10.
        * HPE 10GbE Pass-Thru Module.
        * Qualified support for HPE Integrity BL8x0c i6 Server Blade.
      
      Features**: additions and changes**
      
      **General**
      
        * Added support for Gen 10 Server and iLO5 features.
        * Added support for the enhanced KVM functionality in iLO5
        * Added support for HTTP boot option in the server boot options
        * Add support for HPE 10GbE Pass-Thru interconnect module.
        * Added support for HPE Integrity BL8x0c i6 Server Blade.
        * GUI, CLI, Smart components, help files, URLs, and product names rebranded to align with HPE branding guidelines.
        * Added a new SNMP trap to indicate that the power redundancy is restored in the enclosure.
        * Enhanced "SHOW ENCLOSURE TEMP" command output, to display the temperature readings like Current, Caution and Critical temperature threshold values for interconnect modules.
        * Added a provision to make sysName field to be set to DNS host name for the traps sent from Onboard Administrator.
      
      ** Security **
      
        * Adding support for CNSA approved algorithms and a new security mode - TOP_SECRET.
        * Added the ability to Enable/Disable cipher/protocol in FIPS OFF mode.
        * Added support for secured communication between HPE Embedded Remote Support functionality and the HPE Support Datacenters with the use of SHA-2 certificates.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.80
changelog:
  -     *General**
      
        * Addressed an issue where OA "update iLO all" command fails in an enclosure with maximum Blades.
        * Addressed an issue where a Warning Alert  was wrongly sent when a fan is reseated in an enclosure
        * Addressed an issue where Remote Syslog logging would fail when OA failover happened in an IPv6 only environment.
        * Enhanced OA to bring the server from a power throttled state back to normal power state upon an OA reboot to circumvent an unwarranted emergency brake.
        * Fixed an issue where the Active and Standby OAs can have the same IP address in some rare situations.
        * Resolved an issue where a Gen9 server's host name gets cleared when the blade is rebooted.
        * Addressed an issue where server blade Power ON will be delayed in enclosures with OA Firmware Version 4.60 and managed by HPE OneView, when the OA module is reset until OneView refreshes the servers.
      
      **Security**
      
      The following security vulnerabilities were fixed:
      
        * CVE-2016-5387- Addressed a vulnerability which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request.
        * CVE-2016-2183- Addressed a vulnerability against TLS ciphers with 64bit block size in which makes it easier for remote attackers to obtain cleartext data via an attack against a long-duration encrypted session
        * CVE-2016-6515 - Addressed a vulnerability in OpenSSH which did not limit password lengths for password authentication, which allows remote attackers to cause a denial of service via a long string.
        * CVE-2015-8215 - Addressed a vulnerability IPv6 stack which does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service.
        * Addressed issue where in Onboard Administrator was vulnerable to Buffer overflow.
        * Added the HSTS[HTTP strict transport security] support  in OA.
        * Addressed a memory corruption vulnerability in the post-authentication sshd process.
      
      **Issues and workarounds**
      
      **Browsers**
      
        * OA GUI is not accessible in Chrome versions 43.0.2357.10 to 44.0.2383.The issue was caused by a "regression" in Chrome (or WebKit). Customers should use an alternative browser like Firefox or Internet Explorer or try a different version of Chrome.
        * SSO-to-iLO connection from the OA using an iLO host name fails with Microsoft Internet Explorer11 on Windows 8.On a Windows 8 system with Internet Explorer 10 or Internet Explorer 11, if the OA web GUI session is loaded using a host name instead of an IP address, an attempt to open an iLO window using SSO from the OA web GUI might result in the iLO page loading in the OA web GUI window instead of the intended new window. This issue was determined to be a bug in Internet Explorer and is expected to be fixed in a future release or update for Internet Explorer. To work around this issue, either use an IP address to load the OA Web GUI, or turn off Protected Mode for the appropriate zone in Internet Explorer's settings. This issue occurs only on Internet Explorer browsers.
      
      **FIPS**
      
      Certificates smaller than 2048 bits in size are not compliant with FIPS
      requirements as enforced by the OA firmware starting with OA 4.20. When the OA
      running OA firmware version 4.40 or greater is operating in FIPS Mode ON/DEBUG
      and is configured with a 1024-bit LDAP certificate that was installed when
      running a previous version of OA firmware, FIPS Mode ON/DEBUG is considered to
      be operating in a degraded state due to the presence of the non-compliant
      certificate. While operating in this FIPS-Degraded Mode operational state,
      attempts to set FIPS Mode OFF from the OA GUI Network Access>FIPS tab will
      fail and show the error message The selected FIPS mode is already enabled.
      When the non-compliant certificate is removed, the FIPS-Degraded operational
      status is cleared, FIPS Mode can then be successfully set to OFF from the GUI
      interface. Note that the OA CLI command SET FIPS MODE OFF can be successfully
      used to set FIPS Mode OFF even with non-compliant 1024-bit LDAP certificates
      installed in the OA.
      
      **IRC**
      
      Unable to open .net IRC console for Gen10 Blades, Gen9 Blades also have the
      same issue. The Java applet and Webstart however, loads but the virtual media
      mounting fails. The work around is to launch the IRC through IRC Application
      (HP Lights-Out Stand Alone Remote Console) which is installed on terminal
      client.
      
      **EFM **
      
      To use EFM on Gen 10 Blades, please select options/filters "_Make Bootable ISO
      file" and _"_Enclosure Firmware Management"_ while creating custom SPP ISO on
      HPSUM 8.0.0. Please refer to HPSUM 8.0.0 User guide for further details.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.85
changelog:
  -     Onboard Administrator 4.85 provides support for the following enhancements:
      
      **Hardware additions**
      
        * HPE D2500sb Storage Blade
      
      Features**: additions and changes**
      
      **General**
      
        * Onboard Administrator has been enhanced to allow configuring an IPv6 address as SNMP EngineID.
        * Onboard Administrator has been enhanced to allow configuring a user defined SSH port number. This will allow users to configure a non-standard SSH port instead of the default SSH port 22.
      
      ** Security**
      
      General Data Protection Requirements (GDPR) support added in Onboard
      Administrator for HPE Embedded Remote Support solution. The HPE passport
      username will now be stored in an encrypted form.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.85
changelog:
  -     *General**
      
        * Addressed an issue where SNMP trap cpqRackEnclosureManagerLinkUp was not sent after an Onboard Administrator failover.
        * Addressed online help content issues seen in the previous version of Onboard Administrator.
      
      **Security**
      
         The following security vulnerabilities were fixed:
      
        * CVE-2017-8105 - Addressed a memory corruption vulnerability caused by a buffer overflow.
        * CVE-2016-10244 - Addressed a vulnerability which might allow a remote attacker to cause denial-of-service via a crafted file.
      
      **Issues and workarounds**
      
      **Browsers**
      
        * OA GUI is not accessible in Chrome versions 43.0.2357.10 to 44.0.2383.The issue was caused by a "regression" in Chrome (or WebKit). Customers should use an alternative browser like Firefox or Internet Explorer or try a different version of Chrome.
        * SSO-to-iLO connection from the OA using an iLO host name fails with Microsoft Internet Explorer11 on Windows 8. On a Windows 8 system with Internet Explorer 10 or Internet Explorer 11, if the OA web GUI session is loaded using a host name instead of an IP address, an attempt to open an iLO window using SSO from the OA web GUI might result in the iLO page loading in the OA web GUI window instead of the intended new window. This issue was determined to be a bug in Internet Explorer and is expected to be fixed in a future release or update for Internet Explorer. To work around this issue, either use an IP address to load the OA Web GUI, or turn off Protected Mode for the appropriate zone in Internet Explorer's settings. This issue occurs only on Internet Explorer browsers.
      
      **FIPS**
      
      Certificates smaller than 2048 bits in size are not compliant with FIPS
      requirements as enforced by the OA firmware starting with OA 4.20. When the OA
      running OA firmware version 4.40 or greater is operating in FIPS Mode ON/DEBUG
      and is configured with a 1024-bit LDAP certificate that was installed when
      running a previous version of OA firmware, FIPS Mode ON/DEBUG is considered to
      be operating in a degraded state due to the presence of the non-compliant
      certificate. While operating in this FIPS-Degraded Mode operational state,
      attempts to set FIPS Mode OFF from the OA GUI Network Access>FIPS tab will
      fail and show the error message The selected FIPS mode is already enabled.
      When the non-compliant certificate is removed, the FIPS-Degraded operational
      status is cleared, FIPS Mode can then be successfully set to OFF from the GUI
      interface. Note that the OA CLI command SET FIPS MODE OFF can be successfully
      used to set FIPS Mode OFF even with non-compliant 1024-bit LDAP certificates
      installed in the OA.
      
      **IRC**
      
      Unable to open .net IRC console for Gen10 Blades, Gen9 Blades also have the
      same issue. The Java applet and Webstart however, loads but the virtual media
      mounting fails. The work around is to launch the IRC through IRC Application
      (HP Lights-Out Stand Alone Remote Console) which is installed on terminal
      client.
      
      **EFM**
      
      To use EFM on Gen 10 Blades, please select options/filters "_Make Bootable ISO
      file" and _"_Enclosure Firmware Management"_ while creating custom SPP ISO on
      HPSUM 8.0.0. Please refer to HPSUM 8.0.0 User guide for further details.
      
      **CAC**
      
        * In the CAC mode SSH, Telnet and XML Reply protocols will be disabled.
        * Linked enclosure login will not work if the linked enclosure in CAC mode.
        * If accurate Service account details are not provided, LDAP user login with certificate will fail.
        * It is highly recommended to establish a recovery plan before getting started with CAC.  If something goes wrong with the OA configuration, the OA may be recovered through the serial port or Insight Display panel and USB KEY. Both methods require physical access to the OA.  However, if an LCD PIN has been configured (and forgotten) and local accounts have been disabled or CAC has been incorrectly configured then, the only way to recover is through a serial port. The two most common situations where OA recovery is needed are when LDAP has been configured incorrectly with local accounts disabled or when CAC has been configured without certificate access.
      
      **Configurable SSH Port Number                                               **
      
      If a Standby OA is running firmware version less than 4.85 and it is updated
      to firmware version greater than or equal to 4.85 using synchronize firmware
      feature from Active OA, after the firmware update and reboot of the Standby
      OA, SSH port will not open in the configured port number. The work around is
      to reboot the Standby OA and SSH port will open in the configured port in next
      boot. This issue will not occur in the case where SSH port is configured to
      default port 22 in the Active OA.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.90
changelog:
  -     Onboard Administrator 4.90 provides support for the following enhancements:
      
      **Hardware additions**
      
        * None
      
      Features**: additions and changes**
      
      **General**
      
        * On SNMP user add/delete, Onboard Administrator has been enhanced to resync with the new configuration instead of restarting SNMP service.
        * The SCEXE package support has been removed in the Onboard Administrator firmware update and EFM. OA now uses only the RPM package.
        * The Single Sign-On (SSO) feature has been enhanced to support the Password Complexity feature in the iLO 5 firmware.
        * The AlertMail feature has been enhanced to include subsystems status in the AlertMail messages.
        * Onboard Administrator has been enhanced for better debugging of issues.
      
      ** Security**
      
        * None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.90
changelog:
  -     *General**
      
        * Addressed an issue where Onboard Administrator is not reachable when the port speed changes from 100M to 1000M in auto-negotiation mode. This issue is described by Customer Advisory : [https://support.hpe.com/hpsc/doc/public/display?sp4ts.oid=1844065&docLocale=en_US&docId=emr_na-c04866545](https://support.hpe.com/hpsc/doc/public/display?sp4ts.oid=1844065&docLocale=en_US&docId=emr_na-c04866545)
        * Addressed an issue where the DHCPv6 service does not start after an Onboard Administrator reboots causing it to reboot again after 15 minutes.
        * Addressed an issue related to ssl protocols enable or disable in the Onboard Administrator Command Line Interface (CLI) where proper error message is displayed. When the password entered is less than eight characters, the ambient temperature of the BL460c Gen10 blade is not displayed.
        *  Addressed issues in Onboard Administrator GUI pages related to: 
          1. Power management
          2. Front view display of BL460c Gen10 blade
      
          3. Login feature into linked enclosure and Two-factor authentication
      
        * Addressed an issue where syslog messages were not added for dynamic dns setting and LDAP group access changes.
        * Addressed an issue where SNMP GET for Onboard Administrator system description OID displays a wrong value.
        * Addressed an issue where Blade Switch 6125G firmware version is not displayed after rebooting OA.
        * Addressed an issue where Onboard Administrator responds to internal private IP ping requests from management interface.
        * Addressed the issue of delay in the powering of the blades after an enclosure power cycle in a VCM managed enclosure.
        * Addressed an issue in the SNMP where power supply OK traps are not sent out after an enclosure power cycle.
        * Addressed the issues related to user certificate usage in the Onboard Administrator where the same certificate cannot be used for multiple users and checking the syntax of IPv6 address if used in the certificate.
        * Addressed the issues present in the previous versions of the Onboard Administrator online help.
        * Addressed an issue in FIPS ON mode where Onboard Administrator CLI will display information about the password requirements when an invalid password in entered by the user.
        * Fixed an issue related to ambient temperature display of Gen10 blades in Command Line Interface (CLI).
        * Fixed an issue in First Time Setup Wizard page in GUI where in FIPS ON mode, user will not able to set DEBUG to ON.
        * Addressed an issue where messages are not logged in syslog when Device and Interconnects bay access are updated for a LDAP group.
        * Fixed an issue related to Blade part number display in OA GUI and CLI.
      
      **Security**
      
        The following security vulnerabilities are fixed:
      
        * CVE-2018-0732- Addressed the issue where the possibility of a malicious server sending a large prime value to the client from DH (E) based ciphersuite during the key agreement in a TLS handshake resulting in the client to take a long time to generate a key with the prime and exploited in a Denial Of Service attack.
        * CVE-2018-0737- Addressed the issue of vulnerability of the OpenSSL RSA Key generation algorithm to the cache timing side channel attack.
      
      **Issues and workarounds**
      
      **Browsers**
      
        * OA GUI is not accessible in Chrome versions 43.0.2357.10 to 44.0.2383.The issue was caused by a "regression" in Chrome (or WebKit). Customers should use an alternative browser like Firefox or Internet Explorer or try a different version of Chrome.
        * SSO-to-iLO connection from the OA using an iLO host name fails with Microsoft Internet Explorer11 on Windows 8. On a Windows 8 system with Internet Explorer 10 or Internet Explorer 11, if the OA web GUI session is loaded using a host name instead of an IP address, an attempt to open an iLO window using SSO from the OA web GUI might result in the iLO page loading in the OA web GUI window instead of the intended new window. This issue was determined to be a bug in Internet Explorer and is expected to be fixed in a future release or update for Internet Explorer. To work around this issue, either use an IP address to load the OA Web GUI, or turn off Protected Mode for the appropriate zone in Internet Explorer's settings. This issue occurs only on Internet Explorer browsers.
      
      **FIPS**
      
      Certificates smaller than 2048 bits in size are not compliant with FIPS
      requirements as enforced by the OA firmware starting with OA 4.20. When the OA
      running OA firmware version 4.40 or greater is operating in FIPS Mode ON/DEBUG
      and is configured with a 1024-bit LDAP certificate that was installed when
      running a previous version of OA firmware, FIPS Mode ON/DEBUG is considered to
      be operating in a degraded state due to the presence of the non-compliant
      certificate. While operating in this FIPS-Degraded Mode operational state,
      attempts to set FIPS Mode OFF from the OA GUI Network Access>FIPS tab will
      fail and show the error message The selected FIPS mode is already enabled.
      When the non-compliant certificate is removed, the FIPS-Degraded operational
      status is cleared, FIPS Mode can then be successfully set to OFF from the GUI
      interface. Note that the OA CLI command SET FIPS MODE OFF can be successfully
      used to set FIPS Mode OFF even with non-compliant 1024-bit LDAP certificates
      installed in the OA.
      
      **IRC**
      
      Unable to open .net IRC console for Gen10 Blades, Gen9 Blades also have the
      same issue. The Java applet and Webstart however, loads but the virtual media
      mounting fails. The work around is to launch the IRC through IRC Application
      (HPE Lights-Out Stand Alone Remote Console) which is installed on terminal
      client.
      
      **EFM**
      
      To use EFM on Gen 10 Blades, please select options/filters "_Make Bootable ISO
      file" and _"_Enclosure Firmware Management"_ while creating custom SPP ISO on
      HPE SUM 8.0.0. Please refer to HPE SUM 8.0.0 User guide for further details.
      
      **CAC**
      
        * In the CAC mode SSH, Telnet and XML Reply protocols will be disabled.
        * Linked enclosure login will not work if the linked enclosure in CAC mode.
        * If accurate Service account details are not provided, LDAP user login with certificate will fail.
        * It is highly recommended to establish a recovery plan before getting started with CAC.  If something goes wrong with the OA configuration, the OA may be recovered through the serial port or Insight Display panel and USB KEY. Both methods require physical access to the OA.  However, if an LCD PIN has been configured (and forgotten) and local accounts have been disabled or CAC has been incorrectly configured then, the only way to recover is through a serial port. The two most common situations where OA recovery is needed are when LDAP has been configured incorrectly with local accounts disabled or when CAC has been configured without certificate access.
      
      **Configurable SSH Port Number                                               **
      
      If a Standby OA is running firmware version less than 4.85 and it is updated
      to firmware version greater than or equal to 4.85 using synchronize firmware
      feature from Active OA, after the firmware update and reboot of the Standby
      OA, SSH port will not open in the configured port number. The work around is
      to reboot the Standby OA and SSH port will open in the configured port in next
      boot. This issue will not occur in the case where SSH port is configured to
      default port 22 in the Active OA.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.95
changelog:
  -     *General**
      
        * Addressed an issue where SNMP queries to Onboard Administrator OIDs were not successfully completed when VLAN is configured for Blades and Interconnects.
        * Addressed an issue in the Device and Rack Summary GUI page to eliminate the duplicate display of FLB and Mezz adapters information.
        * Addressed an issue where Interconnects were not receiving IP address from EBIPA (or) external DHCP server.
        * Addressed an issue where Blade Location information was not displayed correctly in SHOW SERVER STATUS ALL CLI command.
        * Addressed an issue where DNS record update was getting delayed in DNS server when a user configured a domain name in Onboard Administrator.
      
      **Security**
      
        * None
      
      **Issues and workarounds**
      
      **Browsers**
      
        * OA GUI is not accessible in Chrome versions 43.0.2357.10 to 44.0.2383.The issue was caused by a "regression" in Chrome (or WebKit). Customers should use an alternative browser like Firefox or Internet Explorer or try a different version of Chrome.
        * SSO-to-iLO connection from the OA using an iLO host name fails with Microsoft Internet Explorer11 on Windows 8. On a Windows 8 system with Internet Explorer 10 or Internet Explorer 11, if the OA web GUI session is loaded using a host name instead of an IP address, an attempt to open an iLO window using SSO from the OA web GUI might result in the iLO page loading in the OA web GUI window instead of the intended new window. This issue was determined to be a bug in Internet Explorer and is expected to be fixed in a future release or update for Internet Explorer. To work around this issue, either use an IP address to load the OA Web GUI, or turn off Protected Mode for the appropriate zone in Internet Explorer's settings. This issue occurs only on Internet Explorer browsers.
      
      **FIPS**
      
      Certificates smaller than 2048 bits in size are not compliant with FIPS
      requirements as enforced by the OA firmware starting with OA 4.20. When the OA
      running OA firmware version 4.40 or greater is operating in FIPS Mode ON/DEBUG
      and is configured with a 1024-bit LDAP certificate that was installed when
      running a previous version of OA firmware, FIPS Mode ON/DEBUG is considered to
      be operating in a degraded state due to the presence of the non-compliant
      certificate. While operating in this FIPS-Degraded Mode operational state,
      attempts to set FIPS Mode OFF from the OA GUI Network Access>FIPS tab will
      fail and show the error message The selected FIPS mode is already enabled.
      When the non-compliant certificate is removed, the FIPS-Degraded operational
      status is cleared, FIPS Mode can then be successfully set to OFF from the GUI
      interface. Note that the OA CLI command SET FIPS MODE OFF can be successfully
      used to set FIPS Mode OFF even with non-compliant 1024-bit LDAP certificates
      installed in the OA.
      
      **IRC**
      
      Unable to open .net IRC console for Gen10 Blades, Gen9 Blades also have the
      same issue. The Java applet and Webstart however, loads but the virtual media
      mounting fails. The work around is to launch the IRC through IRC Application
      (HPE Lights-Out Stand Alone Remote Console) which is installed on terminal
      client.
      
      **EFM**
      
      To use EFM on Gen 10 Blades, please select options/filters "_Make Bootable ISO
      file" and _"_Enclosure Firmware Management"_ while creating custom SPP ISO on
      HPE SUM 8.0.0. Please refer to HPE SUM 8.0.0 User guide for further details.
      
      **CAC**
      
        * In the CAC mode SSH, Telnet and XML Reply protocols will be disabled.
        * Linked enclosure login will not work if the linked enclosure in CAC mode.
        * If accurate Service account details are not provided, LDAP user login with certificate will fail.
        * It is highly recommended to establish a recovery plan before getting started with CAC.  If something goes wrong with the OA configuration, the OA may be recovered through the serial port or Insight Display panel and USB KEY. Both methods require physical access to the OA.  However, if an LCD PIN has been configured (and forgotten) and local accounts have been disabled or CAC has been incorrectly configured then, the only way to recover is through a serial port. The two most common situations where OA recovery is needed are when LDAP has been configured incorrectly with local accounts disabled or when CAC has been configured without certificate access.
      
      **Configurable SSH Port Number                                               **
      
      If a Standby OA is running firmware version less than 4.85 and it is updated
      to firmware version greater than or equal to 4.85 using synchronize firmware
      feature from Active OA, after the firmware update and reboot of the Standby
      OA, SSH port will not open in the configured port number. The work around is
      to reboot the Standby OA and SSH port will open in the configured port in next
      boot. This issue will not occur in the case where SSH port is configured to
      default port 22 in the Active OA.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.95
changelog:
  -     Onboard Administrator 4.95 provides support for the following enhancements:
      
      **Hardware additions**
      
        * None
      
      Features**: additions and changes**
      
      **General**
      
        * AlertMail feature now supports two priorities that a user can select for the AlertMail messages..
        * Enclosure Firmware Management (EFM) feature is optimized to speed up the EFM update operation.
        * The SSL certificate of Onboard Administrator now supports Fully Qualified Domain Name (FQDN) in **Common Name (CN) field and IP address in **SAN **field.**
        * Common Access Card (CAC) Authentication feature is enhanced to support a configurable timeout for the SSL session.
      
      ** Security**
      
        * Onboard Administrator supports two new TLS_DHE_RSA ciphers
        * FIPS TOP-SECRET mode ciphers are now supported in FIPS **ON **and **OFF **modes.
        * CLI commands SHOW SSH CIPHER, ENABLE SSH CIPHER and DISABLE SSH CIPHER are added to Show, Enable and Disable SSH ciphers in FIPS ON and OFF modes.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.96
changelog:
  -     Onboard Administrator 4.96 provides support for the following enhancements:
      
      **Hardware additions**
      
        * None
      
      Features**: additions and changes**
      
      **General**
      
        * AlertMail feature now supports two priorities that a user can select for the AlertMail messages..
        * Enclosure Firmware Management (EFM) feature is optimized to speed up the EFM update operation.
        * The SSL certificate of Onboard Administrator now supports Fully Qualified Domain Name (FQDN) in **Common Name (CN) field and IP address in **SAN **field.**
        * Common Access Card (CAC) Authentication feature is enhanced to support a configurable timeout for the SSL session.
      
      ** Security**
      
        * Onboard Administrator supports two new TLS_DHE_RSA ciphers
        * FIPS TOP-SECRET mode ciphers are now supported in FIPS **ON **and **OFF **modes.
        * CLI commands SHOW SSH CIPHER, ENABLE SSH CIPHER and DISABLE SSH CIPHER are added to Show, Enable and Disable SSH ciphers in FIPS ON and OFF modes.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.97
changelog:
  -     *General**
      
        * Addressed an issue where running concurrent UPDATE ILO cli command from different SSH sessions cause few of the commands to end in operation failure.
        * Fixed an issue in SET SERVER DVD CONNECT cli command usage in IPv6 environment.
        * Addressed an issue where blade's ProductID update in System Rom RBSU is not reflected in the Onboard Administrator.
        * Harnessed certificate read operation from flash to minimize certificate read failures.
        * Fixed an issue in SNMP v3 protocol where EngineTime was not reset on increment of EngineBoot count.
        * Addressed an issue related to blade discovery failure
        * Fixed an issue in Smart Component where it fails to establish communication with Onboard Administrator using DHE ciphers.
        * Addressed an issue related to ECDSA ciphers enable/disable feature.
        * Added SSH cipher list to the configuration script
        * Fixed an issue in Onboard Administrator GUI where IPv4 DynamicDNS could not be enabled when enclosure is configured for static IP configuration.
        * Fixed help message display issues in CLI commands SET SSL_SESSION TIMEOUT and SET SECURESH.
        * Addressed an issue in SNMP where EngineBoot count was incremented by two for add/delete of trap receiver.
        * Fixed Online Help (OLH) pages display issue that occur when language pack is uploaded into Onboard Administrator.
      
      **Security**
      
      
      
      The following security vulnerabilities are fixed:
      
        * Onboard Administrator's web server response is enhanced to include X-Content-Type-Options security header.
        * CVE-2011-3026 - libpng: Heap buffer overflow
        * CVE-2018-1000517 - BusyBox wget version  contains a Buffer Overflow vulnerability
        * CVE-2020-1971 - EDIPARTYNAME NULL pointer de-reference
        * CVE-2020-15861 - Net-SNMP allows Escalation of Privileges
        * CVE-2020-15862 - Net-SNMP provides the ability to run arbitrary commands as root.
        * CVE-2019-20892 - SNMPv3 get bulk request issue  
      
      
      **Issues and workarounds**
      
      
      
      **Browsers**
      
        * OA GUI is not accessible in Chrome versions 43.0.2357.10 to 44.0.2383.The issue was caused by a "regression" in Chrome (or WebKit). Customers should use an alternative browser like Firefox or Internet Explorer or try a different version of Chrome.
        * SSO-to-iLO connection from the OA using an iLO host name fails with Microsoft Internet Explorer11 on Windows 8. On a Windows 8 system with Internet Explorer 10 or Internet Explorer 11, if the OA web GUI session is loaded using a host name instead of an IP address, an attempt to open an iLO window using SSO from the OA web GUI might result in the iLO page loading in the OA web GUI window instead of the intended new window. This issue was determined to be a bug in Internet Explorer and is expected to be fixed in a future release or update for Internet Explorer. To work around this issue, either use an IP address to load the OA Web GUI, or turn off Protected Mode for the appropriate zone in Internet Explorer's settings. This issue occurs only on Internet Explorer browsers.
      
      **FIPS**
      
      Certificates smaller than 2048 bits in size are not compliant with FIPS
      requirements as enforced by the OA firmware starting with OA 4.20. When the OA
      running OA firmware version 4.40 or greater is operating in FIPS Mode ON/DEBUG
      and is configured with a 1024-bit LDAP certificate that was installed when
      running a previous version of OA firmware, FIPS Mode ON/DEBUG is considered to
      be operating in a degraded state due to the presence of the non-compliant
      certificate. While operating in this FIPS-Degraded Mode operational state,
      attempts to set FIPS Mode OFF from the OA GUI Network Access>FIPS tab will
      fail and show the error message The selected FIPS mode is already enabled.
      When the non-compliant certificate is removed, the FIPS-Degraded operational
      status is cleared, FIPS Mode can then be successfully set to OFF from the GUI
      interface. Note that the OA CLI command SET FIPS MODE OFF can be successfully
      used to set FIPS Mode OFF even with non-compliant 1024-bit LDAP certificates
      installed in the OA.
      
      **IRC**
      
      Unable to open .net IRC console for Gen10 Blades, Gen9 Blades also have the
      same issue. The Java applet and Webstart however, loads but the virtual media
      mounting fails. The work around is to launch the IRC through IRC Application
      (HPE Lights-Out Stand Alone Remote Console) which is installed on terminal
      client.
      
      **EFM**
      
      To use EFM on Gen 10 Blades, please select options/filters "_Make Bootable ISO
      file" and _"_Enclosure Firmware Management"_ while creating custom SPP ISO on
      HPE SUM 8.0.0. Please refer to HPE SUM 8.0.0 User guide for further details.
      
      **CAC**
      
        * In the CAC mode SSH, Telnet and XML Reply protocols will be disabled.
        * Linked enclosure login will not work if the linked enclosure in CAC mode.
        * If accurate Service account details are not provided, LDAP user login with certificate will fail.
        * It is highly recommended to establish a recovery plan before getting started with CAC.  If something goes wrong with the OA configuration, the OA may be recovered through the serial port or Insight Display panel and USB KEY. Both methods require physical access to the OA.  However, if an LCD PIN has been configured (and forgotten) and local accounts have been disabled or CAC has been incorrectly configured then, the only way to recover is through a serial port. The two most common situations where OA recovery is needed are when LDAP has been configured incorrectly with local accounts disabled or when CAC has been configured without certificate access.
      
      **Configurable SSH Port Number   **
      
      **                                            **
      
      If a Standby OA is running firmware version less than 4.85 and it is updated
      to firmware version greater than or equal to 4.85 using synchronize firmware
      feature from Active OA, after the firmware update and reboot of the Standby
      OA, SSH port will not open in the configured port number. The work around is
      to reboot the Standby OA and SSH port will open in the configured port in next
      boot. This issue will not occur in the case where SSH port is configured to
      default port 22 in the Active OA.
      
      
      
      **Smart component**
      
      
      
      When OA is in FIPS ON or FIPS TOP-SECRET mode and any of the ciphers that use
      Diffie-Hellman (DH) keys are enabled, firmware upgrade or downgrade using OA
      Smart  Component 4.96 or earlier versions may fail with following error:
      
         Error: 1013: Client cannot connect with the Onboard Administrator. Verify
      the target address is correct and can be accessed from your system.
      
      
      
                
      
      FIPS ON
      
      TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA  
      TLS_DHE_RSA_WITH_AES_128_GCM_SHA25  
      TLS_DHE_RSA_WITH_AES_256_GCM_SHA384  
      TLS_DHE_RSA_WITH_AES_128_CBC_SHA256  
      TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
      
      
      
      FIPS TOP-SECRET
      
      TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
      
        
      
                 Same error may occur when OA upgrade or downgrade is performed through Smart  
      
                 Update Manager (SUM) resulting in the following error message in the SUM.
      
      
      
                  Component        Package                                                                                                Deployment Status                        Log
      
                  \----------------------------------------------------------------------------------------------------------------------------------------------------------
      
                  cpC39063          Online HPE BladeSystem c-Class Onboard Administrator for Windows          Update returned an error     View Log
      
      
      
         When this failure occurs, the following message can be seen in the OA Smart
      Component  log file.
      
         Error: 1013: Client cannot connect with the Onboard Administrator.
      
      Verify The target address is correct and can be accessed from your system.
      
      
      
                The work-around for this problem is to disable all the ciphers that use DH  key and rerun the firmware upgrade or downgrade.
      
      Disabling ciphers can be done using the CLI command DISABLE SSL CIPHER or
      through the GUI.  The disabled ciphers can be re-enabled once the firmware
      upgrade or downgrade is completed.
      
      
      
      **ILO5 Firmware Update**
      
      
      
       The UPDATE ILO command is failing to update the iLO5 firmware versions 2.10
      and later on OA version 4.90 and less than 4.90. This issue is caused by the
      introduction of new  signature in the iLO5 firmware version 2.10
      
      . The work-around is to update the OA firmware  to 4.95 and then try the
      UPDATE ILO command. This issue will not occur with OA versions   4.95 and
      later.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.4
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      Integrated Lights-Out 5 (iLO 5) Firmware version 1.15 and System ROM version
      1.20 or later
      
      **Enhancements/New Features:**
      
      Added support for Dynamic Power Capping. For proper operation, please ensure
      that Integrated Lights-Out 5 (iLO 5) Firmware version 1.15 and System ROM
      version 1.20 or later are updated on the server.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.4-2.1
changelog:
  -     *Important Notes:**
      
      Ver. 1.0.4 (B) contains support for new server products.  It is functionally
      equivalent to ver. 1.0.4.  It is not necessary to upgrade with Revision (B) if
      a previous component revision was used to upgrade the firmware to ver. 1.0.4.
      
      **Firmware Dependencies:**
      
      Integrated Lights-Out 5 (iLO 5) Firmware version 1.15 and System ROM version
      1.20 or later
      
      **Enhancements/New Features:**
      
      Added support for Dynamic Power Capping. For proper operation, please ensure
      that Integrated Lights-Out 5 (iLO 5) Firmware version 1.15 and System ROM
      version 1.20 or later are updated on the server.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.4-4.1
changelog:
  -     *Important Notes:**
      
      Ver. 1.0.4 (D) contains updates to the component packaging and is functionally
      equivalent to ver. 1.0.4.  It is not necessary to upgrade with Revision (D) if
      a previous component revision was used to upgrade the firmware to ver. 1.0.4.
      
      **Firmware Dependencies:**
      
      Integrated Lights-Out 5 (iLO 5) Firmware version 1.15 and System ROM version
      1.20 or later
      
      **Enhancements/New Features:**
      
      Added support for Dynamic Power Capping. For proper operation, please ensure
      that Integrated Lights-Out 5 (iLO 5) Firmware version 1.15 and System ROM
      version 1.20 or later are updated on the server.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.7
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added support for AMD EPYC 7002 Generation Processors. ROM version 2.00 or
      later is required to enable the support. This version of firmware does not
      include any changes for platforms with Intel Processors or AMD EPYC 7001
      Generation Processors.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.7-2.1
changelog:
  -     *Important Notes:**
      
      Ver. 1.0.7 (B) contains updates to the component packaging and is functionally
      equivalent to ver. 1.0.7. It is not necessary to upgrade with Revision (B) if
      a previous component revision was used to upgrade the firmware to ver.
      1.0.7.This is the initial version for HPE Gen10 Plus servers.  
      
      
      **Firmware Dependencies:**
      
      For HPE ProLiant DL325/DL385 Gen10 servers, ROM version 2.00 or later is
      required to enable the support. iLO5 version 1.40 or above is required to
      upgrade to this version.
      
      **Enhancements/New Features:**
      
      Added support for AMD EPYC 7002 Generation Processors on HPE ProLiant
      DL325/DL385 Gen10 servers. ROM version 2.00 or later is required to enable the
      support. This version of firmware does not include any changes for Gen10
      platforms with Intel Processors or AMD EPYC 7001 Generation Processors. iLO5
      version 1.40 or above is required to upgrade to this version.
      
      This is the initial version for HPE Gen10 Plus servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.7-3.1
changelog:
  -     *Important Notes:**
      
      Ver. 1.0.7 (C) contains updates to the component packaging and is functionally
      equivalent to ver. 1.0.7. It is not necessary to upgrade with Revision (C) if
      a previous component revision was used to upgrade the firmware to ver.
      1.0.7.This is the initial version for HPE Gen10 Plus servers.
      
      **Firmware Dependencies:**
      
      For HPE ProLiant DL325/DL385 Gen10 servers, ROM version 2.00 or later is
      required to enable the support. iLO5 version 1.40 or above is required to
      upgrade to this version.
      
      **Enhancements/New Features:**
      
      Added support for AMD EPYC 7002 Generation Processors on HPE ProLiant
      DL325/DL385 Gen10 servers. ROM version 2.00 or later is required to enable the
      support. This version of firmware does not include any changes for Gen10
      platforms with Intel Processors or AMD EPYC 7001 Generation Processors. iLO5
      version 1.40 or above is required to upgrade to this version.
      
      This is the initial version for HPE Gen10 Plus servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.8
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Fixed an issue of inaccurate temperature readings when the actual temperature
      exceeds 100 C on Proliant Gen10 Plus servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.8-2.1
changelog:
  -     *Important Notes:**
      
      Ver. 1.0.8(B) contains updates to the firmware packaging and is functionally
      equivalent to ver. 1.0.8. It is not necessary to upgrade with Revision B if a
      previous component revision was used to upgrade the firmware to version 1.0.8.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Fixed an issue of inaccurate temperature readings when the actual temperature
      exceeds 100 C on Proliant Gen10 Plus servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.0.9
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      For HPE ProLiant Gen10 Plus servers, iLO5 version 2.55 or above is required to
      upgrade to this version.
      
      **Problems Fixed:**
      
      Fixed an issue where the CPU may not restore to original working frequency
      after turning off Power Capping.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.1.0
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed a rare issue where CPU could become stuck at its lowest working
      frequency when dynamic power capping was enabled on AMD-based systems.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.1.2
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      For HPE ProLiant Gen10 Plus servers, iLO5 version 2.55 or above is required to
      upgrade to this version.
      
      **Enhancements/New Features:**
      
      Changed certain behaviors to avoid machine power failures when significant
      power consumption devices are introduced.
      
      **Problems Fixed:**
      
      None
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.80
changelog:
  -      HP Smart Array Px3x controller with HP SmartCache enabled on boot volume could potentially encounter file corruption when booting the system if the Super-cap is not fully charged due to being replaced or being in a power down condition for several days (Example 7 days). File corruption is less likely to occur on non-boot volumes than on boot volumes. For additional information please refer to the customer advisory # [c04719000](http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04719000)


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.02
changelog:
  -      A physical drive configured as a spare drive might indicate predictive failure sooner than expected.
        * Controller might stop responding during run-time (POST Lockup 0x13).
        * After hot-plug replacement of a hard disk drive, incorrect hard disk drive firmware version and upgrade recommendation were displayed by HP Smart Storage Administrator.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.54
changelog:
  -      Detection of all direct-attached physical drives might fail if a single drive did not spin up.
        * Servers now power up faster due to improvements in the UEFI controller driver.
        * Reduced likelihood of POST Lockup 0x13 occurrence due to intermittent memory errors.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.04
changelog:
  -      System might hang at POST following a reboot.
        * System fans might go to 100% if connected drives were spun down.
        * SATA SSD's were incorrectly marked as worn out.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.08
changelog:
  -      Intermittent memory errors might cause the controller to stop responding. (POST Lockup 0x13)
      
        * System might stop responding if a parity error is found during surface scan of a RAID6 volume. (POST Lockup 0x13)
      
        * In rare cases, the controller might stop responding while running IO without displaying a lockup code.
      
        * Non-Maskable Interrupt (NMI) might occur on systems with a Windows OS and HPE Gen9 Smart Array or Smart HBA adapters and performing continuous reboot testing.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.10
changelog:
  -      If and unexpected power outage occurred, the system might stop operating during Power-On Self Test
      
        * Controller could stop responding when Smart Cache is performing a read-ahead after finishing a read-fill for a pending flush operation


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.54
changelog:
  -      DDR cache could be randomly disabled after several boots
        * A hot-inserted replacement drive might show as a predictive failure if the original drive was identified as a predictive failure.
        * Controller cache module might be marked as permanently disabled if the Smart Storage Battery is removed or failed while the system is online, even if SSA was previously used to enable write caching without a backup power source.
        * Controller can become unresponsive due to a SmartCache pending flush operation when a read-ahead and a read-fill are performed in sequent.
        * System might stop responding if a parity error is found during surface scan of a RAID6 volume. (POST Lockup 0x13)
        * System fans might go to 100% if connected drives were spun down
        * Issue where a controller crash dump may not be collected after a controller failure


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 5.02
changelog:
  -      The firmware updates could fail while SmartCache is enabled due to active I/O in the Smart Cache.
        * The serial output of the expander could fail to be populated in the controller logs due to the buffer not being handled appropriately by the controller


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.17
changelog:
  -      SATA hard disk drives connected to the HPE 12Gb/s SAS Expander card may not be detected when cold booting a HPE ProLiant server with a HPE Smart Array SR Gen10 controller


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.02
changelog:
  -      Changed the Enclosure's Target and LUN address to the appropriate unique values. Previously these addresses would conflict with the SATA drive in bay #1 which interfered with software defined storage solutions such as Storage Spaces Direct.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.21
changelog:
  -     The following issues are resolved in version 4.21:
      
        * Expander may reset during heavy SSACLI polling
        * SATA drives may take longer to spin up, not be initially detected, and then hot add later. This can prevent system boot or affect the logical drive status.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 5.10
changelog:
  -      To make Valid flag is always set to true initially so that CRC check can be performed on initstring partition and test if it is really valid.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 5.12
changelog:
  -     Users need to update HPE SAS 12G Expander FW version 5.12 for FW compatibility
      due to a specific SPI flash devices is used on the Expander card. Carry over
      issue resolution with reference SID8638.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 5.12
changelog:
  -     1\. In support of Micron 256Mb SPI ROM on the latest Shiner board
      
      2\. Provided a proper downgrade restriction to ensure FW compatibility with
      the latest HW


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 5.14
changelog:
  -     1. Fix intermittent expander/drives missing issue during repeatedly power cycles
        2. Provide a proper downgrade restriction to ensure firmware compatibility with the latest flashes


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 5.15
changelog:
  -      Add support of new flash on the latest expander board.
        * Provided a proper downgrade restriction to ensure firmware compatibility with the latest flashes.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.80
changelog:
  -      A rare race condition in a system with SAS and SATA drives, where SATA drives were not discovered during server power-on.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.07
changelog:
  -      While performing a firmware upgrade on an HP 12Gb/s SAS Expander card, an issue infrequently occurred that caused the card to become unusable. HP 12Gb/s SAS Expander firmware version 2.07 resolved this issue.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.09
changelog:
  -      The HPE 12Gb/s SAS Expander firmware version 2.09 resolves an issue where an incorrect SAS address was returned by the Device Identification Inquiry for Vital Product Data page. As a result, applications using this information may report incorrect data about the storage system topology.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.10
changelog:
  -      Rebranded the controller information from HP 12G SAS Expander card to HPE 12G SAS Expander card.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.00-2.1
changelog:
  -      Improved integration with Smart Update Manager.
      
      Note: Upgrading to version 1.00(B) is not necessary if the Apollo 2000 SAS
      Expander was previously updated to version 1.00.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.00-3.1
changelog:
  -     Customers who already have previous firmware version 1.00 installed do not
      need to update to 1.00(C).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.52
changelog:
  -     Fixed an issue in the HPE Apollo 2000 System SAS Expander FW where the HDD
      Zoning Table would be set to default after upgrading to 1.51


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.00-2.1
changelog:
  -     *Note:** If version 1.00 was previously installed, then it is not necessary to upgrade to version 1.00 (B).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 6.06
changelog:
  -      Under the following conditions, the controller might stop responding: 
          * During POST following an unexpected power event if there was data in the controller cache.
          * When running I/O to SATA drives. (POST Lockup 0x13)
          * When using a RAID configuration with strip size of 1024KiB. (POST Lockup 0x13)
          * When a WRITE SAME command is sent with a buffer size greater than 512 bytes. (POST Lockup 0x13)
        * In a multi-path environment with nested expanders, the active path to a device might be incorrect following a path failure or restoration.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 6.30
changelog:
  -     Fixes the following issues:
      
        * DDR cache could be randomly disabled after several boots
        * The controller could become unresponsive while in HBA mode during the creation of a partition/file system
      
      .


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 6.60
changelog:
  -      Issue where the QueryAsynchronousEvent could potentially provide incorrect response data
        * Issue where the Cache could potentially get disable after several reboots


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 6.88
changelog:
  -     Fixes the following Issues
      
        * SATA drive could stop responding  while on HBA mode when non-NCQ commands are executed
        * Controller could stop responding when upgrading due to the DDR Cache Module exceeding its limitations
        * SSD Cache module could become disable while upgrading FW
        * Data from the HPE Smart Drive Backplane could potentially become corrupted if a non-HPE carrier is present


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 7.00
changelog:
  -      Occasionally  the drive will not accept any IO's after running Sanitize command for a period of time due to the FW being out of sync with the drive during that time
        * Non-HPE drives could report "Task Set Full" due to the drives reaching the qdepth limit during heavy workload
        * Raid volume is not discovered due to a bad drive consuming two slots during hotplug
        * Data could become inaccessible when upgrading from firmware versions prior to 4.5x
        * The controller could stop responding when executing a SCSI verify command due to a CPU exception
        * The system could stop communicating due to an I/O command timeout
        * While on HBA mode, a drive could stop responding due to an early allocated buffer release
        * A SAS drive WWN is reported inaccuratelyy due to an incorrect report causing the driver to be out of sync with the device
        * If using a 4G module, the controller could stop responding due to the SSD Cache metadata exceeding its limits during a Backup
        * SSD Smart Cache module become disabled due to a reduction in usable cache space


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.26
changelog:
  -      In rare circumstances after multiple, successive reboots, a system with 28 large form factor drives might become unresponsive. Firmware v1.26 resolves the issue.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.26-2.1
changelog:
  -      Updated to support Service Pack for ProLiant version 2017.07.0
      
                **Note:** If version 1.26 was previously installed, then it is not necessary to upgrade to version 1.26 (B).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.79-2.1
changelog:
  -     Drive may show up missing after a system reboot.
      
      Please reference Customer Advisory a00098241en_us


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 0.39-2.1
changelog:
  -      Modify Product ID's to "A4200 Gen10P LFF" and "A4200 Gen10P SFF" to distinguish the generation.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 0.39
changelog:
  -     It's the transition version before migrating to newer version 0.39(B). 0.39
      doesn't have any function change or issue fix, just to activate the new
      Product ID naming.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 0.39
changelog:
  -      It's the transition version before migrating to newer version 0.39(B). 0.39 doesn't have any function change or issue fix, just to activate the new Product ID naming.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 0.39-2.1
changelog:
  -      Modify Product ID to "A4200 Gen10P LFF" and "A4200 Gen10P SFF" to distinguish the different generation expander backplane.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.65
changelog:
  -      System might stop responding at POST and fail to load an OS. This issue is more likely to occur if System BIOS version is 1.40 or later. However, systems running older BIOS versions could experience this issue also.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.66
changelog:
  -      A failing drive might take up to an hour to be marked as failed, during which time the host system is unresponsive.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.98
changelog:
  -     Fixes the following issues:
      
        * Controller could stop responding with a 0x1A91 message during active path failure
        * Controller could stop responding during I/O processing and Smart Cache flush process
        * When predictive spare rebuild is triggered on Smart Cache, the rebuilding process could fail to start.
        * Data could become corrupted when a SATA drive overruns a data transfer
        * Controller memory corruption could occur when the response to an Identify Device command (IDD) is received from a drive
        * Communication between the host system and a RAID5/6 volume could potentially fail after an I/O timeout on one of the drives in the array.
        * System could stop responding with a 0x1E30 message when discovering an ATA locked drive
        * Controller could stop responding during a drive sanitize operation


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.99
changelog:
  -     Fixes the following issues
      
        * Customer could encounter a data coherencey issue that will cause the system to return a Purple Screen Of Death (PSOD) when system fails to complete I/O's


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.02
changelog:
  -      The "Auto Replace Drives" setting could cause the spare drives to become inaccessible due to drives becoming part of the new logical drives and not being reported to iLO
        * Logical volumes could become unresponsive after a controller reset due to OS driver not receiving the "OK "
        * The controller could become unresponsive after a server reboot due to the driver receiving an incorrect controller state
        * The system could become unresponsive when a DVD/CD-ROM is attached to the system due to an Interrupt Flag been set erroneously


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.03
changelog:
  -     Controller could stop responding while processing a larger size of I/O than
      the RAID volume size.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.62
changelog:
  -      Add UBM1 Support
        * Support for backup power source charge timeout values from UEFI
        * UBM2 backplane support
        * Drive hotplug support for UBM backplanes


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.62
changelog:
  -      While processing I/O's larger than the RAID volume stripe size, the controller could stop responding.
        * If an active IO module cable is unplugged and re-inserted multiple times, the first reset request is lost and subsequent reset requests are aligned in a queue until the original request is completed. However, the first request will never complete and will result in error message 24613 in the ahs logs.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.65
changelog:
  -      Prevents a potential data inconsistency from occurring after experiencing an Unrecoverable Read Error (URE) on a drive configured in RAID 1/10/ADM Fault Tolerant Mode.
        * Prevents a potential data inconsistency from occurring during initial configuration and operation of a volume configured in RAID 5/6/50/60 Fault Tolerant Mode.
      
      o   For additional information, reference [Customer Bulletin
      a00097210en_us](https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-
      a00097210en_us).
      
      **IMPORTANT:** RAID 0 and Unassigned drives are not affected.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00
changelog:
  -     The following issues have been fixed in Smart Array controller firmware  
         v3.00:
      
           * Background surface scan might not repair media errors on 12G SAS  
             drives in RAID 1, 5, 10, and 50 logical drives.
      
           * In some I/O workloads, the file system or application might read  
             incorrect data from encrypted RAID 0 (with two or more physical  
             drives) or RAID 10/10ADM (with four or more physical drives) logical  
             drives.
      
           * A controller might hang when a Test Unit Ready command fails during  
             SSD logical drive Rapid Parity Initialization.
      
           * During a rebuild and extreme simultaneous host I/O writes, the rebuild  
             operation might use old data, resulting in subsequent host reads that  
             might return old data.
      
           * A host might read incorrect data after background parity  
             initialization finishes on a logical drive on a single array with  
             multiple logical drives.
      
           * A controller lockup issue might occur during the repair of an  
             unrecoverable read error (URE) on a RAID 5 volume.
      
           * A controller lockup issue might occur during SmartCache error  
             handling.
      
           * A controller lockup issue might occur during controller boot when  
             SmartCache is enabled.
      
           * A file system or application might read incorrect data when a  
             coalesced host request encounters a fatal error.
      
           * A failed drive installed during controller boot is not identified as a  
             failed drive.
      
           * The failed drive status LED is not illuminated when a good drive is  
             replaced with a failed drive in a backplane.
      
           * In configurations with backplanes, a failed drive installed as a  
             replacement for a previously configured RAID volume is not identified  
             as a failed drive.
      
           * A rebuild of a logical drive created from SSD drives fails to start  
             within 1,200 seconds.
      
           * A performance drop during 16k to 256k sequential reads with low queue  
             depth occurs on a logical drive with cache enabled.
      
           * A controller lockup issue might occur during a simultaneous host write  
             and background cache flush operation.
      
           * Incorrect connector information is displayed for SATA drives after  
             certain physical events in a dual I/O module enclosure configuration.
      
           * A failed drive that is physically present in a drive bay is not  
             reported correctly.
      
           * Devices might drop out of a configuration after multiple create or  
             delete drive zone group commands are issued.
      
           * The drive status LED does not flash during sanitize operations if  
             drives are attached to an expander.
      
           * Cache disable status is not updated correctly when backup power source  
             charging times out.
      
           * The clear configuration command might not clear the configuration if  
             SmartCache is enabled and the system was previously shut down  
             ungracefully.
      
           * The clear configuration command fails if a SmartCache volume has  
             multiple UREs within a SmartCache page block size.
      
           * A controller lockup issue might occur when toggling a path to an  
             enclosure in a dual domain configuration.
      
           * The controller runs in survival mode if a temperature sensor is not  
             detected.
      
           * The clear configuration command might report failures when it  
             encounters an installed drive with failed status.
      
           * A performance drop occurs during sequential workloads.
      
           * A controller failure might occur when running concurrent I/O to  
             unassigned drives and drives in a RAID logical drive.
      
           * After a reboot, a bad drive might prevent controller discovery or  
             operating system startup.
      
           * A host request is incorrectly returned as Failed when a failed drive  
             in a degraded volume is replaced.
      
           * Modifying the spare configuration under an active spare rebuild causes  
             the rebuild process to stop.
      
           * Incorrect device location reporting occurs when direct-attach drives  
             are not attached to a backplane and an enclosure management schema is  
             not defined.
      
           * RAID volume configuration settings are not applied when a disk drive  
             transitions from unassigned to RAID usage during runtime.
      
           * A RAID volume with a failed drive reappears after a clear  
             configuration operation completes and the system is rebooted.
      
           * A controller might hang during a SmartCache flush task that encounters  
             multiple unrecoverable media errors (UREs).
      
           * A response of all zeros is sent for ATA PASSTHROUGH commands, such as  
             SMART READ DATA, through Out of Band (OOB) host transport.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00
changelog:
  -     The following enhancements are part of the Smart Array controller firmware  
         v3.00:
      
           * After a firmware upgrade and reboot, the background parity  
             initialization process starts for logical drives with incomplete or  
             failed background parity initialization status.
      
           * Previously, background surface scans for data consistency could wait  
             up to 14 days between runs. Surface scan now restarts immediately when  
             a consistency check fails. When no surface scan issues are found,  
             surface scan maintains the 14 day waiting period.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.21-1.1
changelog:
  -      Enhanced the performance of sequential READ I/Os greater than 256KiB for cached logical drives.
        * Added support for user-configurable expander scan duration parameters.
        * Improved background consistency check to scan logical drives more efficiently.
        * Added support for Port Discovery Protocol host tool option to support SGPIO or UBM backplanes.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.21-1.1
changelog:
  -      A controller lockup issue occurs when clearing the configuration of an encryption-enabled controller.
        * When unconfigured drives are directly attached, the PHY ID is always 0 in the ADU report or lsscsi output.
        * A file system or application might read incorrect data when there is pending read or write operation and an array transformation is in progress on the logical drives.
        * A rekey operation on a SmartCache volume pauses when the controller firmware is upgraded and the server is warm rebooted.
        * A SMART READ DATA command sent with an out-of-band method returns a response of all zeros.
        * The Maximum Connection Number calculation for an indirectly attached wide-port end-target is incorrect.
        * A firmware exception might occur during task management abort handling for a non-NCQ SATA command.
        * A controller lockup issue might occur when the PHYs fluctuate between link up/link down status.
        * Open frames cause an I/O timeout that results in an Open Reject Bad Destination response and a host I/O timeout. This situation causes a server node to be evicted from a cluster.
        * Removing a redundant fan module in an attached JBOD causes Failed JBOD status.
        * The controller might not respond for up to 15 minutes when a drive reports a hardware failure.
        * Specifying an incorrect serial number in the API when attempting to HALON flash a drive does not result in the expected error.
        * A SmartCache write bypass might result in a cache line getting stuck on a pending queue if the write to the primary logical drive is retried.
        * A controller might not respond if it is repeatedly forced between SIS (Inbox) and PQI I/O submission modes at the same time as an I/O timeout.
        * An issue in the write coalescing logic might cause a partially coalesced opportunity to be abandoned under high queue depth workloads.
        * The OS driver reports a lockup code that does not match the code provided by the firmware.
        * SATA drives are unnecessarily reset during a power-on self-test.
        * The bay number of a non-hot-plug drive is reported as 255/0xFF when the device inventory re-query API is initiated.
        * A controller might not respond when a clear configuration action is initiated at the same time that a degraded volume is undergoing Rapid Parity Initialization.
        * I/O coalescing is not enabled when DDR cache is not present or enabled.
        * A drive incorrectly reports failed status if it is spun down and then used to create a volume with Rapid Parity Initialization.
        * SmartCache metadata is lost after a new volume is created while running I/O traffic.
        * An abnormal volume state is observed with multiple SmartCache volumes configured using 512e drives.
        * A controller might not respond during volume transformation if the backup power source goes off line, is spuriously hot-removed, or indicates a cabling error.
        * A LUN reset issue occurs during heavy write I/O workloads on cache enabled volumes.
        * An incorrect spare SSD physical drive state is reported during a rebuild.
        * An I/O latency issue occurs during periodic disk write metadata operations.
        * A drive failure code might be incorrectly updated with a generic drive failure code.
        * When an expanding SmartCache volume is migrated to another controller after an ungraceful shutdown, the volume is not configured correctly.
        * A controller might not respond when an expanding volume is migrated from a controller that supports DDR cache to a controller that does not support DDR cache.
        * In a split mirror configuration, the cache ratio is reset to the default values after a backup cable error.
        * A controller might not respond after a cold boot during volume rekeying.
        * A controller lockup issue might occur in an HBA SAS drive dual path configuration.
        * A device reset command initiated by a host utility has a timeout issue in minimum power mode.
        * If you use the identify all LED command frequently, the command might not affect all drive LEDs.
        * A controller might not respond when you run the Internal Test Unit Ready command during drive hot removal or addition.
        * A controller lock up issue might occur when resuming a rebuild operation after a reboot.
        * A surface scan inconsistency check event is not logged for RAID 1 volumes.
        * A controller lock up issue might occur when activating a spare drive for an encrypted volume during I/Os.
        * A drive that failed due to read capacity is presented to the host.
        * A periodic background drive temperature check might skip every other minute.
        * A controller lock up issue might occur during expansion after multiple subsequent attempts to abort the expansion process.
        * An unknown error occurred during execution when Recover Cache Module in SSA.
        * Encryption host management commands are processed for a SmartCache volume, even though these commands do not apply to SmartCache volumes.
        * A host might read incorrect data after an array expansion operation.
        * High severity events logged when a controller is in the critical event buffer overflow condition are not prioritized.
        * Redundant surface scan pass complete events might be posted for the same surface scan iteration if the controller is rebooted during the scan.
        * During an expander firmware upgrade (reduced functionality mode), the last management device index remains open for processing I/Os, and an I/O timeout might occur.
        * A performance drop is observed on certain queue depths for the 4 kB sequential write workload on RAID logical volumes with SmartPath and DDR caching disabled.
        * A command timeout issue occurs during expander firmware upgrade with Non-Disruptive Soft Reset.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.53
changelog:
  -      Added UBM type3 backplane support
        * Added support for long device model/product ID for SATA drives.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.53
changelog:
  -      An issue where the controller might become unresponsive while waiting for a non-existent pre-fetch queue entry.
        * Host I/O timeouts might occur due to continuing firmware attempts to discover devices during an expander configuration.
        * A controller lockup problem (with code 0x1E10) might occur when a bad drive with an unsupported block size is connected into slot 0.
        * A Controller hangs issue when multiple hot-plug and hot remove events (drives or JBODs) were being processed.
        * A Controller hangs issue on DDR caching enabled logical volumes with sequential read towards the end of the volume.
        * A Controller hangs issue with outstanding I/Os on a degraded logical volume when the physical drive fails.
        * A Controller hangs issue if a host I/O and background consistency check simultaneously encounter a RAID-1 ADM stripe in which all drives have URE's on the same LBA.
        * A Controller hangs issue when a drive is failed from a RAID6/60 logical drive when the host issues a Clear Controller Configuration command or any other configuration change command.
        * The SSD data drive might be set offline (with reason code 0x37) when hot-remove and re-insert during a spare rebuild in progress.
        * A drive might not be exposed to the OS after reboot if the system is rebooted just after the sanitize erase finishes.
        * UBM backplanes are not detected properly when connected to specific ports (port 7 or above) in an expander card configuration.
        * A Controller hangs issue when processing idle time followed by a short burst of I/Os.
        * The controller might return the previous drive firmware version, after a drive firmware update on SATA drives.
        * The controller might fail drives (with reason code 0x49, I/O freeze timeout) during expander firmware upgrade on a multi-expander enclosure configuration.
        * Hot-added drive LED control fails on specific fan-out expander type external enclosure models.
        * sequential I/Os and the firmware coalescing logic can't get the memory.
        * Filesystem or application might read old data when SmartCache configurations encounter intermittent write I/O errors to a primary logical drive.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 4.11
changelog:
  -      Fixed an issue where SSD SmartPath is not enabled on logical drives created on the same array in certain scenarios.
        * Fixed a problem where WRITE and READ fails with URE on a RAID6 volume where it could have completed successfully in certain error recovery scenarios.
        * Fixed a problem where events were not getting logged in certain scenarios.
        * Fixed an issue where a Windows memory dump process was taking longer than 30 minutes.
        * Fixed a problem in Gen10+ server where FAULT LED was not turning on for the drives failing during device discovery.
        * Fixed a problem where the critical event "Controller memory ECC error limit exceeded" was reported in the AHS IML log after upgrading to 3.53 B0 firmware build.
        * Fixed a problem where the host WRITE I/O failed on the SmartCache logical drive with UREs present on the primary logical drive.
        * Fixed an issue where the controller may be non-responsive after drive failure with SSD SmartPath enabled under a high queue depth workload.
        * Fixed a performance issue when the host is submitting large sequential IO streams at high queue depth.
        * Fixed an issue where OS filesystem is not available after making configuration changes in HII.
        * Fixed an issue where error was observed while selecting edit SmartCache Logical drive option when SmartCache logical drive is in Degraded mode.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 5.00
changelog:
  -      Added support for DMTF PLDM Monitoring and Control for enhanced thermal monitoring
        * Added support for DMTF PLDM Redfish Device Enablement for Redfish Storage, StorageController, Port, Drive, Volume, & CollectionCapabilities
        * Added support for DMTF PLDM Redfish Device Enablement for Volume POST & DEL operations
        * Added support for DMTF Redfish StorageDevice.1.0.1 Events
        * Added support in firmware to enable logical drive transformation without backup power source on the controllers supporting data preservation.
        * Added support to return NCQ Priority Information for SATA drive to host.
        * Added support to blink the drive Predictive Failure (PF) LED during Predictive Spare Rebuilding (PSR) for drives that can be safely removed and replaced without causing a logical drive failure.
        * Added support to configure default setting for the drive write cache.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 5.00
changelog:
  -      Fixed a rare problem where backup power status was incorrectly reporting Charging instead of Failed.
        * Fixed an issue where obsoleted SCSI pass through command fails.
        * Loss of redundant path message is incorrectly reported on logical drive failure with single domain configuration.
        * Fixed an issue where SmartPath may not be used after LUN Reset
        * Fixed a potential controller lockup 0x1BC0 during write then read I/O with drive URE's.
        * Fixed an issue that Apollo 4200 Gen10 plus LFF expander backplanes are not discovered by controller.
        * Fixed an issue that range locked SED failed with reason error erasing RAID metadata during reboot and remains failed after clear configuration.
        * Fixed an issue where the file system may read incorrect data from a degraded RAID 5 or 6 logical drive.
        * Fixed an issue where the file system or application may read incorrect data when a backup power source is discharged completely, and system power loss occurs during a transformation.
        * Fixed an issue where the drive Fault LED is not turned ON when firmware fails a bad HBA drive connected to an expander during device discovery or hot-plug.
        * Fixed an issue of auto-rebuild not starting if two drives fail at the same time on a RAID10 or RAID6 logical drive having only one "Auto-Replace Drives" spare drive.
        * Fixed an issue where the drive Fault LED is turned ON for a few seconds when multiple configured drives are hot removed from a SES enclosure and then hot added
        * Fixed an issue where rebuild did not start after multiple iterations of drive failures.
        * Fixed an issue where the controller might fail to discover devices after a cable is hot-added.
        * Fixed a potential problem of inability to delete a SmartCache write-back logical drive.
        * Fixed an issue where 0x1789 POST message error code is displayed as healthy and there is no information in HII when all logical drives in the controller are offline.
        * Fixed an issue where the last logical drive in an array cannot be deleted in UEFI configuration tool.
        * Fixed an issue where build method is not listed for RAID 6 array creation in UEFI configuration tool.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 5.61
changelog:
  -      Added support for for Local Key Management SED adapter password.
        * Added support for reporting surface scan metrics for SSA, SSACLI.
        * Added support for improving secure erase time for disks supporting the WRITE SAME command.
        * Added support for a new persistent event log policy that overwrites old events with the most recently occurred events.
        * Added support PLDM firmware update
        * Added support PLDM firmware update for UBM.
        * Enable Redfish Name property of Volume resource which is optional on create. The value is the same as DisplayName property.
        * Report VendorID, ProductID and location informations for enclosure SEPs.
        * Redfish POST request to perform the Drive.Actions.#SecureErase ACTION will be rejected with the extended error message ResourceInUse if the targeted Drive is a SED that is not in the original factory state(OFS).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 5.61
changelog:
  -      Fixed an issue where to create RAID 60 on 24 SATA SSDs resulted in controller lockup.
        * Fixed a performance drop issue on RAID 5 logical drives with 50/50 cache ratio on a 256K sequential read workload.
        * Fixed a parity inconsistency after RAID rebuild restarted with a new drive replacement.
        * Fixed an issue where a transforming logical drive fails when the controller is abruptly rebooted after logical drive deletion.
        * Fixed an issue where the logical drive failed during the heal array transformation.
        * Fixed an issue where rebuild does not start on an array with the spare disk.
        * Fixed an issue where the VDM requests were not being serviced in a timely manner when the controller was under high load.
        * Fixed controller lockup during clear configuration after SmartCache logical drive is moved from P-Series to E-Series controller.
        * Fixed an issue where not all permitted values were published to the WriteCachePolicy@Redfish.AllowableValues in VolumeCapabilities.
        * Fixed an issue where the VolumeCapabilities resource can be published with incorrect values for WriteCachePolicy@Redfish.AllowableValues when the controller's battery is charging.
        * Fixed an issue where the ControllerPasswordAccepted Redfish alert was sent with incorrect ControllerPasswordEntered messageId.
        * Fixed an issue where a drive's ServiceLabel is sometimes erroneously published with a leading zero on its Port number.
        * Fixed an issue where Redfish alerts generated early in the boot sequence were not reported to iLO.
        * Fixed an issue where a Redfish Volume create request is erroneously accepted when the request payload contains a WriteCachePolicy value conflicting with the existing cache configuration.
        * Fixed an issue where the ControllerPreviousError alert was sent with incorrect ControllerPreviouseFailure messageId and severity.
        * Fixed an issue where the BatteryCharging alert was sent with an incorrect severity on certain controllers.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 6.52
changelog:
  -      Added support to save controller logs in host memory in the event of a system crash.
        * Added support for remote-managed SED rekey.
        * Added support for Configurable Spindown Spares policy.
        * Added support for the permanent disablement of unused IOBAR support in PCIe configuration space.
        * Enhance Redfish interfaces: 
          * support DELETE for a Volume resource which is not the last created on a given array.
          * support DELETE for the last remaining Volume on an array which has SED encryption enabled.
          * support #Storage.ResetToDefaults with ResetType = ResetAll when encrypted volumes are present.
          * support AutoVolumeCreate property in Redfish Storage resource
          * support Links.Batteries property in Redfish StorageController resource


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 6.52
changelog:
  -      Fixed issues with the SED drive.
        * Fixed issues with the spare drive.
        * Fixed an issue with the SmartCache logical drive.
        * Fixed issues with expander firmware upgrade.
        * Fixed issues with RBOD devices.
        * Fixed a potential controller lockup issue while deleting a logical drive configuration on a controller.
        * Resolved an issue by allowing MCTP re-discovery exclusively during the first Bus Master Enable set.
        * Fixed UEFI HII unreadable characters in Chinese language.
        * Fixed an issue where WriteCacheProtected alert is sometimes not generated.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 7.11
changelog:
  -      Added support for saving Managed SED master key and reset key in cipher text in controller NVRAM instead of clear text.
        * Changed temperature polling period from 1 minute to 5 minutes for HBA mode drives that are in low power state.
        * Added support for clearing UREs in unmapped LBA range of fault tolerant logical drives.
        * Improved random write and mixed read-write performance.
        * Added support for SED encryption configuration through Redfish interface.
        * Added support of Redfish Chassis implementation for UBM Backplanes.
        * Added Redfish ACTION: 
          * Storage.SetEncryptionKey
        * Added support for Redfish property PATCH: 
          * Storage.EncryptionMode
          * Storage.HotspareActivationPolicy
          * Drive.HostspareReplacementMode
          * Drive.HotspareType
          * Volume.Encrypted
        * Added support for Redfish Status.Conditions property to resources: 
          * Drive
          * Port
          * StorageController
          * StorageController.CacheSummary
          * Volume
        * Added support for Redfish properties: 
          * Drive.DriveFormFactor
          * Drive.FirmwareVersion
          * Drive.Manufacture (SAS only)
          * Drive.SlotCapableProtocols
          * StorageController.AssetTag
          * StorageController.Links.PCIeFunction
          * Volume.BlockSizeBytes
          * Volume.LogicalUnitNumber
        * Added support for PLDM Type5 UBM PIC firmware flashing behind expander.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 7.11
changelog:
  -      Fixed an issue where the host experienced BSOD while clearing the controller configuration.
        * Fixed controller lockups caused by incorrect address reads and partial RAM initialization for PCIe functions, leading to ECC errors.
        * Fixed issues with external storage.
        * Fixed issues with the SATA drive.
        * Fixed issues with the SED drive.
        * Fixed issues with the spare drive.
        * Corrected MCTP-related issues.
        * Fixed surface scan issues on the RAID 50.
        * Fixed issues encountered during heavy I/O operations.
        * Fixed volume issues on the failed drive.
        * Fixed issues for incorrect Severity reported in Redfish events.
        * Fixed issues for incorrect Status reported in Redfish resources.
        * Fixed an issue with improper capacity information in Redfish drive Name.
        * Fixed an issue where Redfish long running task status is not reported.
        * Fixed an issue where DurableNameFormat for RAID volumes are reported as UUID in RDE READ operations, but should be NAA.
        * Fixed an issue where failed to take ownership of, or to revert, a SED through Redfish.
        * Fixed an issue when a drive hosting a RAID 0 Volume is removed and reinserted, a VolumeOK event is not generated.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.00.03.219
changelog:
  -     *Important Notes:**
      
       None  
      
      **Firmware Dependencies:**
      
       None  
      
      **Enhancements/New Features:**
      
      Updated to the latest Intel supported version 04.00.03.219 of the Server
      Platform Services Firmware.
      
      **Known Issues:**
      
       None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.00.04.288-2.1
changelog:
  -     *Important Notes:**
      
      System ROM version 1.26 or later must first be installed. Then update HPE
      Gen10 Innovation Engine (IE) Firmware to version 0.1.4.4 or later before
      updating HPE Gen10 Server Platform Services (SPS) Firmware to version
      04.00.04.288.
      
      This is a new release of the Intel Platform Service (SPS) Firmware revision
      04.00.04.288. This revision has mitigated security vulnerability CVE-2017-5706
      (http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5706) and
      CVE-2017-5709 (http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5709).
      It is anticipated that details regarding these security vulnerabilities will
      be published to these links on November 20,2017. These security
      vulnerabilities are not unique to HPE servers.
      
      **Firmware Dependencies:**
      
      HPE Gen10 system ROM version 1.26 or later
      
      HPE Gen10 Innovation Engine (IE) Firmware version 0.1.4.4 or later
      
      **Problems Fixed:**
      
      System ROM version 1.26 or later must first be installed. Then update HPE
      Gen10 Innovation Engine (IE) Firmware to version 0.1.4.4 or later before
      updating HPE Gen10 Server Platform Services (SPS) Firmware to version
      04.00.04.288.
      
      This is a new release of the Intel Platform Service (SPS) Firmware revision
      04.00.04.288. This revision has mitigated security vulnerability CVE-2017-5706
      (http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5706) and
      CVE-2017-5709 (http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5709).
      It is anticipated that details regarding these security vulnerabilities will
      be published to these links on November 20,2017. These security
      vulnerabilities are not unique to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.00.04.381
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      HPE Gen10 system ROM version 1.26 or later
      
      HPE Gen10 Innovation Engine (IE) Firmware version 0.1.5.2 or later
      
      **Problems Fixed:**
      
      This is a new release of the Intel Platform Service (SPS) Firmware revision
      04.00.04.381.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.00.04.393
changelog:
  -     *Important Notes:**
      
      This revision has mitigated security vulnerability CVE-2018-3643
      (https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-3643) and CVE-2018-3655
      (https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-3655). It is anticipated
      that details regarding these security vulnerabilities will be published to
      these links on September 11,2018. These security vulnerabilities are not
      unique to HPE servers.
      
      **Firmware Dependencies:**
      
      HPE Gen10 system ROM version 1.26 or later
      
      HPE Gen10 Innovation Engine (IE) Firmware version 0.1.5.2 or later
      
      **Problems Fixed:**
      
      This revision has mitigated security vulnerability CVE-2018-3643
      (https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-3643) and CVE-2018-3655
      (https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-3655). It is anticipated
      that details regarding these security vulnerabilities will be published to
      these links on September 11, 2018. These security vulnerabilities are not
      unique to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.01.04.251
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added support for Intel Xeon Scalable Performance 3200, 4200, 5200, 6200 and
      8200 series processors.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.01.04.296
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an intermittent issue where an optional PCIe device may not properly
      report its thermal data or other telemetry data as seen through the Integrated
      Lights-Out (iLO) interface. This issue is not unique to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.01.04.339
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      This image contains the latest Intel Server Platform Services (SPS) Firmware
      which contains mitigations for a variety of security vulnerabilities. The
      following vulnerabilities have been addressed in this SPS release:
      CVE-2019-11090 and CVE-2019-11109. These issues are not unique to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.01.04.381
changelog:
  -     This image contains the latest Intel Server Platform Services (SPS) Firmware
      which contains mitigations for security vulnerability CVE-2020-0545. This
      issue is not unique to HPE Servers.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.01.04.381-2.1
changelog:
  -     *Important Notes:**
      
      The Ver. 04.01.04.381(B) flash component contains an updated flash image. The
      actual firmware is exactly the same as was delivered with the original ver.
      04.01.04.381 flash component. The previous flash component had an issue that
      caused flashing to intermittently fail. It is not necessary to upgrade with
      Revision B if a previous component Revision was successfully used to upgrade
      the firmware to version 04.01.04.381 or for systems that originally shipped
      with version 04.01.04.381 firmware.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where systems configured with older versions of the Server
      Platform Services (SPS) Firmware, such as version 04.00.00.288 or older, may
      become inoperable after flashing to SPS firmware version 04.01.04.381. This
      releases contains an updated flash component for SPS Firmware 04.01.04.381
      which allows direct flashing from older firmware versions to the latest.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.01.04.505
changelog:
  -     *Important Notes:**
      
      This version of the Server Platform Services (SPS) Firmware contains updates
      aligned with the Intel Product Update (IPU) version IPU.2021.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This version of the Server Platform Services (SPS) Firmware addresses an issue
      where not all PCIe devices will be managed properly by the system when there
      are more than 16 PCIe devices present in the platform. This would include PCIe
      devices in PCIe slots or NVMe drives. This issue would typically manifest
      itself as iLO Firmware not properly reporting thermals from a device when a
      server was in this heavily loaded configuration.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.01.04.601
changelog:
  -     *Important Notes:**
      
      This version of the Server Platform Services (SPS) Firmware contains updates
      aligned with the Intel Product Update (IPU) version IPU.2021.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      This version is in compliance with IPU.2021.2 guidance.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.01.04.804-2.1
changelog:
  -     *Important Notes:**
      
      This version of the Server Platform Services (SPS) Firmware contains updates
      aligned with the Intel Product Update (IPU) version IPU.2022.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Addressed an issue where Intel reference systems were observed to
      intermittently fail to power on during extensive reboot testing.  This issue
      has not been reported on HPE servers.  This version of the Intel SPS firmware
      has been released as part of the Intel 2022.2 IPU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.04.04.058
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added support for Intel Optane Persistent Memory.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.04.04.062
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      This version of the System ROM contains updates aligned with the INTEL Whitley
      BKC WW52.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.04.04.202
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      This version of the Server Platform Services (SPS) Firmware contains updates
      aligned with the INTEL PLR3.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.04.04.603
changelog:
  -     *Important Notes:**
      
      This version of the Server Platform Services (SPS) Firmware contains updates
      aligned with the Intel Product Update (IPU) version IPU.2024.1 guidance. This
      version of the SPS should be paired with System ROM 2.00 (02/22/2024) or
      later.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the Server Platform Services Firmware provides mitigations
      for security vulnerability documented as CVE-2023-35191. This issue is not
      unique to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 04.04.04.603-2.1
changelog:
  -     *Important Notes:**
      
      Ver. 04.04.04.603(B) contains updates to the firmware packaging and is
      functionally equivalent to ver. 04.04.04.603. It is not necessary to upgrade
      with Revision B if a previous component revision was used to upgrade the
      firmware to version 04.04.04.603.
      
      This version of the Server Platform Services (SPS) Firmware contains updates
      aligned with the Intel Product Update (IPU) version IPU.2024.1 guidance. This
      version of the SPS should be paired with System ROM 2.00 (02/22/2024) or
      later.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the Server Platform Services Firmware provides mitigations
      for security vulnerability documented as CVE-2023-35191. This issue is not
      unique to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.40_01-25-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the UEFI EDK2
      support that provides mitigations for a variety of security vulnerabilities.
      The following vulnerabilities have been addressed in this System ROM release:
      CVE-2018-3613 CVE-2017-5731, CVE-2017-5732, CVE-2017-5733, CVE-2017-5734,
      CVE-2017-5735, CVE-2018-3630, CVE-2018-12178, CVE-2018-12179, CVE-2018-12180,
      CVE-2018-12181, CVE-2018-12182 and CVE-2018-12183. These security
      vulnerabilities are not unique to HPE servers.
      
      Addressed an issue in which the system may not properly boot to the HPE 8GB
      Dual microSD Flash USB Drive when an SD card is installed on the internal SD
      slot when the system is configured for Legacy Boot Mode. This issue does not
      impact systems in UEFI Boot Mode.
      
      Addressed an issue where certain 3rd party USB drive keys may not function
      properly after a system reset when the system is configured in UEFI Boot Mode.
      
      Addressed an issue where the HPE CN1000E-T adapter may not boot properly in
      Legacy Boot Mode. This issue does not impact systems configured in UEFI Boot
      Mode.
      
      Addressed an issue where firmware updates staged through the HPE RESTful API
      may fail to properly execute on a subsequent boot and be marked with an
      exception in the iLO firmware installation queue.
      
      Addressed an issue where iLO virtual media may not boot properly after setting
      the Boot on Next Reset option in the iLO Remote Console and Media - Virtual
      Media settings.
      
      Addressed an issue where the AHS Download application from the System
      Utilities Embedded Applications or UEFI Shell may fail to work properly with
      iLO firmware 1.30 or later.
      
      Addressed an issue where the UEFI Shell sysconfig command may fail to set an
      option or become unresponsive.
      
      Addressed an issue where an optional SATA DVD drive may not unlock and allow
      media to be ejected after an operating system reboot.
      
      Addressed an issue where the system may become unresponsive during boot and
      experience a Red Screen (RSOD) when booting in Legacy Boot mode with a SATA
      M.2 drive installed. This issue does not impact systems in UEFI Boot Mode.
      
      Addressed an issue where a USB KVM, such as the HP AF611A KVM, may not
      function properly after a system reboot.
      
      Addressed an issue where Core Performance Boost may remain enabled even when
      disabled in BIOS/Platform Configuration (RBSU).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.44_06-24-2019
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM provides mitigation for a new AMD Secure
      Encrypted Virtualization vulnerability. This includes support for mitigating
      the following vulnerability: CVE-2019-9836.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where a Secure Encryption Virtualization encryption key
      could be compromised by manipulating the encryption technology's behavior when
      using AMD's secure encryption feature on a virtual machine running the Linux
      operating system. The following vulnerability has been addressed in this
      System ROM release: CVE-2019-9836.These security vulnerabilities are not
      unique to HPE servers.
      
      **Known Issues:**


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.46_07-10-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue with rare occurrences of unpredictable system behavior.
      This issue is NOT unique to HPE servers and would impact any systems using AMD
      EPYC 7001 Series processors that do not contain latest AMD microcode. Note:
      this does not address any security vulnerability mitigations.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.00_07-20-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added support for AMD EPYC 7002 processors.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.20_09-17-2019
changelog:
  -     Added setup option to disable Periodic Directory Rinse. Disabling this
      processor feature can improve performance in certain workloads. This option is
      only applicable when using AMD EPYC 7002 Series processors and does not apply
      to AMD EPYC 7000 Series processors.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.20_09-17-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue with rare occurrences of unpredictable system behavior.
      This issue is NOT unique to HPE servers and may impact any systems using AMD
      EPYC 7002 Series processors that do not contain a BIOS update for this issue.
      This issue does not affect AMD EPYC 7000 Series processors.
      
      Addressed an issue where systems may fail to boot if configured with AMD EPYC
      7002 Series processors and 2400 MT/s memory.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.30_10-18-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where PCIe root ports were incorrectly indicating they
      supported PCIe Gen4. In rare cases this could cause a PCIe device to attempt
      to train at Gen4. Only PCIe Gen1, Gen2, and Gen3 are supported on the ProLiant
      DL385 Gen10. Without this resolution devices may run slower than their optimal
      frequency.
      
      Addressed an issue where core counts for some processors such as AMD EPYC 7282
      would be incorrectly displayed in iLO and some pre-boot pages. This was not a
      functional issue and only affected the count of enabled cores as displayed to
      the user. The cores would have been active even without this resolution.
      
      Addressed an issue where the system may fail to boot if the RBSU Bifurcate
      option was set to anything other than Auto when using AMD EPYC 7002 series
      processors.
      
      Addressed an issue where the system may immediately power on after issuing
      shutdown while running VMware ESXi.
      
      Addressed an issue where some PCIe cards may not be available due to PCIe
      training issues.
      
      Addressed an issue where some rare system configurations using LRDIMMs would
      incorrectly flag a memory training error during boot. The iml would be logged
      every boot on the system.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.32_01-13-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Enhanced the system performance when running some benchmarks and workloads.
      
      Added a new BIOS/Platform Configuration (RBSU) for Setup Browser Selection to
      Boot Options. This option selects which setup browser to use: GUI or Text.
      Auto mode uses text when the user enters RBSU via serial console, and uses GUI
      via IRC or physical terminal.
      
      Added a new BIOS/Platform Configuration (RBSU) for DRAM Controller Power Down
      to Memory Options. This option can be used to opportunistically power down the
      memory controller.
      
      Added a new BIOS/Platform Configuration (RBSU) for AMD Fmax Boost Limit to
      Power and Performance Options. This option can be used to configure the
      maximum boost frequency when AMD Fmax Boost Limit Control is set to manual.
      
      Added a new BIOS/Platform Configuration (RBSU) for XGMI Max Link Width to
      Power and Performance Options. This option can be used to manually configure
      the XGMI link width when XGMI Force Link Width is set to manual.
      
      Added a new BIOS/Platform Configuration (RBSU) for Application Power Boost to
      Power and Performance Options. This option can be used to configure
      Application Power Boost.
      
      Updated the system thermal logic to support the latest GPU adapters.
      
      Updated the language translations (non-English modes) for System Utilities.
      
      Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.34_02-18-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue introduced in the v2.32 (01/13/2020) revision of the System
      ROM in which the Integrated Lights-Out (iLO) System Information - Memory
      Information page reports memory information as unavailable. This issue did not
      exist in System ROM revisions prior to v2.32.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.36_03-09-2020
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains the latest support for the HPE Smart
      Array s100i UEFI Driver. This system ROM is critical for customers who have
      enabled the HPE Smart Array s100i support.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the HPE Smart Array s100i Software RAID may
      experience potential data inconsistency during initial configuration or
      operation of a RAID volume configured in RAID 5/50/50/60 Fault Tolerant Modes.
      This issue does not impact systems configured in other RAID configurations
      such as RAID 0 or 1. This issue does not impact systems that have not enabled
      Smart Array s100i support.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.38_04-15-2020
changelog:
  -     Added a new BIOS/Platform Configuration (RBSU) for Minimum SEV ASID to
      Virtualization Options. This option is specific to systems configured with AMD
      EPYC 7002 Series Processors. This option can be used to configure the minimum
      address space identifier (ASID) that can be used for AMD Secure Encrypted
      Virtualization (SEV) enabled guests. ASID below this number are only available
      to SEV enable guest that also enable SEV-ES (Encrypted State).
      
      Added a new BIOS/Platform Configuration (RBSU) for Maximum SEV ASID to
      Virtualization Options. This option is specific to systems configured with AMD
      EPYC 7002 Series Processors. This option selects the number of AMD Secure
      Encrypted Virtualization (SEV) address space identifiers (ASID) that can be
      used for SEV enabled guests. This option affects the amount of system memory
      supported by the server.
      
      Enhanced the BIOS/Platform Configuration (RBSU) for Preferred IO Bus in the
      Power and Performance Options. This option is specific to systems configured
      with AMD EPYC 7002 Series Processors. This option can provide improved PCIe
      performance for all endpoints on one AMD NBIO (NorthBridge I/O).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.38_04-15-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed a performance issue where systems configured with AMD EPYC 7002
      Series Processors may experience lower than expected core frequencies for
      Processor 1.
      
      Addressed a rare issue where the system may fail to boot after a warm reset.
      
      Addressed a rare issue where the system may delay or soft lock during a
      "shutdown -r" reboot under Linux. When this occurs, the server may take ten
      additional minutes to complete the reboot and log a Caution level Integrated
      Management Log (IML) indicating "ASR Detected by System ROM."
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.40_05-11-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Resolved a memory initialization issue on systems configured with LRDIMMs, AMD
      EPYC 7002 processors, and the v2.38 (04/15/2020) revision of the System ROM
      that could lead to an increased chance for Corrected Memory Threshold Errors
      or Uncorrected Memory Errors.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.42_07-17-2020
changelog:
  -     *Important Notes:**
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Improved system stability with LRDIMM's by staggering memory refresh cycles to
      reduce power spikes across system memory.
      
      Reverted a system firmware debug feature which has proven to cause a slight
      degredation in system performance in internal testing.
      
      Resolved an issue with NVMe hot add or removal which may result in an
      unrecoverable I/O error reported in the Integrated Management Log (IML).
      
      Addressed issue where the UEFI Shell command GetPciRom may not display
      information for PCI expansion device drivers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.50_07-08-2021
changelog:
  -     Added a new BIOS/Platform Configuration (RBSU) option to Server Security
      called UEFI Variable Access Firmware Control. This option, when enabled, can
      be used to block UEFI Variable writes, such as to the UEFI Boot Order, from
      the Operating System or a third-party utility. HPE recommends leaving this
      capability disabled unless the user specifically wants to prevent the
      operating system's normal operation of writing to UEFI Variables, which
      typically occur during OS install.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.50_07-08-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Tianocore
      Edk2 Code which provides mitigations for BIOS advisories and security
      vulnerabilities documented as CVE-2019-14584, CVE-2021-28211 and
      CVE-2021-28210. These security vulnerabilities are documented in Tianocore
      Edk2 CVE details site. These issues are not unique to HPE servers.
      
      Addressed an issue with Pensando Distributed Services Platform DSC-25
      Enterprise 10/25Gb 2-port SFP28 Card missing in system information page.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.52_10-28-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of AMD security
      patch (AMD-SN-1021) which provides mitigations for BIOS advisories and
      security vulnerabilities documented as CVE-2020-12954, CVE-2020-12961,
      CVE-2021-26331, CVE-2021-26335, CVE-2021-26315, CVE-2020-12946,
      CVE-2020-12951. CVE-2021-26336, CVE-2021-26337, CVE-2021-26338,
      CVE-2021-26320, CVE-2020-12944, CVE-2020-12988, CVE-2021-26329,
      CVE-2021-26330, CVE-2021-26321, CVE-2021-26323, CVE-2021-26325,
      CVE-2021-26326, CVE-2021-26322, CVE-2021-26327, and CVE-2021-26312. These
      issues are not unique to HPE servers.
      
      Addressed an issue where in the OS does not display the true CPU Max Core
      Frequency.
      
      Addressed an issue with AMD EPYC 1st Generation processors that can result in
      Corrected Memory Error Threshold Events being logged to the Integrated
      Management Log (IML) in cases when they should not be logged. The system
      monitors corrected errors and notifies the user when action is required due to
      an increased risk of an Uncorrected Memory Error. Corrected Memory errors are
      a normal and expected occurrence and do not always indicate a higher risk of
      an Uncorrected Memory Error. Previous revisions of the System ROM were
      incorrectly logging Corrected Memory Error Threshold Events to the IML when
      action should not have been required, resulting in unnecessary scheduled
      downtime to replace DIMMs. It is recommended that the System ROM be updated to
      this version before replacing DIMMs due to Corrected Memory Error Threshold
      Events.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.54_12-03-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue that can result in Corrected Memory Error Threshold Events
      being logged to the Integrated Management Log (IML) incorrectly. The system
      monitors corrected memory errors and notifies the user via a Corrected Memory
      Error Threshold Event when action is recommended due to an increased risk of
      an uncorrected memory error. Previous versions of the System ROM may log a
      Corrected Memory Error Threshold Event in cases where the system is not at an
      increased risk of an uncorrected memory error. It is strongly recommended that
      the System ROM be updated to this version or later before replacing DIMMs due
      to Corrected Memory Error Threshold Events.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.56_02-10-2022
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where RAID volumes will be lost when using the "Restore
      Default Manufacturing Settings" feature.
      
      Addressed an issue where if the Administrator Password and Power-On Password
      are set, after clearing the Power-On Password, Administrator Password is also
      cleared.
      
      Addressed an issue where a system with Microsoft BitLocker enabled may
      incorrectly and intermittently prompt the user to unlock drives after a
      graceful OS reboot.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.58_06-16-2022
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of openSSL which
      provides mitigations for security vulnerabilities documented as CVE-2022-0778
      and CVE-2022-1292. These issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of LibPng library
      which provides mitigations for security vulnerability documented as CVE-
      CVE-2019-7317. This issue is not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of zlib library
      which provides mitigations for security vulnerability documented as
      CVE-2018-25032. This issue is not unique to HPE servers.
      
      Addressed an issue where the system ROM does not display Storage controller
      product names when the ROM Based Setup Utility (RBSU) language setting is non-
      English.
      
      Addressed an issue where systems using AMD 1st Generation EPYC processors
      would incorrectly count correctable DIMM errors from different channels into
      one channel thus possibly incorrectly causing Correctable Memory Error
      Threshold Exceeded errors to occur.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.60_08-11-2022
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes an updated revision of the AMD
      reference code 100E for AMD 2nd Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes an updated revision of the AMD
      reference code for AMD 2nd Generation EPYC processors.
      
      This revision of the System ROM includes the latest revision of openSSL which
      provides mitigations for security vulnerabilities documented as
      CVE-2022-02068. These issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of FreeType
      library which provides mitigations for security vulnerabilities documented as
      CVE-2022-27404, CVE-2022-27405, and CVE-2022-27406. This issue is not unique
      to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.64_11-17-2022
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes an updated revision of the AMD
      reference code 100E for AMD 2nd Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes an updated revision of the AMD
      reference code for AMD 2nd Generation EPYC processors.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.68_02-02-2023
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM updates zlib to 1.2.13 which provides
      mitigation for BIOS security vulnerability documented as CVE-2022-37434.
      
      (https://nvd.nist.gov/vuln/detail/CVE-2022-37434). This security vulnerability
      is documented in the CVE report site. This issue is not unique to HPE servers.
      
      Addressed an issue where some Chinese translation is missing from RBSU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.72_04-20-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.E for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code NaplesPI 1.0.0.J for AMD 1st Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where an abnormal MR controller name would display when
      setting the system language to Japanese from RBSU, and then rebooting the
      system.
      
      Addressed an issue where the TPM status between RBSU and iLO web pages was not
      synchronized.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.80_07-31-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.F for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code NaplesPI 1.0.0.K for AMD 1st Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision provides AMD's mitigation for security vulnerabilities for
      CVE-2022-23829 for AMD 1st Generation EPYC processors, and CVE-2022-23829 and
      CVE-2023-20593 for AMD 2nd Generation EPYC processor. This security
      vulnerability is documented in the CVE report site. This issue is not unique
      to HPE servers.
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.0.2zh update which provides mitigation for security vulnerabilities
      documented as CVE-2023-2650.
      
      Addressed an issue where iLO embedded device health info would display blank
      content under RBSU when the Language was set to Japanese or Chinese.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.84_09-07-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.G for
      AMD 2nd Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes an updated revision of the AMD
      reference code for AMD 2nd Generation EPYC processors.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.90_10-19-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.G for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code NaplesPI 1.0.0.K for AMD 1st Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where "Restore Manufacturing Defaults" and "Restore
      Defaults" from iLO web did not restore the Secure Boot Status.
      
      Replaced "AC power" with "external power" in the help text of "Automatic
      power-on" option. This is due to ProLiant servers also provide the DC power
      supply option.
      
      Addressed an issue where system might hang while accessing IML logs from RBSU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_01-26-2024
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with vulnerability
      fixes in EDK2 NetworkPkg IP stack implementation that is described in the
      address <https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-
      gj7h>.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the mitigation for NetworkPkg PXE IP
      stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230,
      CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234,
      CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_01-26-2024-2.1
changelog:
  -     *Important Notes:**
      
      Ver. 3.00_01-26-2024(B) contains updates to the firmware packaging and is
      functionally equivalent to ver. 3.00_01-26-2024. It is not necessary to
      upgrade with Revision B if a previous component revision was used to upgrade
      the firmware to version 3.00_01-26-2024.
      
      This version of the System ROM contains updates aligned with vulnerability
      fixes in EDK2 NetworkPkg IP stack implementation that is described in the
      address <https://github.com/tianocore/edk2/security/advisories/GHSA-hc6x-cw6p-
      gj7h>.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the mitigation for NetworkPkg PXE IP
      stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230,
      CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234,
      CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_05-16-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31315 for AMD 1st and 2nd Generation EPYC processors.
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-45853, CVE-2023-45229, CVE-2022-36763,
      CVE-2022-36764, CVE-2021-38578, CVE-2023-5678 and CVE-2024-0727. The security
      vulnerabilities are documented in the CVE report site. They are not unique to
      HPE servers. This revision of the System ROM includes AMD reference code
      NaplesPI 1.0.0.L for AMD 1st Generation EPYC processors. This revision of the
      System ROM includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation
      EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the operating system could not detect iSCSI drive
      through IPv6 installation when iSCSI IpAddressType was set to auto.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.20_07-04-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.J for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code NaplesPI 1.0.0.M for AMD 1st Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the boot order was cleared unexpectedly after
      configuring System Configuration (RBSU) options, navigating to Boot Options >
      UEFI Boot Settings > UEFI Boot Order, and then pressing F12 to Save and Exit.
      
      Addressed an issue where system may encounter a RSOD while updating SAS drive
      FW via HPE Service Packs, including, but not limited to, VMware ESXi Online
      HDD FW Component Bundle 16.00, HPE Synergy Service Pack (SSP) 2024.01.02
      (January 2024) and the future HPE Synergy Service Pack (SSP) 2024.07.01 (July
      2024).
      
      Addressed an issue where the Logical Drive name was cleared in RBSU after
      leaving configuration page of MR controller.
      
      Addressed an issue where duplicated "Physical Drive missing" may appear in
      POST and IML.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.30_10-04-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.K for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code NaplesPI 1.0.0.N for AMD 1st Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Fixed an issue where the system may reboot infinitely when a faulty PCIE card
      was installed.
      
      Fixed an issue where the firmware versions of iLO and Backplane showed
      incorrectly.
      
      Addressed an issue where NS204i may not be identified as an NVMe device.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.40_01-16-2025
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.L for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code NaplesPI 1.0.0.P for AMD 1st Generation EPYC processors.
      
      Details about reported security vulnerabilities and their mitigation can be
      found at the following link [Security Bulletin Library | HPE Support](https://
      support.hpe.com/connect/s/securitybulletinlibrary?language=en_US).
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added new Microsoft Option Rom UEFI CA 2023 secure boot key.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.42_02-21-2025
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.F
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.L for AMD 2nd Generation EPYC
      processors.
      
      Details about reported security vulnerabilities and their mitigation can be
      found at the following link [Security Bulletin Library | HPE Support](https://
      support.hpe.com/connect/s/securitybulletinlibrary?language=en_US).
      
      **Firmware Dependencies:**
      
      **Problems Fixed:**
      
      **Known Issues:**


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.42_04-16-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where Trusted Platform Module (TPM) Firmware update does
      not complete successfully.
      
      Addressed an issue where systems configured for SATA RAID may incorrectly
      report that fan 1 and/or fan 7 are missing. These fans are not required for
      this configuration.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.38_04-15-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed a performance issue where systems configured with AMD EPYC 7002
      Series Processors may experience lower than expected core frequencies.
      
      Addressed a rare issue where the system may fail to boot after a warm reset.
      
      Addressed a rare issue where the system may delay or soft lock during a
      "shutdown -r" reboot under Linux. When this occurs, the server may take ten
      additional minutes to complete the reboot and log a Caution level Integrated
      Management Log (IML) indicating "ASR Detected by System ROM."
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.42_07-17-2020
changelog:
  -     See the release document A41_2.42_07_17_2020 in Download Product Binaries page
      from Product Summary of the firmware product.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.90_10-19-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.G for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code NaplesPI 1.0.0.K for AMD 1st Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where Restore Manufacturing Defaults and Restore Defaults
      from iLO web did not restore the Secure Boot Status.
      
      Replaced "AC power" with "external power" in the help text of "Automatic
      power-on" option. This is due to ProLiant servers also provide the DC power
      supply option.
      
      Addressed an issue where system might hang while accessing IML logs from RBSU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_05-16-2024-2.1
changelog:
  -     See the release document A41_3.20_07_04_2024 in Download Product Binaries page
      from Product Summary of the firmware product.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.18_01-22-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system would never enter Data Fabric C-States.
      Data Fabric C-States can help reduce overall power consumption of a system
      that is running an idle or low stress workload.
      
      Addressed an issue where the system would report the HPE Memory Type as
      Unknown. This was only an issue with reporting and did not affect system
      behavior.
      
      Addressed an issue where RestCli or a Redfish "Get" command could return some
      invalid configuration settings.
      
      Addressed an issue where systems configured with an UBM backplane may very
      rarely become unresponsive during post with a red error screen (RSOD)
      indicating a general protection fault in the PlatformStorageSupportDxe Image.
      
      Addressed an issue where systems configured with an UBM backplane will not
      honor a customer configured One-Time boot setting.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.18_01-22-2020
changelog:
  -     Enhanced the system power consumption when system is in an idle state. When
      running with iLO fw version 2.12 or later, the system will enter a low power
      state when the Data Fabric C-State Enable option is configured to Auto and iLO
      Integrated Remote Console is not open.
      
      Enhanced the system performance when running some benchmarks and workloads.
      
      Added a new BIOS/Platform Configuration (RBSU) for DRAM Controller Power Down
      to Memory Options. This option can be used to opportunistically power down the
      memory controller.
      
      Added a new BIOS/Platform Configuration (RBSU) for AMD Fmax Boost Limit to
      Power and Performance Options. This option can be used to configure the
      maximum boost frequency when AMD Fmax Boost Limit Control is set to manual.
      
      Added a new BIOS/Platform Configuration (RBSU) for XGMI Max Link Width to
      Power and Performance Options. This option can be used to manually configure
      the XGMI link width when XGMI Force Link Width is set to manual.
      
      Updated the system thermal logic to support the latest GPU adapters.
      
      Updated the language translations (non-English modes) for System Utilities.
      
      Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20_02-28-2020
changelog:
  -     Added support for dynamic PCIe bus reallocation. In very rare PCIe/NVMe
      configurations the system may require non-symmetric bus allocation to provide
      more bus numbers to specific PCIe rootbridges or PCIe slots. The system ROM
      will detect and automatically adjust to attempt to resolve the PCI bus
      numbering.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20_02-28-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue introduced in the v1.18 (01/22/2020) revision of the System
      ROM in which AMD EPYC 7742, 7662, 7642, or 7542 processors would run at a
      lower maximum power which could result in lower performance in certain
      workloads.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.24_04-29-2020
changelog:
  -     Added support for P25526-B21 HPE NVMe Single Port Adapter and P25527-B21 HPE
      NVMe Dual Port Adapter.
      
      Added support for 826689-B21 HPE DL38X NVMe 8 SSD Express Bay.
      
      Added a new BIOS/Platform Configuration (RBSU) for Minimum SEV ASID to
      Virtualization Options. This option can be used to configure the minimum
      address space identifier (ASID) that can be used for AMD Secure Encrypted
      Virtualization (SEV) enabled guests. ASID below this number are only available
      to SEV enable guest that also enable SEV-ES (Encrypted State).
      
      Added a new BIOS/Platform Configuration (RBSU) for Maximum SEV ASID to
      Virtualization Options. This option selects the number of AMD Secure Encrypted
      Virtualization (SEV) address space identifiers (ASID) that can be used for SEV
      enabled guests. This option affects the amount of system memory supported by
      the server.
      
      Enhanced the BIOS/Platform Configuration (RBSU) for Preferred IO Bus in the
      Power and Performance Options. This option can provide improved PCIe
      performance for all endpoints on one AMD NBIO (NorthBridge I/O).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.24_04-29-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed a performance issue where the system may experience lower than
      expected core frequencies for Processor 1.
      
      Addressed a rare issue where the system may fail to boot after a warm reset.
      
      Addressed a rare issue where the system may delay or soft lock during a
      "shutdown -r" reboot under Linux. When this occurs, the server may take ten
      additional minutes to complete the reboot and log a Caution level Integrated
      Management Log (IML) indicating "ASR Detected by System ROM."
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.26_05-11-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Resolved a memory initialization issue on systems configured with LRDIMMs and
      the v1.24 (04/29/2020) revision of the System ROM that could lead to an
      increased chance for Corrected Memory Threshold Errors or Uncorrected Memory
      Errors.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.30_07-18-2020
changelog:
  -     *Important Notes:**
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where uncorrectable memory errors are seen when running
      memory intensive workloads with LRDIMMs.
      
      Addressed an issue that could cause a slight degradation of performance.
      
      Resolved an issue with NVMe hot add or removal which may result in an
      unrecoverable I/O error reported in the Integrated Management Log (IML).
      
      Addressed an issue where the UEFI Shell command GetPciRom may not display
      information for PCI expansion device drivers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.52_10-29-2021
changelog:
  -     Added a new BIOS/Platform Configuration (RBSU) option for Dynamic PCIe Rate
      Change. This option should be enabled for certain PCIe devices that change
      their advertised speed during training. The option is disabled by default, and
      should only be enabled if the system is configured with a device which is
      training at a less than advertised speed.
      
      Added a new BIOS/Platform Configuration (RBSU) option for MCTP Broadcast
      Support. This option is used to control the PCIe Management Component
      Transport Protocol (MCTP) support for a given slot. This option can be used to
      disable MCTP support to a given PCIe endpoint that may not properly support
      this protocol. It is recommended that this option remain enabled for full
      system functionality.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.52_10-29-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of AMD security
      patch (AMD-SN-1021) which provides mitigations for BIOS advisories and
      security vulnerabilities documented as CVE-2020-12954, CVE-2020-12961,
      CVE-2021-26331, CVE-2021-26335, CVE-2021-26315, CVE-2020-12946,
      CVE-2020-12951. CVE-2021-26336, CVE-2021-26337, CVE-2021-26338,
      CVE-2021-26320, CVE-2020-12944, CVE-2020-12988, CVE-2021-26329,
      CVE-2021-26330, CVE-2021-26321, CVE-2021-26323, CVE-2021-26325,
      CVE-2021-26326, CVE-2021-26322, CVE-2021-26327, and CVE-2021-26312. These
      issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of AMD security
      patch (AMD-SN-1007) which provides mitigation for AMD vulnerability with PSP
      Code Execution documented by AMD. This issue is not unique to HPE servers.
      
      Addressed an issue where in the OS does not display the true CPU Max Core
      Frequency.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.58_06-09-2022
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the AMD
      reference code for AMD 3rd Generation EPYC processors which addresses and
      issue with Windows 2022 AQ Secure Core certification.
      
      This revision of the System ROM includes the latest revision of openSSL which
      provides mitigation for BIOS security vulnerability documented as
      CVE-2022-0778. This security vulnerability is documented in the CVE report
      site https://nvd.nist.gov/vuln/detail/CVE-2022-0778. This issue is not unique
      to HPE servers.
      
      This revision of the System ROM includes the latest revision of FreeType
      library which provides mitigation for BIOS security vulnerability documented
      as CVE-2022-27405. This security vulnerability is documented in the CVE report
      site https://nvd.nist.gov/vuln/detail/CVE-2022-27405. This issue is not unique
      to HPE servers.
      
      This revision of the System ROM includes the latest revision of zlib library
      which provides mitigations for security vulnerability documented as
      CVE-2018-25032. This issue is not unique to HPE servers.
      
      Addressed an issue where the system fails to boot OpenShift Container Platform
      in UEFI boot and optimized boot modes.
      
      Addressed an issue where the IPMI Watchdog Timer (WDT) would continuously be
      re-enabled on reboots even after being disabled which causes the system to
      continuously reboot after the timeout is triggered.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.60_08-11-2022
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes an updated revision of the AMD
      reference code for AMD 2nd Generation EPYC processors.
      
      This revision of the System ROM includes the latest revision of openSSL which
      provides mitigation for BIOS security vulnerability documented as
      CVE-2022-2068 (https://nvd.nist.gov/vuln/detail/CVE-2022-2068). This security
      vulnerability is documented in the CVE report site. This issue is not unique
      to HPE servers.
      
      Addressed an issue where the QR Code in ROM Based Setup Menu (RBSU) was not
      valid.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.64_11-17-2022
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes an updated revision of the AMD
      reference code for AMD 2nd Generation EPYC processors.
      
      Addressed an issue where the system would encounter an unexpected shutdown
      with "Internal processors error" in the IML while running the TPM scripts.
      
      Addressed an issue where the system boot-up would hang if the system has
      installed mutiple PCIe devices and set to "Dual Bifurcation" at the same time.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.68_02-06-2023
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM updates zlib to 1.2.13 which provides
      mitigation for BIOS security vulnerability documented as CVE-2022-37434.
      
      (https://nvd.nist.gov/vuln/detail/CVE-2022-37434). This security vulnerability
      is documented in the CVE report site.
      
      This revision of the System ROM includes the v1.1.1s openSSL which provides
      mitigation for BIOS security vulnerability documented as CVE-2022-2097.
      
      (https://nvd.nist.gov/vuln/detail/CVE-2022-2097). This security vulnerability
      is documented in the CVE report site.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.68_02-06-2023
changelog:
  -     Add new System Configuration (RBSU) configuration options that allow
      controlling the processor's P0 (maximum) frequency. This includes the "Custom
      Pstate0" option with settings of "Auto" (default) and "Manual" and the
      "Pstate0 Frequency(MHz)" option that allows setting the P0 frequency. When
      the "Custom Pstate0" option is configured for "Manual", the value of the
      "Pstate0 Frequency(MHz)" is used for the processor's P0 frequency. When the
      "Custom Pstate0" option is configured for "Auto", the processor uses its
      normal, maximum P0 frequency and the "Pstate0 Frequency(MHz)" option is not
      configurable. In System Configuration (RBSU), these options are located under
      the BIOS/Processor Options. This setting has the following Redfish
      properties:
      
      /redfish/v1/systems/1/bios/settings/CustomPstate0
      
      /redfish/v1/systems/1/bios/settings/Pstate0Frequency


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.72_04-20-2023
changelog:
  -     The following options from RBSU will hide if using customized iPXE.
      
       iPXE Script Auto-Start
      
       iPXE Script Verification
      
       iPXE Auto-Start Script Location
      
       Network Location for iPXE Auto-Start Script


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.72_04-20-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.F for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code MilanPI 1.0.0.A for AMD 3rd Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the "Access Control Service" option under RBSU did
      not work.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.80_07-31-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.F for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code MilanPI 1.0.0.B for AMD 3rd Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision provides AMD's mitigation for security vulnerabilities for
      CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processors, and
      CVE-2022-23829 and CVE-2023-20569 for AMD 3rd Generation EPYC processor. This
      security vulnerability is documented in the CVE report site. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.1.1u update which provides mitigation for security vulnerabilities
      documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.
      
      Addressed an issue where Secure Boot would not be enabled when loading
      manufacturing default from iLO web.
      
      Addressed an issue where RSOD would occur when entering "System Information"
      from RBSU under legacy mode.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.80_07-31-2023
changelog:
  -     Added new System Configuration (RBSU) configuration options that allow
      enabling L1 IO Drop Chain Enable to drop chain write support to avoid
      unexpected timeouts due to under certain conditions, some high-bandwidth PCIe
      devices could fail to complete the transaction.
      
      In System Configuration (RBSU), the option is located under L1 IO Drop Chain
      Enable in Service Option when the system is with AMD 3rd Generation EPYC
      processors.
      
      This setting has the following Redfish properties.
      
      /redfish/v1/systems/1/bios/oem/hpe/service/settings/DropChainedWrite


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.80_07-31-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.F for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code MilanPI 1.0.0.B for AMD 3rd Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision provides AMD's mitigation for security vulnerabilities for
      CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processors, and
      CVE-2022-23829 and CVE-2023-20569 for AMD 3rd Generation EPYC processor. This
      security vulnerability is documented in the CVE report site. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.1.1u update which provides mitigation for security vulnerabilities
      documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.
      
      Addressed an issue where Secure Boot would not be enabled when loading
      manufacturing default from iLO web.
      
      Addressed an issue where RSOD would occur when entering System Information
      from RBSU under legacy mode.
      
      Addressed an issue where Uncorrectable Machine Check Exception (UMCE) would
      occur due to unexpected completion timeout to cause system not responding.
      Added new System Configuration (RBSU) configuration options that allows
      enabling L1 IO Drop Chain Enable to drop chain write support to avoid
      unexpected timeouts due to under certain conditions, some high-bandwidth PCIe
      devices could fail to complete the transaction.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.84_08-17-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.G for
      AMD 2nd Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.1.1v update which provides mitigation for security vulnerabilities
      documented as CVE-2023-3817.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.90_10-27-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.B
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.G for AMD 2nd Generation EPYC
      processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision provides AMD's mitigation for security vulnerabilities for
      CVE-2023-20592 for both AMD 2nd and 3rd Generation EPYC processors. This
      security vulnerability is documented in the CVE report site. This issue is not
      unique to HPE servers.
      
      Replaced "AC power" with "external power" in the help text of "Automatic
      power-on" option. This is due to ProLiant servers also provide the DC power
      supply option.
      
      Addressed an issue where system might hang while accessing IML logs from RBSU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_01-26-2024
changelog:
  -     Added new Microsoft secure boot keys, KEK2023, Microsoft UEFI CA 2023 and
      Windows UEFI CA 2023, since the original keys will expire in 2026.
      
      Added the System Configuration (RBSU) option "Boot Options/UEFI Boot
      Settings/Filter Non-bootable Drives" and set to "Auto" by default. This
      setting has the following Redfish property:
      
      /redfish/v1/systems/1/bios/settings/FilterNonbootableDrive


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_01-26-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.C
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation EPYC
      processors. This revision of the System ROM includes the mitigation for
      security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd
      Generation EPYC processors. This security vulnerability is documented in the
      CVE report site. This issue is not unique to HPE servers. This revision of the
      System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver
      vulnerability documented as CVE-2021-38575. This revision of the System ROM
      includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented
      as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232,
      CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and
      CVE-2023-45237.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC
      processors. This security vulnerability is documented in the CVE report site.
      This issue is not unique to HPE servers.
      
      This revision of the System ROM includes the mitigation for NetworkPkg iSCSI
      Dxe driver vulnerability documented as CVE-2021-38575.
      
      This revision of the System ROM includes the mitigation for NetworkPkg PXE IP
      stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230,
      CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234,
      CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_01-26-2024-2.1
changelog:
  -     *Important Notes:**
      
      Ver. 3.00_01-26-2024(B) contains updates to the firmware packaging and is
      functionally equivalent to ver. 3.00_01-26-2024. It is not necessary to
      upgrade with Revision B if a previous component revision was used to upgrade
      the firmware to version 3.00_01-26-2024.
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.C
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation EPYC
      processors. This revision of the System ROM includes the mitigation for
      security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd
      Generation EPYC processors. This security vulnerability is documented in the
      CVE report site. This issue is not unique to HPE servers. This revision of the
      System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver
      vulnerability documented as CVE-2021-38575. This revision of the System ROM
      includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented
      as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232,
      CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and
      CVE-2023-45237.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC
      processors. This security vulnerability is documented in the CVE report site.
      This issue is not unique to HPE servers.
      
      This revision of the System ROM includes the mitigation for NetworkPkg iSCSI
      Dxe driver vulnerability documented as CVE-2021-38575.
      
      This revision of the System ROM includes the mitigation for NetworkPkg PXE IP
      stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230,
      CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234,
      CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_05-16-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31315 for AMD 2nd and 3rd Generation EPYC processors.
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-45853, CVE-2023-45229, CVE-2022-36763,
      CVE-2022-36764, CVE-2023-5678, CVE-2021-38575 and CVE-2021-38578. The security
      vulnerabilities are documented in the CVE report site. They are not unique to
      HPE servers. This revision of the System ROM includes AMD reference code
      MilanPI 1.0.0.D for AMD 3rd Generation EPYC processors. This revision of the
      System ROM includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation
      EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the operating system could not detect iSCSI drive
      through IPv6 installation when iSCSI IpAddressType was set to auto.
      
      Addressed an issue where system would not complete POST after BIOS firmware
      updated to ver 3.00 with E810-XXVDA4''s installed.
      
      Addressed an issue where system would hang with ASSERT during POST after
      adding DIMMs.
      
      Addressed an issue where the boot order was cleared unexpectedly after
      configuring System Configuration (RBSU) options, navigating to Boot Options >
      UEFI Boot Settings > UEFI Boot Order, and then pressing F12 to Save and Exit.
      
      Removed the value of "Not Specified" in System Configuration (RBSU) option
      "Server Security/Trusted Platform Module Options/Current TPM 2.0 Active PCRs"
      and set the default value as "SHA1 and SHA256".
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_05-16-2024-2.1
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31315 for AMD 2nd and 3rd Generation EPYC processors.
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-45853, CVE-2023-45229, CVE-2022-36763,
      CVE-2022-36764, CVE-2023-5678, CVE-2021-38575 and CVE-2021-38578. The security
      vulnerabilities are documented in the CVE report site. They are not unique to
      HPE servers. This revision of the System ROM includes AMD reference code
      MilanPI 1.0.0.C for AMD 3rd Generation EPYC processors. This revision of the
      System ROM includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation
      EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the operating system could not detect iSCSI drive
      through IPv6 installation when iSCSI IpAddressType was set to auto.
      
      Addressed an issue where system would not complete POST after BIOS firmware
      updated to ver 3.00 with E810-XXVDA4''s installed.
      
      Addressed an issue where system would hang with ASSERT during POST after
      adding DIMMs.
      
      Addressed an issue where the boot order was cleared unexpectedly after
      configuring System Configuration (RBSU) options, navigating to Boot Options >
      UEFI Boot Settings > UEFI Boot Order, and then pressing F12 to Save and Exit.
      
      Removed the value of "Not Specified" in System Configuration (RBSU) option
      "Server Security/Trusted Platform Module Options/Current TPM 2.0 Active PCRs"
      and set the default value as "SHA1 and SHA256".
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.20_08-07-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.D
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.J for AMD 2nd Generation EPYC
      processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where NS204i may not be identified as an NVMe device.
      
      Addressed an issue where the Logical Drive name was cleared in RBSU after
      leaving configuration page of MR controller.
      
      Addressed an issue where Redfish BIOS actions, ResetBIOS and ChangePassword
      may not work.
      
      Addressed an issue that Battery Failure IML message log may be incorrectly
      logged for MR Controller with Smart Storage Battery.
      
      Addressed an issue where system failed to boot with selected NVMe HDD by
      setting One-Time Boot Option in ILO Web.
      
      Addressed an issue where system may encounter a RSOD while updating SAS drive
      FW via HPE Service Packs, including, but not limited to, VMware ESXi Online
      HDD FW Component Bundle 16.00, HPE Synergy Service Pack (SSP) 2024.01.02
      (January 2024) and the future HPE Synergy Service Pack (SSP) 2024.07.01 (July
      2024).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.20_08-07-2024
changelog:
  -     Added the System Configuration (RBSU) option "Processor Options/AMD IC Config
      Disable IT Bypass" and set to "Disabled" by default. Enable this option if a
      UMCE with Bank 0x03 and Synd[0]=1 is logged in IML on EPYC 7003 processors.
      
      This setting has the following Redfish property:
      
      /redfish/v1/systems/1/bios/settings/AmdIcConfigDisableITBypass


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.20_08-07-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.D
      for AMD 3rd Generation EPYC processors.
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.J for
      AMD 2nd Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where NS204i may not be identified as an NVMe device.  
      Addressed an issue where the Logical Drive name was cleared in RBSU after
      leaving the configuration page of the MR controller.  
      Addressed an issue where Redfish BIOS actions, ResetBIOS and ChangePassword
      may not work.  
      Addressed an issue where Battery Failure IML message log may be incorrectly
      logged for the Smart Array controller with Smart Storage Battery.  
      Addressed an issue where system failed to boot with selected NVMe HDD by
      setting One-Time Boot Option in ILO Web.  
      Addressed an issue where system may encounter a RSOD while updating SAS drive
      FW via HPE Service Packs, including, but not limited to, VMware ESXi Online
      HDD FW Component Bundle 16.00, HPE Synergy Service Pack (SSP) 2024.01.02
      (January 2024) and the future HPE Synergy Service Pack (SSP) 2024.07.01 (July
      2024).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.30_09-05-2024
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where HDD numbering was incorrect for 4LFF backplane
      installed on Port 9A.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.40_10-04-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.E
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.K for AMD 2nd Generation EPYC
      processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Fixed an issue where the iLO firmware version may show incorrectly.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.50_12-06-2024
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where certain Server Configuration Lock settings cannot be
      modified by Redfish interface.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.60_01-16-2025
changelog:
  -     Added new Microsoft Option Rom UEFI CA 2023 secure boot key.
      
      Updated language translations.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.60_01-16-2025
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.F
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.L for AMD 2nd Generation EPYC
      processors.
      
      Details about reported security vulnerabilities and their mitigation can be
      found at the following link [Security Bulletin Library | HPE Support](https://
      support.hpe.com/connect/s/securitybulletinlibrary?language=en_US).
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system would use UUID for IPV6 DHCP when
      "RBSU\Network Options\Network Boot Options\IPv6 DHCP Unique Identifier\DUID-
      LLT" is selected.
      
      Addressed an issue where the system iLO remote console might hang when the
      System Utilities Language is set to Japanese.
      
      Addressed an issue where the system might bring up a warning message ("ERST:
      [Firmware Warn]: too many record IDs!") in the Linux environment during boot
      up.
      
      Addressed an issue where the system might log "RESTful API Error - Unable to
      communicate with iLO FW. BIOS config resources may not be up-to-date".
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.62_02-21-2025
changelog:
  -     Added pop-up message for all Intelligent Provisioning boot paths to warn users
      of the risk of data loss.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.62_02-21-2025
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.F
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.L for AMD 2nd Generation EPYC
      processors.
      
      Details about reported security vulnerabilities and their mitigation can be
      found at the following link [Security Bulletin Library | HPE Support](https://
      support.hpe.com/connect/s/securitybulletinlibrary?language=en_US).
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where system may encounter an SMI storm when PCIe error
      disconnect recover(EDR) failed.
      
      Addressed an issue where system may fail to update NVMe drive firmware.
      
      Addressed an issue where the system might not be able to update SR controller
      FW with BIOS legacy mode.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.64_03-11-2025
changelog:
  -     *Important Notes:**
      
      None
      
      Details about reported security vulnerabilities and their mitigation can be
      found at the following link [Security Bulletin Library | HPE Support](https://
      support.hpe.com/connect/s/securitybulletinlibrary?language=en_US).
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system might RSOD when performing firmware update
      via Firmware Management Protocol.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.16_01-10-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system would never enter Data Fabric C-States.
      Data Fabric C-States can help reduce overall power consumption of a system
      that is running an idle or low stress workload.
      
      Addressed an issue where the system would report the HPE Memory Type as
      Unknown.  This was only an issue with reporting and did not affect system
      behavior.
      
      Addressed an issue where RestCli or a Redfish "Get" command could return some
      invalid configuration settings.
      
      Addressed an issue where systems configured with an UBM backplane may very
      rarely become unresponsive during post with a red error screen (RSOD)
      indicating a general protection fault in the PlatformStorageSupportDxe Image.
      
      Addressed an issue where systems configured with an UBM backplane will not
      honor a customer configured One-Time boot setting.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.16_01-10-2020
changelog:
  -     Enhanced the system power consumption when system is in an idle state.  When
      running with iLO fw version 2.12 or later, the system will enter a low power
      state when the Data Fabric C-State Enable option is configured to Auto and iLO
      Integrated Remote Console is not open.
      
      Enhanced the system performance when running some benchmarks and workloads.
      
      Added a new BIOS/Platform Configuration (RBSU) for DRAM Controller Power Down
      to Memory Options. This option can be used to opportunistically power down the
      memory controller.
      
      Added a new BIOS/Platform Configuration (RBSU) for AMD Fmax Boost Limit to
      Power and Performance Options. This option can be used to configure the
      maximum boost frequency when AMD Fmax Boost Limit Control is set to manual.
      
      Added a new BIOS/Platform Configuration (RBSU) for XGMI Max Link Width to
      Power and Performance Options. This option can be used to manually configure
      the XGMI link width when XGMI Force Link Width is set to manual.
      
      Updated the system thermal logic to support the latest GPU adapters.
      
      Updated the language translations (non-English modes) for System Utilities.
      
      Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20_02-28-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue introduced in the v1.16 (01/10/2020) revision of the System
      ROM in which AMD EPYC 7742, 7662, 7642, or 7542 processors would run at a
      lower maximum power which could result in lower performance in certain
      workloads.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.24_04-09-2020
changelog:
  -     Added a new BIOS/Platform Configuration (RBSU) for Minimum SEV ASID to
      Virtualization Options. This option can be used to configure the minimum
      address space identifier (ASID) that can be used for AMD Secure Encrypted
      Virtualization (SEV) enabled guests. ASID below this number are only available
      to SEV enable guest that also enable SEV-ES (Encrypted State).
      
      Added a new BIOS/Platform Configuration (RBSU) for Maximum SEV ASID to
      Virtualization Options. This option selects the number of AMD Secure Encrypted
      Virtualization (SEV) address space identifiers (ASID) that can be used for SEV
      enabled guests. This option affects the amount of system memory supported by
      the server.
      
      Enhanced the BIOS/Platform Configuration (RBSU) for Preferred IO Bus in the
      Power and Performance Options. This option can provide improved PCIe
      performance for all endpoints on one AMD NBIO (NorthBridge I/O).
      
      Added support for P17209-B21 HPE DL325 Gen10 Plus 8SFF U.2 SCN FIO Kit.  
        
      Added support for P17224-B21 HPE DL325 Gen10 Plus 8-16SFF U.2 SCN Upg Kit.  
        
      Added support for P17202-B21 HPE DL325 Gen10 Plus 2SFF U.2 SCN Enable Kit.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.24_04-09-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed a performance issue where the system may experience lower than
      expected core frequencies.
      
      Addressed a rare issue where the system may fail to boot after a warm reset.
      
      Addressed a rare issue where the system may delay or soft lock during a
      "shutdown -r" reboot under Linux. When this occurs, the server may take ten
      additional minutes to complete the reboot and log a Caution level Integrated
      Management Log (IML) indicating "ASR Detected by System ROM."
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.26_05-11-2020
changelog:
  -     Resolved a memory initialization issue on systems configured with LRDIMMs and
      the v1.24 (04/09/2020) revision of the System ROM that could lead to an
      increased chance for Corrected Memory Threshold Errors or Uncorrected Memory
      Errors.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.30_07-18-2020
changelog:
  -     *Important Notes:**
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where uncorrectable memory errors are seen when running
      memory intensive workloads with LRDIMMs.
      
      Addressed an issue that could cause a slight degradation of performance.
      
      Resolved an issue with NVMe hot add or removal which may result in an
      unrecoverable I/O error reported in the Integrated Management Log (IML).
      
      Addressed an issue where the UEFI Shell command GetPciRom may not display
      information for PCI expansion device drivers.
      
      Addressed an issue where the server may experience slower than expected
      performance when the inlet ambient temperature is greater than 30 degrees
      Celsius.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.68_02-06-2023
changelog:
  -     Add new System Configuration (RBSU) configuration options that allow
      controlling the processors P0 (maximum) frequency. This includes the Custom
      Pstate0 option with settings of Auto (default) and Manual and the Pstate0
      Frequency(MHz) option that allows setting the P0 frequency. When the Custom
      Pstate0 option is configured for Manual, the value of the Pstate0
      Frequency(MHz) is used for the processors P0 frequency. When the Custom
      Pstate0 option is configured for Auto, the processor uses its normal, maximum
      P0 frequency and the Pstate0 Frequency(MHz) option is not configurable. In
      System Configuration (RBSU), these options are located under the
      BIOS/Processor Options. This setting has the following Redfish properties:
      
      /redfish/v1/systems/1/bios/settings/CustomPstate0
      
      /redfish/v1/systems/1/bios/settings/Pstate0Frequency


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.72_04-20-2023
changelog:
  -     The following options from RBSU will hide if using customized iPXE.
      
      iPXE Script Auto-Start
      
      iPXE Script Verification
      
      iPXE Auto-Start Script Location
      
      Network Location for iPXE Auto-Start Script


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.80_07-31-2023
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.F for
      AMD 2nd Generation EPYC processors. This revision of the System ROM includes
      AMD reference code MilanPI 1.0.0.B for AMD 3rd Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision provides AMD's mitigation for security vulnerabilities for
      CVE-2022-23829 and CVE-2023-20593 for AMD 2nd Generation EPYC processors, and
      CVE-2022-23829 and CVE-2023-20569 for AMD 3rd Generation EPYC processor. This
      security vulnerability is documented in the CVE report site. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.1.1u update which provides mitigation for security vulnerabilities
      documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.
      
      Addressed an issue where Secure Boot would not be enabled when loading
      manufacturing default from iLO web.
      
      Addressed an issue where RSOD would occur when entering System Information
      from RBSU under legacy mode.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.64_03-11-2025
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.F
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.L for AMD 2nd Generation EPYC
      processors.
      
      Details about reported security vulnerabilities and their mitigation can be
      found at the following link [Security Bulletin Library | HPE Support](https://
      support.hpe.com/connect/s/securitybulletinlibrary?language=en_US).
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system might RSOD when performing firmware update
      via Firmware Management Protocol.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.26_05-14-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Resolved a memory initialization issue on systems configured with LRDIMMs and
      the v1.24 (05/04/2020) revision of the System ROM that could lead to an
      increased chance for Corrected Memory Threshold Errors or Uncorrected Memory
      Errors.
      
      Addressed an issue where a system configured with 4SFF U.3 Premium Storage
      Backplane displayed Box and Bay location incorrectly for SATA drives.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.30_07-18-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where uncorrectable memory errors are seen when running
      memory intensive workloads with LRDIMMs.
      
      Addressed an issue that could cause a slight degradation of performance.
      
      Resolved an issue with NVMe hot add or removal which may result in an
      unrecoverable I/O error reported in the Integrated Management Log (IML).
      
      Addressed an issue where the UEFI Shell command GetPciRom may not display
      information for PCI expansion device drivers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.52_10-29-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      \- This revision of the System ROM includes the latest revision of AMD
      security patch (AMD-SN-1021) which provides mitigations for BIOS advisories
      and security vulnerabilities documented as CVE-2020-12954, CVE-2020-12961,
      CVE-2021-26331, CVE-2021-26335, CVE-2021-26315, CVE-2020-12946,
      CVE-2020-12951. CVE-2021-26336, CVE-2021-26337, CVE-2021-26338,
      CVE-2021-26320, CVE-2020-12944, CVE-2020-12988, CVE-2021-26329,
      CVE-2021-26330, CVE-2021-26321, CVE-2021-26323, CVE-2021-26325,
      CVE-2021-26326, CVE-2021-26322, CVE-2021-26327, and CVE-2021-26312. These
      issues are not unique to HPE servers.
      
      \- This revision of the System ROM includes the latest revision of AMD
      security patch (AMD-SN-1007) which provides mitigation for AMD vulnerability
      with PSP Code Execution documented by AMD. This issue is not unique to HPE
      servers.
      
      \- Addressed an issue where in the OS does not display the true CPU Max Core
      Frequency.
      
      \- Addressed an issue where BootMode and UefiOptimizedBoot settings are not
      accessible through Redfish on class 3 systems.
      
      \- Addressed an issue where the controller's name is missing in BIOS/Platform
      Configuration (RBSU) and One Time Boot Menu if HPE SR416i-a x16 Lanes 4GB
      Cache NVMe/SAS 24G Gen10 Plus Controller or HPE SR932i-p x32 Lanes 8GB Wide
      Cache NVMe/SAS 24G PCIe4 x16 Gen10 Plus Controller is installed.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.54_12-03-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      \- Addressed an issue that can result in Corrected Memory Error Threshold
      Events being logged to the Integrated Management Log (IML) incorrectly. The
      system monitors corrected memory errors and notifies the user via a Corrected
      Memory Error Threshold Event when action is recommended due to an increased
      risk of an uncorrected memory error. Previous versions of the System ROM may
      log a Corrected Memory Error Threshold Event in cases where the system is not
      at an increased risk of an uncorrected memory error. It is strongly
      recommended that the System ROM be updated to this version or later before
      replacing DIMMs due to Corrected Memory Error Threshold Events.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.56_02-10-2022
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue that can result in Correctable Memory Error Threshold
      Events on DIMM slots 9/10/13/14/15/16 with AMD EPYC 7773/7573/7473/7373 CPU
      SKUs not being reported in the IML (Integrated Management Log).
      
      Addressed an issue where RAID volumes will be lost when using the "Restore
      Default Manufacturing Settings" feature.
      
      Addressed an issue where if the Administrator Password and Power-On Password
      are set, after clearing the Power-On Password, Administrator Password is also
      cleared.
      
      Addressed an issue where a system with Microsoft BitLocker enabled may
      incorrectly and intermittently prompt the user to unlock drives after a
      graceful OS reboot.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.58_06-09-2022
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the AMD
      reference code for AMD 3rd Generation EPYC processors which addresses and
      issue with Windows 2022 AQ Secure Core certification.
      
      This revision of the System ROM includes the latest revision of openSSL which
      provides mitigation for BIOS security vulnerability documented as
      CVE-2022-0778. This security vulnerability is documented in the CVE report
      site. This issue is not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of FreeType
      library which provides mitigation for BIOS security vulnerability documented
      as CVE-2022-27405. This security vulnerability is documented in the CVE report
      site. This issue is not unique to HPE servers.
      
      https://nvd.nist.gov/vuln/detail/CVE-2022-27405
      
      This revision of the System ROM includes the latest revision of zlib library
      which provides mitigations for security vulnerability documented as
      CVE-2018-25032. This issue is not unique to HPE servers.
      
      Addressed an issue where the system fails to boot OpenShift Container Platform
      in UEFI boot and optimized boot modes.
      
      Addressed an issue where the IPMI Watchdog Timer (WDT) would continuously be
      re-enabled on reboots even after being disabled which causes the system to
      continuously reboot after the timeout is triggered.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.80_07-31-2023
changelog:
  -     Added new System Configuration (RBSU) configuration options that allow
      enabling L1 IO Drop Chain Enable to drop chain write support to avoid
      unexpected timeouts due to under certain conditions, some high-bandwidth PCIe
      devices could fail to complete the transaction.
      
      In System Configuration (RBSU), the option is located under L1 IO Drop Chain
      Enable in Service Option when the system is with AMD 3rd Generation EPYC
      processors. This setting has the following Redfish properties.
      /redfish/v1/systems/1/bios/oem/hpe/service/settings/DropChainedWrite


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_01-26-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.C
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation EPYC
      processors. This revision of the System ROM includes the mitigation for
      security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd
      Generation EPYC processors. This security vulnerability is documented in the
      CVE report site. This issue is not unique to HPE servers. This revision of the
      System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver
      vulnerability documented as CVE-2021-38575. This revision of the System ROM
      includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented
      as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232,
      CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and
      CVE-2023-45237.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC
      processors. This security vulnerability is documented in the CVE report site.
      This issue is not unique to HPE servers.
      
      This revision of the System ROM includes the mitigation for NetworkPkg iSCSI
      Dxe driver vulnerability documented as CVE-2021-38575.
      
      This revision of the System ROM includes the mitigation for NetworkPkg PXE IP
      stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230
      CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235
      CVE-2023-45236 CVE-2023-45237.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_01-26-2024-2.1
changelog:
  -     *Important Notes:**
      
      Ver. 3.00_01-26-2024(B) contains updates to the firmware packaging and is
      functionally equivalent to ver. 3.00_01-26-2024. It is not necessary to
      upgrade with Revision B if a previous component revision was used to upgrade
      the firmware to version 3.00_01-26-2024.
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.C
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation EPYC
      processors. This revision of the System ROM includes the mitigation for
      security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd
      Generation EPYC processors. This security vulnerability is documented in the
      CVE report site. This issue is not unique to HPE servers. This revision of the
      System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver
      vulnerability documented as CVE-2021-38575. This revision of the System ROM
      includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented
      as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232,
      CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and
      CVE-2023-45237.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC
      processors. This security vulnerability is documented in the CVE report site.
      This issue is not unique to HPE servers.
      
      
      
      This revision of the System ROM includes the mitigation for NetworkPkg iSCSI
      Dxe driver vulnerability documented as CVE-2021-38575.
      
      
      
      This revision of the System ROM includes the mitigation for NetworkPkg PXE IP
      stack vulnerabilities documented as CVE-2023-45229 CVE-2023-45230
      CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235
      CVE-2023-45236 CVE-2023-45237.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.20_08-07-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.D
      for AMD 3rd Generation EPYC processors.
      
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.J for
      AMD 2nd Generation EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where NS204i may not be identified as an NVMe device.
      
      Addressed an issue where the Logical Drive name was cleared in RBSU after
      leaving configuration page of MR controller.
      
      Addressed an issue where Redfish BIOS actions, ResetBIOS and ChangePassword
      may not work.
      
      Addressed an issue that Battery Failure IML message log may be incorrectly
      logged for MR Controller with Smart Storage Battery.
      
      Addressed an issue where system failed to boot with selected NVMe HDD by
      setting One-Time Boot Option in ILO Web.
      
      Addressed an issue where system may encounter a RSOD while updating SAS drive
      FW via HPE Service Packs, including, but not limited to, VMware ESXi Online
      HDD FW Component Bundle 16.00, HPE Synergy Service Pack (SSP) 2024.01.02
      (January 2024) and the future HPE Synergy Service Pack (SSP) 2024.07.01 (July
      2024).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.64_03-11-2025
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.F
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.L for AMD 2nd Generation EPYC
      processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system might RSOD when performing firmware update
      via Firmware Management Protocol.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.52_10-29-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      \- This revision of the System ROM includes the latest revision of AMD
      security patch (AMD-SN-1021) which provides mitigations for BIOS advisories
      and security vulnerabilities documented as CVE-2020-12954, CVE-2020-12961,
      CVE-2021-26331, CVE-2021-26335, CVE-2021-26315, CVE-2020-12946,
      CVE-2020-12951. CVE-2021-26336, CVE-2021-26337, CVE-2021-26338,
      CVE-2021-26320, CVE-2020-12944, CVE-2020-12988, CVE-2021-26329,
      CVE-2021-26330, CVE-2021-26321, CVE-2021-26323, CVE-2021-26325,
      CVE-2021-26326, CVE-2021-26322, CVE-2021-26327, and CVE-2021-26312. These
      issues are not unique to HPE servers.
      
      \- This revision of the System ROM includes the latest revision of AMD
      security patch (AMD-SN-1007) which provides mitigation for AMD vulnerability
      with PSP Code Execution documented by AMD. This issue is not unique to HPE
      servers.
      
      \- Addressed an issue where in the OS does not display the true CPU Max Core
      Frequency.
      
      \- Addressed an issue that can result in Corrected Memory Error Threshold
      Events being logged to the Integrated Management Log (IML) in cases when they
      should not be logged. The system monitors corrected errors and notifies the
      user when action is required due to an increased risk of an Uncorrected Memory
      Error. Corrected Memory errors are a normal and expected occurrence and do not
      always indicate a higher risk of an Uncorrected Memory Error. Previous
      revisions of the System ROM were incorrectly logging Corrected Memory Error
      Threshold Events to the IML when action should not have been required,
      resulting in unnecessary scheduled downtime to replace DIMMs. It is
      recommended that the System ROM be updated to this version before replacing
      DIMMs due to Corrected Memory Error Threshold Events.
      
      \- Addressed an issue where BootMode and UefiOptimizedBoot settings are not
      accessible through Redfish on class 3 systems.
      
      \- Addressed an issue where the controller's name is missing in BIOS/Platform
      Configuration (RBSU) and One Time Boot Menu if HPE SR416i-a x16 Lanes 4GB
      Cache NVMe/SAS 24G Gen10 Plus Controller or HPE SR932i-p x32 Lanes 8GB Wide
      Cache NVMe/SAS 24G PCIe4 x16 Gen10 Plus Controller is installed.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_01-26-2024
changelog:
  -     Added new Microsoft secure boot keys, KEK2023, Microsoft UEFI CA 2023 and
      Windows UEFI CA 2023, since the original keys will expire in 2026.
      
      Added the System Configuration (RBSU) option "Boot Options/UEFI Boot
      Settings/Filter Non-bootable Drives" and set to "Auto" by default. This
      setting has the following Redfish property:
      /redfish/v1/systems/1/bios/settings/FilterNonbootableDrive


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_01-26-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.C
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation EPYC
      processors. This revision of the System ROM includes the mitigation for
      security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd
      Generation EPYC processors. This security vulnerability is documented in the
      CVE report site. This issue is not unique to HPE servers. This revision of the
      System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver
      vulnerability documented as CVE-2021-38575. This revision of the System ROM
      includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented
      as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233
      CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC
      processors. This security vulnerability is documented in the CVE report site.
      This issue is not unique to HPE servers. This revision of the System ROM
      includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability
      documented as CVE-2021-38575. This revision of the System ROM includes the
      mitigation for NetworkPkg PXE IP stack vulnerabilities documented as
      CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233
      CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_01-26-2024-2.1
changelog:
  -     *Important Notes:**
      
      Ver. 3.00_01-26-2024(B) contains updates to the firmware packaging and is
      functionally equivalent to ver. 3.00_01-26-2024. It is not necessary to
      upgrade with Revision B if a previous component revision was used to upgrade
      the firmware to version 3.00_01-26-2024.
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.C
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation EPYC
      processors. This revision of the System ROM includes the mitigation for
      security vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd
      Generation EPYC processors. This security vulnerability is documented in the
      CVE report site. This issue is not unique to HPE servers. This revision of the
      System ROM includes the mitigation for NetworkPkg iSCSI Dxe driver
      vulnerability documented as CVE-2021-38575. This revision of the System ROM
      includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented
      as CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233
      CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31346 and CVE-2023-31347 for AMD 3rd Generation EPYC
      processors. This security vulnerability is documented in the CVE report site.
      This issue is not unique to HPE servers. This revision of the System ROM
      includes the mitigation for NetworkPkg iSCSI Dxe driver vulnerability
      documented as CVE-2021-38575. This revision of the System ROM includes the
      mitigation for NetworkPkg PXE IP stack vulnerabilities documented as
      CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233
      CVE-2023-45234 CVE-2023-45235 CVE-2023-45236 CVE-2023-45237.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_05-17-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31315 for AMD 2nd and 3rd Generation EPYC processors.
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-45853, CVE-2023-45229, CVE-2022-36763,
      CVE-2022-36764, CVE-2023-5678, CVE-2021-38575 and CVE-2021-38578. The security
      vulnerabilities are documented in the CVE report site. They are not unique to
      HPE servers. This revision of the System ROM includes AMD reference code
      MilanPI 1.0.0.C for AMD 3rd Generation EPYC processors. This revision of the
      System ROM includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation
      EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the operating system could not detect iSCSI drive
      through IPv6 installation when iSCSI IpAddressType was set to auto. Addressed
      an issue where system would not complete POST after BIOS firmware updated to
      ver 3.00 with E810-XXVDA4's installed. Addressed an issue where system would
      hang with ASSERT during POST after adding DIMMs. Addressed an issue where the
      boot order was cleared unexpectedly after configuring System Configuration
      (RBSU) options, navigating to Boot Options > UEFI Boot Settings > UEFI Boot
      Order, and then pressing F12 to Save and Exit. Removed the value of "Not
      Specified" in System Configuration (RBSU) option "Server Security/Trusted
      Platform Module Options/Current TPM 2.0 Active PCRs" and set the default value
      as "SHA1 and SHA256".
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_05-17-2024-2.1
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31315 for AMD 2nd and 3rd Generation EPYC processors.
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-45853, CVE-2023-45229, CVE-2022-36763,
      CVE-2022-36764, CVE-2023-5678, CVE-2021-38575 and CVE-2021-38578. The security
      vulnerabilities are documented in the CVE report site. They are not unique to
      HPE servers. This revision of the System ROM includes AMD reference code
      MilanPI 1.0.0.C for AMD 3rd Generation EPYC processors. This revision of the
      System ROM includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation
      EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the operating system could not detect iSCSI drive
      through IPv6 installation when iSCSI IpAddressType was set to auto. Addressed
      an issue where system would not complete POST after BIOS firmware updated to
      ver 3.00 with E810-XXVDA4's installed. Addressed an issue where system would
      hang with ASSERT during POST after adding DIMMs. Addressed an issue where the
      boot order was cleared unexpectedly after configuring System Configuration
      (RBSU) options, navigating to Boot Options > UEFI Boot Settings > UEFI Boot
      Order, and then pressing F12 to Save and Exit. Removed the value of "Not
      Specified" in System Configuration (RBSU) option "Server Security/Trusted
      Platform Module Options/Current TPM 2.0 Active PCRs" and set the default value
      as "SHA1 and SHA256". Addressed an issue where GPUs 0 and 1 in slots 2,4 are
      disabled when a PCIe device in slot 17 is disabled.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.20_08-07-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.D
      for AMD 3rd Generation EPYC processors. This revision of the System ROM
      includes AMD reference code RomePI 1.0.0.J for AMD 2nd Generation EPYC
      processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where NS204i may not be identified as an NVMe device.
      
      Addressed an issue where the Logical Drive name was cleared in RBSU after
      leaving the configuration page of the MR controller.
      
      Addressed an issue where Redfish BIOS actions, ResetBIOS and ChangePassword
      may not work.
      
      Addressed an issue where Battery Failure IML message log may be incorrectly
      logged for the Smart Array controller with Smart Storage Battery.
      
      Addressed an issue where system failed to boot with selected NVMe HDD by
      setting One-Time Boot Option in ILO Web.
      
      Addressed an issue where system may encounter a RSOD while updating SAS drive
      FW via HPE Service Packs, including, but not limited to, VMware ESXi Online
      HDD FW Component Bundle 16.00, HPE Synergy Service Pack (SSP) 2024.01.02
      (January 2024) and the future HPE Synergy Service Pack (SSP) 2024.07.01 (July
      2024).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.52_10-29-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      \- This revision of the System ROM includes the latest revision of AMD
      security patch (AMD-SN-1021) which provides mitigations for BIOS advisories
      and security vulnerabilities documented as CVE-2020-12954, CVE-2020-12961,
      CVE-2021-26331, CVE-2021-26335, CVE-2021-26315, CVE-2020-12946,
      CVE-2020-12951. CVE-2021-26336, CVE-2021-26337, CVE-2021-26338,
      CVE-2021-26320, CVE-2020-12944, CVE-2020-12988, CVE-2021-26329,
      CVE-2021-26330, CVE-2021-26321, CVE-2021-26323, CVE-2021-26325,
      CVE-2021-26326, CVE-2021-26322, CVE-2021-26327, and CVE-2021-26312. These
      issues are not unique to HPE servers.
      
      \- This revision of the System ROM includes the latest revision of AMD
      security patch (AMD-SN-1007) which provides mitigation for AMD vulnerability
      with PSP Code Execution documented by AMD. This issue is not unique to HPE
      servers.
      
      \- Addressed an issue where in the OS does not display the true CPU Max Core
      Frequency.
      
      \- Addressed an issue where the system would encounter an unexpected long
      pause during early POST during a warm boot.
      
      \- Addressed an issue where BootMode and UefiOptimizedBoot settings are not
      accessible through Redfish on class 3 systems.
      
      \- Addressed an issue where the controller's name is missing in BIOS/Platform
      Configuration (RBSU) and One Time Boot Menu if HPE SR416i-a x16 Lanes 4GB
      Cache NVMe/SAS 24G Gen10 Plus Controller or HPE SR932i-p x32 Lanes 8GB Wide
      Cache NVMe/SAS 24G PCIe4 x16 Gen10 Plus Controller is installed.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_05-17-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-31315 for AMD 2nd and 3rd Generation EPYC processors.
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-45853, CVE-2023-45229, CVE-2022-36763,
      CVE-2022-36764, CVE-2023-5678, CVE-2021-38575 and CVE-2021-38578. The security
      vulnerabilities are documented in the CVE report site. They are not unique to
      HPE servers. This revision of the System ROM includes AMD reference code
      MilanPI 1.0.0.C for AMD 3rd Generation EPYC processors. This revision of the
      System ROM includes AMD reference code RomePI 1.0.0.H for AMD 2nd Generation
      EPYC processors.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the operating system could not detect iSCSI drive
      through IPv6 installation when iSCSI IpAddressType was set to auto. Addressed
      an issue where system would not complete POST after BIOS firmware updated to
      ver 3.00 with E810-XXVDA4's installed. Addressed an issue where system would
      hang with ASSERT during POST after adding DIMMs. Addressed an issue where the
      boot order was cleared unexpectedly after configuring System Configuration
      (RBSU) options, navigating to Boot Options > UEFI Boot Settings > UEFI Boot
      Order, and then pressing F12 to Save and Exit. Removed the value of "Not
      Specified" in System Configuration (RBSU) option "Server Security/Trusted
      Platform Module Options/Current TPM 2.0 Active PCRs" and set the default value
      as "SHA1 and SHA256". Addressed an issue where only one GPU will be detected
      after BIOS firmware updated to ver 3.00 with four GPUs installed.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.40_10-04-2024
changelog:
  -     *Important Notes:**  
      This revision of the System ROM includes AMD reference code MilanPI 1.0.0.E
      for AMD 3rd Generation EPYC processors.  
      This revision of the System ROM includes AMD reference code RomePI 1.0.0.K for
      AMD 2nd Generation EPYC processors.  
      **Firmware Dependencies:**  
      None  
      **Problems Fixed:**  
      Fixed an issue where the iLO firmware version may show incorrectly.  
      **Known Issues:**  
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.10_05-21-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the Server Backup and Restore functionality may not
      work properly if initiated through the HPE RESTful API returning a message "An
      internal error occurred during RIS operation".
      
      Addressed an issue where configuring memory to run at 2x refresh rate would
      still actually operate memory at 1x refresh rate. This issue was introduced
      with the v2.00 System ROM and did not impact earlier versions of the System
      ROM. This issue is not unique to HPE servers.
      
      Addressed an issue where the NVMe PCIe Resource Padding option in
      BIOS/Platform Configuration (RBSU) would not properly allocated sufficient
      resources to support a NVMe hot add event. In certain configurations, an
      insufficient amount of resources would have been reserved and a reboot would
      have been required to detect the presence of the newly added drive.
      
      Addressed an issue where the system would not boot to a USB drive when a non-
      bootable (non-formatted) drive was also present in the system. This issue only
      impacts systems configured in Legacy Boot Mode.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.14_09-05-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where certain 2933Mhz LRDIMMs (HPE part number P03054-091,
      P03055-091 and P11057-0A1) may experience an uncorrectable memory error when
      operating with a Second Generation Intel Xeon Scalable Processor. This issue
      can be seen when processor c-states are enabled on the platform. This issue
      does not impact 2666Mhz LRDIMMs or any speed RDIMM. HPE recommends that
      customers experiencing an uncorrectable memory error in one of these
      configurations update to this version of the System ROM before replacing any
      memory. This issue is not unique to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.16_09-12-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This version of the System ROM includes the latest revision of the Intel
      microcode which addresses an issue where the system may experience an
      unexpected machine check exception. This issue would be logged to the
      Integrated Management Log (IML) as a Bank 0x03 or Bank 0x04 with status
      0xBE000000'00800400 or 0xFE000000'00800400 Machine Check Exception. This issue
      is not unique to HPE servers.
      
      This version of the System ROM includes the latest version of the Intel
      microcode which addresses an issue where under complex microarchitectural
      conditions involving branch instructions that span multiple 64 byte
      boundaries, unpredictable system behavior may occur. This issue is not unique
      to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.20_10-31-2019
changelog:
  -     Updated to the latest thermal support for the platform.
      
      Updated the language translations (non-English modes) for System Utilities.
      
      Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.20_10-31-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest support for Intel Trusted
      eXecution Technology (TXT) which provides mitigation for CVE-2019-151. This
      mitigation is only needed for systems that have TXT enabled. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code support that provides mitigations for the multiple security
      vulnerabilities. The following vulnerabilities have been addressed in this
      System ROM release: CVE-2019-11137, CVE-2019-152, and CVE-2019-11136. These
      issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigation for an CVE-2017-5715, CVE-2019-11135 and
      CVE-2019-11139. These issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigation for an Intel sighting where under complex
      micro-architectural conditions, executing X87 or AVX or integer divide
      instructions may results in unpredictable system behavior. This issue is not
      unique to HPE servers.
      
      Addressed an issue where the system may become unresponsive during POST when
      both iLO and the server are reset simultaneously.
      
      Addressed an issue where the server may experience a Red Screen (RSOD) during
      boot when a Matrox GPU is present and the server is booting in Legacy Boot
      Mode. This problem could occur with other optional PCIe graphics adapters.
      This issue is not intermittent and will occur on every boot with impacted
      optional PCIe graphics adapters with previous System ROM revisions. This issue
      is not seen with servers configured in UEFI Boot Mode or when using the
      embedded graphics controller.
      
      Addressed an issue where the system may incorrectly report that a DIMM has
      been mapped out after a memory training failure in the Integrated Management
      Log (IML) when the DIMM is still present in the system memory map. The IML
      will now correctly indicate the memory training failure, but will not indicate
      that the DIMM has been mapped out. This change only impacts the IML logging of
      the error and does not impact the operation of the system.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.22_11-13-2019
changelog:
  -     *Important Notes:**
      
      This version of the System ROM replaces the previously published v2.20 System
      ROM. The v2.20 System ROM introduced an issue where a small subset LRDIMMs
      could experience an uncorrectable memory error. This issue had been previously
      fixed in the v2.14 ROM of the System ROM.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest support for Intel Trusted
      eXecution Technology (TXT) which provides mitigation for CVE-2019-151. This
      mitigation is only needed for systems that have TXT enabled. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code support that provides mitigations for the multiple security
      vulnerabilities. The following vulnerabilities have been addressed in this
      System ROM release: CVE-2019-11137, CVE-2019-152, and CVE-2019-11136. These
      issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigation for an CVE-2017-5715, CVE-2019-11135 and
      CVE-2019-11139. These issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigation for an Intel sighting where under complex
      micro-architectural conditions, executing X87 or AVX or integer divide
      instructions may results in unpredictable system behavior. This issue is not
      unique to HPE servers.
      
      Addressed an issue where the system may become unresponsive during POST when
      both iLO and the server are reset simultaneously.
      
      Addressed an issue where the server may experience a Red Screen (RSOD) during
      boot when a Matrox GPU is present and the server is booting in Legacy Boot
      Mode. This problem could occur with other optional PCIe graphics adapters.
      This issue is not intermittent and will occur on every boot with impacted
      optional PCIe graphics adapters with previous System ROM revisions. This issue
      is not seen with servers configured in UEFI Boot Mode or when using the
      embedded graphics controller.
      
      Addressed an issue where the system may incorrectly report that a DIMM has
      been mapped out after a memory training failure in the Integrated Management
      Log (IML) when the DIMM is still present in the system memory map. The IML
      will now correctly indicate the memory training failure, but will not indicate
      that the DIMM has been mapped out. This change only impacts the IML logging of
      the error and does not impact the operation of the system.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.30_02-11-2020
changelog:
  -     Added a new BIOS/Platform Configuration (RBSU) option to the Intel Persistent
      DC Performance Settings called Balanced Performance Mode. This option may
      improve performance of systems configured with Intel DC Persistent Memory with
      certain workloads.
      
      Updated to the latest thermal support for the platform.
      
      Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.30_02-11-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of Intel
      microcode which addresses a Mesh to Memory Machine Check Exception failure
      when Fast Fault Tolerant Memory Mode (ADDDC) is enabled. In most cases, this
      issue results in the log of an Integrated Management Log (IML) Bank 8 or Bank
      9 Machine Check Exception with a status of 0xB2000000:00200400 but can also
      result in a system reset with an Unexpected Shutdown logged. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigations for security vulnerabilities documented
      as CVE-2020-0548 and CVE-2020-0549, also known as CacheOut. These security
      vulnerabilities are documented in Intel Security Advisory INTEL-SA-00329.
      These issues are not unique to HPE servers.
      
      Addressed an issue where the server may become unresponsive during POST with a
      Red Screen Exception (RSOD) when the server was reset (restarted) at the same
      time that an iLO firmware reset was initiated. Note that updating iLO firmware
      results in the reset of iLO firmware.
      
      Addressed an issue where the System Utilities System Information data could
      not be successfully exported to an FTP (network) location. Previously the
      System Utilities would report the file was saved successfully but no actual
      information was saved on the network share.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.34_04-08-2020
changelog:
  -     Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.34_04-08-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the serial port would not function properly when the
      iLO CLI serial interface was also enabled on the platform. This could lead to
      the serial BAUD rate not being configured properly and the serial output from
      the host would be corrupted or no output would be seen.
      
      Addressed an issue where UEFI Serial Debug output could inadvertently be seen
      over BIOS Serial Console. This issue would be seen periodically on server
      reboots. This issue was introduced with System ROM v2.30 and did not impact
      servers using previous versions of the System ROM.
      
      Addressed an extremely rare issue where the system could become unresponsive
      in POST when configured in Legacy Boot Mode when a USB Mouse is attached. This
      issue does not impact systems configured in UEFI Boot Mode.
      
      Addressed an issue where boot devices could disappear from the Boot Options
      menu in the BIOS/Platform Configuration (RBSU) when pressing the F10 or F12
      key to save boot order changes.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.36_07-16-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system would become unresponsive with a Red
      Screen or hang when booting to FreeBSD R12.1 from a USB device when in Legacy
      Boot Mode. This issue did not impact systems configured for UEFI Boot Mode or
      when booting from other types of media.
      
      Addressed an issue where a dual port networking device may show up in the
      System Configuration Utilities with two Port 1 names instead of properly being
      represented as Port 1 and Port 2. This did not impact any functionality to the
      device.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.12_07-03-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added support for Network Choice (NC) SKUs of the HPE ProLiant DL380 Gen10
      Server. These server SKUs do not include the embedded NIC. This revision of
      the System ROM supports all SKUs of the HPE ProLiant DL380 Gen10 Server, but
      does not include any new functionality or issue fixes for non-NC SKUs.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.14_09-05-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where certain 2933Mhz LRDIMMs (HPE part number P03054-091,
      P03055-091 and P11057-0A1) may experience an uncorrectable memory error when
      operating with a Second Generation Intel Xeon Scalable Processor. This issue
      can be seen when processor c-states are enabled on the platform. This issue
      does not impact 2666Mhz LRDIMMs or any speed RDIMM. HPE recommends that
      customers experiencing an uncorrectable memory error in one of these
      configurations update to this version of the System ROM before replacing any
      memory. This issue is not unique to HPE servers.
      
      Addressed an issue where NVIDIA V100 GPUs may experience a thermal shutdown or
      Unexpected PCIe Uncorrectable error to the GPU. This issue only impacts the
      NVIDIA V100 GPU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.34_04-08-2020
changelog:
  -     Updated to the latest thermal support for the platform.
      
      Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.36_07-16-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system would become unresponsive with a Red
      Screen or hang when booting to FreeBSD R12.1 from a USB device when in Legacy
      Boot Mode. This issue did not impact systems configured for UEFI Boot Mode or
      when booting from other types of media.
      
      Addressed an issue where a dual port networking device may show up in the
      System Configuration Utilities with two Port 1 names instead of properly being
      represented as Port 1 and Port 2. This did not impact any functionality to the
      device.
      
      Addressed an issue where a system may not log the failed DIMM (FRU) to the
      Integrated Management Log (IML) when experiencing an uncorrectable memory
      error when in ADDDC Memory Mode. In this case the system would log a Machine
      Check Exception to the IML but would not log the expected IML entry indicating
      the failed DIMM. Note that this issue is only a logging issue when a real
      error occurs and does not impact operation of the system.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.60_01-13-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2021.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes Intel Platform Update 2021.2. It
      provides BIOS mitigations for security vulnerabilities documented as INTEL-
      SA-00527 (2/8) for CVE-2021-0092, CVE-2021-0093, CVE-2021-0144. These issues
      are not unique to HPE servers.
      
      This revision of the System ROM includes Intel Platform Update 2021.2. It
      provides Authenticated Code Module (ACM) mitigations for security
      vulnerabilities documented as INTEL-SA-00527 (2/8) for CVE-2021-0099,
      CVE-2021-0103, CVE-2021-0107, CVE-2021-0111, CVE-2021-0114, CVE-2021-0115,
      CVE-2021-0116, CVE-2021-0117, CVE-2021-0118, CVE-2021-0125, CVE-2021-0124.
      These issues are not unique to HPE servers.
      
      Addressed an issue (SIK6906) where the systems with HPE NS204i-p NVMe OS Boot
      Device may shut down intermittently and may log the following System
      Overheating message in the Integrated Management Log (IML): "System
      Overheating (Temperature Sensor 47, Location I/O Board, Temperature61)
      ACTION:Check fans, processor heat sink and air baffles installation."
      
      Addressed an issue where the system may not automatically restart due to a
      hang condition during the boot process after a cold boot when the IPMI
      Watchdog Timer feature is enabled in the ROM-Based Setup Utility (RBSU).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.62_03-08-2022
changelog:
  -     *Important Notes:**
      
      This System ROM should be considered Critical for any systems using the v2.60
      revision of the System ROM.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the Advanced Memory Protection (AMP) mode was
      incorrectly forced to Advanced ECC from HPE Fast Fault Tolerant (ADDDC) mode
      after updating to Sysrom ROM 01/13/2022 v2.60.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.64_04-21-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigations for security vulnerability documented as
      CVE-2022-21166 and CVE-2021-21131. These security vulnerabilities are
      documented in Intel Security Advisory INTEL-SA-00616. These issues are not
      unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code which provides mitigations for BIOS advisories and security
      vulnerabilities documented as CVE-2021-0189, CVE-2021-0159, CVE-2021-33123,
      CVE-2021-33124, and CVE-2021-33159. These security vulnerabilities are
      documented in Intel Security Advisory INTEL-SA-00601 and INTEL-SA-00610. These
      issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of zlib library
      which provides mitigations for security vulnerability documented as
      CVE-2018-25032. This issue is not unique to HPE servers.
      
      Addresses an issue where the system ROM does not display Storage controller
      product names when the ROM Based Setup Utility (RBSU) language setting is non-
      English.
      
      Addresses an issue where the system would loop in reboot once the watchdog
      timer times out.
      
      Addresses an issue where Advanced ECC is selected in Advanced Memory
      Protection (AMP), the option will be forced to HPE Fast Fault Tolerant (ADDDC)
      when in custom workload mode.
      
      Addresses an issue where Advanced Memory Protection (AMP) mode can be set
      while in custom workload mode.
      
      Addresses an issue where Advanced Memory Protection (AMP) mode does not change
      back to ADDDC after updating system ROM from version 2.60 to 2.62. For more
      details on this please check the following advisory:
      https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00121538en_us
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.66_05-17-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of openSSL and
      LibPng which provides mitigation for BIOS security vulnerabilities documented
      as CVE-2022-1292 and CVE-2019-7317. This security vulnerability is documented
      in the CVE report site. This issue is not unique to HPE servers.
      
      Addressed an issue of an incomplete mitigation for a BIOS advisory and
      security vulnerabilities documented as CVE-2021-0159, CVE-2021-33123, and
      CVE-2021-33124. These security vulnerabilities are documented in Intel
      Security Advisory INTEL-SA-00601. These issues are not unique to HPE servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.68_07-14-2022
changelog:
  -     Added support for One Button Secure Erase (OBSE) and encryption for Broadcom
      MR controller series on Intel Gen10 systems.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.68_07-14-2022
changelog:
  -     *Important Notes:**
      
      When installing with HPE Smart Update Manager (SUM) 8.9.5 or earlier, the
      warning message "Component Not Signed" might be displayed for SHA-384 signed
      components. This issue will be resolved in a future version of SUM. For
      details, see https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&d
      ocId=a00125612en_us.
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of openSSL which
      provides mitigation for BIOS security vulnerability documented as
      CVE-2022-2068 (ttps://nvd.nist.gov/vuln/detail/CVE-2022-2068). This security
      vulnerability is documented in the CVE report site. This issue is not unique
      to HPE servers.
      
      This revision of the System ROM includes the latest revision of FreeType
      library which provides mitigations for security vulnerabilities documented as
      CVE-2022-27404, CVE-2022-27405, and CVE-2022-27406. This issue is not unique
      to HPE servers.
      
      Addressed an issue where the system will hang with Red Screen of Death (RSOD)
      in ROM Based Setup Utility (RBSU) when user tries to switch [Image
      Description] choices for NVMe devices under the Firmware Update Page.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.72_09-29-2022
changelog:
  -     Updated Intel Optane Memory UEFI driver.
      
      Added support to show manufacturing date for DIMMs in SMBIOS.
      
      Improved the description of Memory Failed Events in the Integrated Management
      Log (IML).


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.72_09-29-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.3 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where a server running the ESXi hypervisor a with TPM
      module installed would halt on loading modules after the installation of the
      hypervisor OS, with the message "TPM log extend failed".
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.76_02-09-2023
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2023.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2023.1 BIOS update which provides Intel's mitigation for BIOS advisory and
      security vulnerabilities documented as CVE-2022-32231 and CVE-2022-26343. This
      security vulnerability is documented in the CVE report site. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the revision of the zlib library
      1.2.13 update which provides mitigation for and security vulnerabilities
      documented as CVE-2022-37434. This issue is not unique to HPE servers.
      
      Addressed an issue that system will hang when BIOS tries to print a large IML
      message on POST screen.
      
      Addressed an issue when system discovers thousands of LUNs and was trying to
      create thousands of boot options for each LUNs. System cannot add, delete or
      adjust new boot options on iLO web and RBSU after rebooting. System becomes
      unstable unless loading manufacture default.
      
      Addressed an issue where some Chinese and Japanese translations were missing
      in RBSU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.76_02-09-2023
changelog:
  -     Added new System Configuration (RBSU) configuration options that allow
      enabling and disabling EPP (Energy Performance Preference) when "Workload
      Profile" sets to "Custom" and "Power Regulator" sets to "OS Control Mode".


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.78_03-16-2023
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where servers may stop responding during boot when the
      Intel TXT function is enabled.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.80_04-20-2023
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2023.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and
      security vulnerabilities documented as CVE-2022-38087. This security
      vulnerability is documented in the CVE report site. This issue is not unique
      to HPE servers.
      
      Addressed the issue where the system might hang due to invalid memory free and
      usage when TPM is enabled.
      
      Addressed the issue where the PCIe device serial number in OEM SMBIOS type 203
      does not populate in some cases.
      
      Addressed the issue where the power-on-password dialog popped up even though
      user did not set the password.
      
      Addressed the issue where the TPM status between RBSU and iLO web pages was
      not synchronized.
      
      Addressed the issue where BIOS does not correctly log memory error data and
      memory health telemetry in AHS.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.90_07-20-2023
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2023.3 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and
      security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This
      security vulnerability is documented in the CVE report site. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.0.2zh update which provides mitigation for security vulnerabilities
      documented as CVE-2023-2650.
      
      Addressed an issue where iLO embedded device health info would display blank
      content under RBSU when the Language was set to Japanese or Chinese.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_10-19-2023
changelog:
  -     Replaced "AC power" with "external power" in the help text of "Automatic
      power-on" option. This is due to ProLiant servers also provide the DC power
      supply option.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_10-19-2023
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where "Restore Manufacturing Defaults" and "Restore
      Defaults" from iLO web did not restore the Secure Boot Status.
      
      Addressed an issue where BIOS did not report CPU status correctly to iLO, and
      OneView would receive notification when Uncorrectable Machine Check Exception
      (UMCE) occurs.
      
      Addressed an issue where system might hang while accessing IML logs from RBSU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_02-22-2024
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where SBCE and ECC storm records may disappear from AHS.
      
      Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the
      iSCSI IpAddressType is set to Auto.
      
      Addressed an issue where the server may hang due to an IE function error.
      
      Merged the solutions from EDK2 for vulnerabilities:
      
      \- Buffer overflow in the DHCPv6 client via a long Server ID option
      
      \- Out-of-bounds read when handling a ND Redirect message with truncated
      options
      
      \- Infinite loop when parsing unknown options in the Destination Options
      header
      
      \- Infinite loop when parsing a PadN option in the Destination Options header
      
      \- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise
      message
      
      \- Predictable TCP ISNs
      
      \- Use of a Weak PseudoRandom Number Generator
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_02-22-2024
changelog:
  -     Patch for CVE-2021-38575: The vulnerability allows a remote attacker to
      execute arbitrary code on the target system.
      
      Patch the primary APIC ID for SMBIOS type 211: Some special CPUs may not have
      an intra-processor APIC ID == 00h and may cause wrong TControl data.
      
      Patch for CVE-2023-45853: The vulnerability allows a remote attacker to
      execute arbitrary code on the target system.
      
      The vulnerability exists due to a boundary error in the IScsiHexToBin()
      function in NetworkPkg/IScsiDxe. A remote attacker with ability to inject data
      into communication between edk2 and the iSCSI target can execute arbitrary
      code on the target system.
      
      Prevented a non-standard VPD content from causing the UEFI read function to
      become write.
      
      Patch for CVE-2022-36763 and CVE-2022-36764: EDK2 is susceptible to a
      vulnerability in the Tcg2MeasureGptTable() function, allowing a user to
      trigger a heap buffer overflow via a local network. Successful exploitation of
      this vulnerability may result in a compromise of confidentiality, integrity,
      and/or availability.
      
      Added a new event support for IML.
      
      Patch for CVE-2023-45229: EDK2 NetworkPkg Vulnerability
      
      Added an additional retry mechanisms to avoid a BIOS hang from iLO failure.
      
      Corrected Redfish Property value changed from vN_N_N to N.N.N in uri:
      
      /redfish/v1/registrystore/registries/{lang}/biosattributeregistry{Platform}.vN
      _N_N
      
      there, {lang} = { en, ja, zh }, {platform} = Platform Name e.g. A55, U63 ,
      vN_N_N =
      
      version number defined as Redfish specification
      
      [Example]
      
      uri: /redfish/v1/registrystore/registries/zh/biosattributeregistrya55.v1_1_20
      
      Property of RegistryVersion is changed from v1_1_20 to 1.1.20


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.20_05-27-2024
changelog:
  -     Added value "C6 without C1E" in System Configuration (RBSU) option "Power
      Management/Advanced Power Options menu/Minimum Processor Idle Power Core
      C-State". When selected, the Minimum Processor Idle Power Core C-State is C6
      with C1E disabled. This setting has the following Redfish property:
      /redfish/v1/systems/1/bios/MinProcIdlePower


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.20_05-27-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2021-38578, CVE-2023-5678 and CVE-2024-0727. The security
      vulnerabilities are documented in the CVE report site. They are not unique to
      HPE servers. This version of the System ROM should be paired with Server
      Platform Services (SPS) Firmware 04.01.05.002.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where system may encounter a RSOD while updating SAS drive
      FW via HPE Service Packs, including, but not limited to, VMware ESXi Online
      HDD FW Component Bundle 16.00, HPE Synergy Service Pack (SSP) 2024.01.02
      (January 2024) and the future HPE Synergy Service Pack (SSP) 2024.07.01 (July
      2024).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.30_07-31-2024
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2024.3 guidance. This version of the System ROM
      should be paired with Server Platform Services (SPS) Firmware 04.01.05.002.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where NS204i may not be identified as an NVMe device.
      
      Addressed an issue where the Logical Drive name was cleared in RBSU after
      leaving the configuration page of an MR controller.
      
      Addressed an issue where Windows Server 2025 HLK TPM2.0 UEFI Preboot Interface
      test failed on XL450Gen10.
      
      Addressed an issue where the "Physical Drive missing" message appeared twice
      in POST when a drive was removed and rebooted with incorrect severity in IML.
      
      Addressed an issue where the boot order was cleared unexpectedly after
      configuring System Configuration (RBSU) options and navigating to Boot Options
      > UEFI Boot Settings > UEFI Boot Order, and then pressing F12 to Save and
      Exit.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.30_07-31-2024
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2024.3 guidance. This version of the System ROM
      should be paired with Server Platform Services (SPS) Firmware 04.01.05.002.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where NS204i may not be identified as an NVMe device.
      
      Addressed an issue where the Logical Drive name was cleared in RBSU after
      leaving the configuration page of an MR controller.
      
      Addressed an issue where the "Physical Drive missing" message appeared twice
      in POST when a drive was removed and rebooted with incorrect severity in IML.
      
      Addressed an issue where the boot order was cleared unexpectedly after
      configuring System Configuration (RBSU) options and navigating to Boot Options
      > UEFI Boot Settings > UEFI Boot Order, and then pressing F12 to Save and
      Exit.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.32_08-29-2024
changelog:
  -     *Important Notes:**
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where system was not compliant with WS2025 HSTI
      requirement.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.34_09-30-2024
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Fixed an issue where system may reboot infinitely when a faulty PCIE card was
      installed.
      
      Fixed an issue where the firmware versions of iLO and Backplane showed
      incorrectly.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.40_01-16-2025
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel
      IPU2025.1 updates.
      
      This version of the System ROM should be paired with Server Platform Services
      (SPS) Firmware 04.01.05.105.
      
      Details about reported security vulnerabilities and their mitigation can be
      found at the following link [Security Bulletin Library | HPE Support](https://
      support.hpe.com/connect/s/securitybulletinlibrary?language=en_US).
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system would uses UUID for IPV6 DHCP even when
      DUID-LLT is selected.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.42_02-21-2025
changelog:
  -     *Important Notes:**
      
      This version of the System ROM should be paired with Server Platform Services
      (SPS) Firmware 04.01.05.105.
      
      Details about reported security vulnerabilities and their mitigation can be
      found at the following link [Security Bulletin Library | HPE Support](https://
      support.hpe.com/connect/s/securitybulletinlibrary?language=en_US).
      
      **Firmware Dependencies:**
      
      **Problems Fixed:**
      
      Addressed an issue where the system iLO remote console might hang in glyph
      loop error handling when the System Utilities Language is set to Japanese.
      
      **Known Issues:**


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.12_07-03-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added support for Network Choice (NC) SKUs of the HPE ProLiant DL360 Gen10
      Server. These server SKUs do not include the embedded NIC. This revision of
      the System ROM supports all SKUs of the HPE ProLiant DL360 Gen10 Server, but
      does not include any new functionality or issue fixes for non-NC SKUs.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.12_07-09-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added support for the NVIDIA Quardo RTX4000
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.30_07-31-2024
changelog:
  -     See the release document U33_3.30_07_31_2024 in Download Product Binaries page
      from Product Summary of the firmware product.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.60_01-13-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2021.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes Intel Platform Update 2021.2. It
      provides BIOS mitigations for security vulnerabilities documented as INTEL-
      SA-00527 (2/8) for CVE-2021-0092. These issues are not unique to HPE servers.
      CVE-2021-0093, CVE-2021-0144
      
      This revision of the System ROM includes Intel Platform Update 2021.2. It
      provides Authenticated Code Module (ACM) mitigations for security
      vulnerabilities documented as INTEL-SA-00527 (2/8) for CVE-2021-0099,
      CVE-2021-0103, CVE-2021-0107, CVE-2021-0111, CVE-2021-0114, CVE-2021-0115,
      CVE-2021-0116, CVE-2021-0117, CVE-2021-0118, CVE-2021-0125, CVE-2021-0124.
      These issues are not unique to HPE servers.
      
      Addressed an issue (SIK6906) where the systems with HPE NS204i-p NVMe OS Boot
      Device may shut down intermittently and may log the following System
      Overheating message in the Integrated Management Log (IML): "System
      Overheating (Temperature Sensor 47, Location I/O Board, Temperature61)
      ACTION:Check fans, processor heat sink and air baffles installation."
      
      Addressed an issue where the IPMI Watchdog Timer stops after a cold boot with
      IPMI watch dog timer enabled in RBSU
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.64_04-21-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigations for security vulnerability documented as
      CVE-2022-21166 and CVE-2021-21131. These security vulnerabilities are
      documented in Intel Security Advisory INTEL-SA-00616. These issues are not
      unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code which provides mitigations for BIOS advisories and security
      vulnerabilities documented as CVE-2021-0189, CVE-2021-0159, CVE-2021-33123,
      CVE-2021-33124, and CVE-2021-33159. These security vulnerabilities are
      documented in Intel Security Advisory INTEL-SA-00601 and INTEL-SA-00610. These
      issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of zlib library
      which provides mitigations for security vulnerability documented as
      CVE-2018-25032. This issue is not unique to HPE servers.
      
      Addresses an issue where the system ROM does not display Storage controller
      product names when the ROM Based Setup Utility (RBSU) language setting is non-
      English.
      
      Addresses an issue where the system would loop in reboot once the watchdog
      timer times out.
      
      Addresses an issue where Advanced ECC is selected in Advanced Memory
      Protection (AMP) the option with be forced back to be HPE Fast Fault Tolerant
      (ADDDC) while in custom workload mode.
      
      Addresses an issue where Advanced Memory Protection (AMP) mode can be set
      while in custom workload mode.
      
      Addresses an issue where Advanced Memory Protection (AMP) mode does not change
      back to ADDDC after updating system ROM from version 2.60 to 2.62. For more
      details on this please check the following advisory:
      https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00121538en_us
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.68_07-14-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of openSSL which
      provides mitigation for BIOS security vulnerability documented as
      CVE-2022-2068 (ttps://nvd.nist.gov/vuln/detail/CVE-2022-2068). This security
      vulnerability is documented in the CVE report site. This issue is not unique
      to HPE servers.
      
      This revision of the System ROM includes the latest revision of FreeType
      library which provides mitigations for security vulnerabilities documented as
      CVE-2022-27404, CVE-2022-27405, and CVE-2022-27406. This issue is not unique
      to HPE servers.
      
      Addressed an issue where the system will hang with Red Screen of Death (RSOD)
      in ROM Based Setup Utility (RBSU) when user tries to switch [Image
      Description] choices for NVMe devices under the Firmware Update Page.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.90_07-20-2023
changelog:
  -     This revision of the System ROM includes the latest revision of the Intel IPU
      2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and
      security vulnerabilities documented as CVE-2022-43505 and CVE-2022-40982. This
      security vulnerability is documented in the CVE report site.  This issue is
      not unique to HPE servers.
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.0.2zh update which provides mitigation for security vulnerabilities
      documented as CVE-2023-2650.
      
      Addressed an issue where iLO embedded device health info would display blank
      content under RBSU when the Language was set to Japanese or Chinese.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_10-19-2023
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where Restore Manufacturing Defaults and Restore Defaults
      from iLO web did not restore the Secure Boot Status.
      
      Addressed an issue where BIOS did not report CPU status correctly to iLO, and
      OneView would receive notification when Uncorrectable Machine Check Exception
      (UMCE) occurs.
      
      Addressed an issue where system might hang while accessing IML logs from RBSU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_02-22-2024
changelog:
  -     *Important Notes:**
      
      This version of the System ROM should be paired with Server Platform Services
      (SPS) Firmware 04.01.05.002.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where SBCE and ECC storm records may disappear from AHS.
      
      Addressed an issue where the iSCSI SW IPv6 HDD is not found under OS when the
      iSCSI IpAddressType is set to Auto.
      
      Addressed an issue where the server may hang due to an IE function error.
      
      Merged the solutions from EDK2 for vulnerabilities:
      
      \- Buffer overflow in the DHCPv6 client via a long Server ID option
      
      \- Out-of-bounds read when handling a ND Redirect message with truncated
      options
      
      \- Infinite loop when parsing unknown options in the Destination Options
      header
      
      \- Infinite loop when parsing a PadN option in the Destination Options header
      
      \- Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise
      message
      
      \- Predictable TCP ISNs
      
      \- Use of a Weak PseudoRandom Number Generator
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.69_08-19-2022
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Enhanced the system thermal settings to provide improved acoustics when the
      server is configured in legacy boot mode with M.2 SSDs.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.20_10-31-2019
changelog:
  -     Added support for HPE Persistent Memory featuring Intel Optane DC Persistent
      Memory.
      
      Updated to the latest thermal support for the platform.
      
      Updated the language translations (non-English modes) for System Utilities.
      
      Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.36_07-16-2020
changelog:
  -     See the release document U39_2.36_07_16_2020 in Download Product Binaries page
      from Product Summary of the firmware product.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.36_07-16-2020
changelog:
  -     See the release document U41_2.36_07_16_2020 in Download Product Binaries page
      from Product Summary of the firmware product.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.02_10-02-2018
changelog:
  -     Added support for flashing the firmware of the optional HPE Trusted Platform
      Module (TPM). This is the minimum revision of the System ROM that should be
      used if updating the firmware on the optional HPE TPM module.
      
      Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.02_10-02-2018
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the X2APIC Processor Option setting in the
      BIOS/Platform Configuration (RBSU) is not properly enabling the feature. This
      may result in non-optimal operating system performance.
      
      Addressed an issue where early server video output, on a locally attached
      monitor, may not show correctly when the monitor is attached to the server
      through a KVM. This issue does not impact systems that are not using a KVM or
      video output through the iLO Remote Console application.
      
      Addressed an issue where firmware flashing through the RESTful API could
      periodically fail and the task being marked with an exception in the iLO
      firmware page. This issue could impact flashing firmware such as the HPE
      Innovation Engine, Intel SPS Firmware or the optional HPE Trusted Platform
      Module (TPM).
      
      Addressed an issue where a PCIe card would not properly train to its maximum
      speed when the PCIe Bifurcation option was enabled. This issue does not impact
      PCIe cards that do not require bifurcation.
      
      Addressed an extremely rare issue where a system configured with an optional
      SATA DVD drive and an HPE SmartArray controller may become unresponsive during
      boot, usually with a Red Screen (RSOD), when in legacy boot mode. This issue
      does not impact systems in UEFI Boot Mode.
      
      Addressed an issue where an optional PCIe card's legacy option ROM may not
      properly display its legacy setup menu prompt during boot when in legacy boot
      mode. This issue does not impact systems in UEFI Boot Mode.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20_02-02-2019
changelog:
  -     Added support for HPE One button secure erase. This option can be launched
      from the HPE Intelligent Provisioning application or through the HPE RESTful
      API to securely restore the system back to a default configuration. This
      option also requires iLO firmware 1.40 or later, and Intelligent Provisioning
      3.30 or later.
      
      Added Secure Configuration Lock feature. This feature can be enabled to detect
      system hardware, security configuration, or firmware revision changes to
      protect against malicious or unintended modifications to the server. This
      protection can be enabled for systems in transit from the factory to the
      customer site, in transit from one customer site to another, or can be left
      enabled on a deployed server. A new BIOS/Platform Configuration (RBSU) Server
      Configuration Lock menu in the Server Security Options is available to enable
      and configure this functionality.
      
      Added a new BIOS/Platform Configuration (RBSU) Backup and Restore Settings
      menu to System Default Options. This option can be used to backup (save off)
      the current BIOS configurations settings to a USB storage device for migration
      to another server.
      
      Updated the language translations (non-English modes) for System Utilities.
      
      Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20_02-02-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the UEFI EDK2
      support that provides mitigations for a variety of security vulnerabilities.
      The following vulnerabilities have been addressed in this System ROM release:
      CVE-2018-3613 CVE-2017-5731, CVE-2017-5732, CVE-2017-5733, CVE-2017-5734,
      CVE-2017-5735, CVE-2018-3630, CVE-2018-12178, CVE-2018-12179, CVE-2018-12180,
      CVE-2018-12181, CVE-2018-12182 and CVE-2018-12183. These security
      vulnerabilities are not unique to HPE servers.
      
      Addressed an issue where certain processors (i3, Pentium, or Celeron) were
      incorrectly showing support for SGX in BIOS/Platform Configuration (RBSU) when
      they should not. Customers using an i3, Pentium, or Celeron processor with SGX
      enabled need to back up any SGX protected data before updating to the DL20
      Gen10 1.20_01_28_2019 or later BIOS versions. Failure to do so will result in
      any SGX protected data becoming inaccessible. This issue is not unique to HPE
      servers.
      
      Addressed an issue where certain PCIe option cards may not train properly and
      cause the system to hang during POST. This issue is not unique to HPE servers.
      
      Addressed an issue in which the system may not properly boot to the HPE 8GB
      Dual microSD Flash USB Drive when an SD card is installed on the internal SD
      slot when the system is configured for Legacy Boot Mode. This issue does not
      impact systems in UEFI Boot Mode.
      
      Addressed an issue where certain 3rd party USB drive keys may not function
      properly after a system reset when the system is configured in UEFI Boot Mode.
      
      Addressed an issue where the HPE CN1000E-T adapter may not boot properly in
      Legacy Boot Mode. This issue does not impact systems configured in UEFI Boot
      Mode.
      
      Addressed an issue where firmware updates staged through the HPE RESTful API
      may fail to properly execute on a subsequent boot and be marked with an
      exception in the iLO firmware installation queue.
      
      Addressed an issue where iLO virtual media may not boot properly after setting
      the Boot on Next Reset option in the iLO Remote Console and Media - Virtual
      Media settings.
      
      Addressed an issue where the AHS Download application from the System
      Utilities Embedded Applications or UEFI Shell may fail to work properly with
      iLO firmware 1.30 or later.
      
      Addressed an issue where the UEFI Shell sysconfig command may fail to set an
      option or become unresponsive.
      
      Addressed an issue where an optional SATA DVD drive may not unlock and allow
      media to be ejected after an operating system reboot.
      
      Addressed an issue where the system may become unresponsive during boot and
      experience a Red Screen (RSOD) when booting in Legacy Boot mode with a SATA
      M.2 drive installed. This issue does not impact systems in UEFI Boot Mode.
      
      Addressed an issue where a USB KVM, such as the HP AF611A KVM, may not
      function properly after a system reboot.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.22_04-04-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Updated the Intel processor microcode to the latest version.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.00_09-05-2019
changelog:
  -     Updated the UEFI OpenSSL support to version 1.0.2r to address security
      vulnerability CVE-2019-1559.
      
      Updated the system thermal logic to support the latest system configurations.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.00_09-05-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the Intel (Software Guard Extensions) SGX remote
      attestation functionality would not work correctly. This only affects
      customers who have installed Intel SGX enabled applications and have enabled
      SGX in RBSU.
      
      Addressed an issue where the Server Backup and Restore functionality may not
      work properly if initiated through the HPE RESTful API returning a message "An
      internal error occurred during RIS operation".
      
      Addressed an issue where the NVMe PCIe Resource Padding option in
      BIOS/Platform Configuration (RBSU) would not properly allocated sufficient
      resources to support a NVMe hot add event. In certain configurations, an
      insufficient amount of resources would have been reserved and a reboot would
      have been required to detect the presence of the newly added drive.
      
      Addressed an issue where the system would not boot to a USB drive when a non-
      bootable (non-formatted) drive was also present in the system. This issue only
      impacts systems configured in Legacy Boot Mode.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.10_09-12-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigation for CVE-2017-5715, CVE-2019-11135,
      CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2018-11091. These
      issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigation for an Intel sighting where under complex
      micro-architectural conditions, executing X87 or AVX or integer divide
      instructions may results in unpredictable system behavior. This issue is not
      unique to HPE servers.
      
      Addressed an issue where the server may experience a Red Screen (RSOD) during
      boot when a Matrox GPU is present and the server is booting in Legacy Boot
      Mode. This problem could occur with other optional PCIe graphics adapters.
      This issue is not intermittent and will occur on every boot with impacted
      optional PCIe graphics adapters with previous System ROM revisions. This issue
      is not seen with servers configured in UEFI Boot Mode or when using the
      embedded graphics controller.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.12_12-06-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode and reference code which provides mitigation for CVE-2019-11157.
      This security vulnerability is not unique to HPE servers. This vulnerability
      only impacts systems with Intel SGX (Software Guard eXtentions) enabled (SGX
      is disabled by default). HPE strongly recommends that customers using SGX
      functionality upgrade to this revision of the System ROM to obtain mitigation
      for this vulnerability.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.16_05-25-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigations for security vulnerabilities documented
      as CVE-2020-0543 as well as CVE-2020-0548 and CVE-2020-0549, also known as
      CacheOut. These security vulnerabilities are documented in Intel Security
      Advisories INTEL-SA-00320 and INTEL-SA-00329. These issues are not unique to
      HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code which provides mitigations for security vulnerabilities
      documented as CVE-2020-0528 and CVE-2020-0529. These security vulnerabilities
      are documented in Intel Security Advisory INTEL-SA-00322. These issues are not
      unique to HPE servers.
      
      Addressed an issue where the serial port would not function properly when the
      iLO CLI serial interface was also enabled on the platform. This could lead to
      the serial BAUD rate not being configured properly and the serial output from
      the host would be corrupted or no output would be seen.
      
      Addressed an extremely rare issue where the system could become unresponsive
      in POST when configured in Legacy Boot Mode when a USB Mouse is attached. This
      issue does not impact systems configured in UEFI Boot Mode.
      
      Addressed an issue where boot devices could disappear from the Boot Options
      menu in the BIOS/Platform Configuration (RBSU) when pressing the F10 or F12
      key to save boot order changes.
      
      Addressed an issue where the server may become unresponsive during POST with a
      Red Screen Exception (RSOD) when the server was reset (restarted) at the same
      time that an iLO firmware reset was initiated. Note that updating iLO firmware
      results in the reset of iLO firmware.
      
      Addressed an issue where the System Utilities System Information data could
      not be successfully exported to an FTP (network) location. Previously the
      System Utilities would report the file was saved successfully but no actual
      information was saved on the network share.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.18_06-24-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode for Intel Pentium processors which provides mitigations for security
      vulnerabilities documented as CVE-2020-0543 as well as CVE-2020-0548 and
      CVE-2020-0549. These security vulnerabilities are documented in Intel Security
      Advisories INTEL-SA-00320 and INTEL-SA-00329. These issues are not unique to
      HPE servers. This update does not impact systems using Intel Xeon based
      processors.
      
      Addressed an issue where the system would become unresponsive with a Red
      Screen or hang when booting to FreeBSD R12.1 from a USB device when in Legacy
      Boot Mode. This issue did not impact systems configured for UEFI Boot Mode or
      when booting from other types of media.
      
      Addressed an issue where a dual port networking device may show up in the
      System Configuration Utilities with two Port 1 names instead of properly being
      represented as Port 1 and Port 2. This did not impact any functionality to the
      device.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.50_07-20-2021
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2021.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Tianocore
      Edk2 Code which provides mitigations for BIOS advisories and security
      vulnerabilities documented as CVE-2019-14584, CVE-2021-28211 and
      CVE-2021-28210. These security vulnerabilities are documented in Tianocore
      Edk2 CVE details site. These issues are not unique to HPE servers.
      
      Addressed an issue with Pensando Distributed Services Platform DSC-25
      Enterprise 10/25Gb 2-port SFP28 Card missing in system information page.
      
      Addressed an issue where a PCIe device or an NVMe M.2 device may not show up
      correctly in iLO 5 Device Inventory or storage page.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.52_09-16-2021
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2021.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where High Precision Event Timer in Windows was not showing
      up in device manager.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.54_10-21-2021
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2021.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2021.2 which provides mitigations for BIOS advisories and security
      vulnerabilities documented as CVE-2021-0157. These security vulnerabilities
      are documented in the CVE report site. This issue is not unique to HPE
      servers.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.56_01-20-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2021.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes Intel Platform Update 2021.2 which
      provides mitigations for security vulnerabilities CVE-2021-0092,
      CVE-2021-0127, CVE-2021-0156 and CVE-2021-0157. These issues are not unique to
      HPE servers.
      
      Fixed an issue where system boot mode changed to Legacy mode from UEFI mode
      after IP flash complete and system may hang when entering IP after setting to
      UEFI mode.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.58_04-14-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigations for security vulnerability documented as
      CVE-2022-21166, CVE-2022-21125, CVE-2022-21123, CVE-2022-21127,
      CVE-2022-21151, and CVE-2022-0005. These security vulnerabilities are
      documented in Intel Security Advisory INTEL-SA-00617 and INTEL-SA-00614. These
      issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code which provides mitigations for BIOS advisories and security
      vulnerabilities documented as CVE-2021-0154, CVE-2021-0189, CVE-2021-33123,
      CVE-2021-33124, and CVE-2021-33159. These security vulnerabilities are
      documented in Intel Security Advisory INTEL-SA-00601 and INTEL-SA-00610. These
      issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of zlib library
      which provides mitigations for security vulnerability documented as
      CVE-2018-25032. This issue is not unique to HPE servers.
      
      Addressed an issue where the server may become unresponsive during POST with
      error messages about Unknown Initialization Error and DIMM Initialization
      Error. For more details please read the below advisory:
      https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.60_07-14-2022
changelog:
  -     *Important Notes:**
      
      When installing with HPE Smart Update Manager (SUM) 8.9.5 or earlier, the
      warning message "Component Not Signed" might be displayed for SHA-384 signed
      components. This issue will be resolved in a future version of SUM. For
      details, see https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&d
      ocId=a00125612en_us.
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of openSSL which
      provides mitigation for BIOS security vulnerabilities documented as
      CVE-2022-0778 (https://nvd.nist.gov/vuln/detail/CVE-2022-0778 ), CVE-2022-1292
      (https://nvd.nist.gov/vuln/detail/CVE-2022-2068 ) and CVE-2022-2068
      (https://nvd.nist.gov/vuln/detail/CVE-2022-1292). This security vulnerability
      is documented in the CVE report site. This issue is not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of FreeType
      library which provides mitigations for security vulnerabilities documented as
      CVE-2022-27404, CVE-2022-27405, and CVE-2022-27406. This issue is not unique
      to HPE servers.
      
      This revision of the System ROM includes the latest revision of Libpng library
      which provides mitigations for security vulnerability documented as
      CVE-2019-7317 (https://nvd.nist.gov/vuln/detail/CVE-2019-7317). This issue is
      not unique to HPE servers.
      
      Removed PCIe bifurcation option in the ROM Based Setup Utility (RBSU) because
      it is not supported through ROM on this platform.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.64_10-13-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.3 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2022.3 BIOS update which provides Intel's mitigation for BIOS advisory and
      security vulnerabilities documented as CVE-2022-26837. This security
      vulnerability is documented in the CVE report site. This issue is not unique
      to HPE servers.
      
      Addressed an issue where firmware BootTimer would cause a black screen hang
      when switching TPM 1.2 to 2.0.
      
      Addressed an issue TPM Visibility option in ROM Based Setup Utility (RBSU)
      would be greyed out after upgrading the system ROM from 2.54 to 2.58.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.68_01-12-2023
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2023.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2023.1 BIOS update which provides Intel's mitigation for BIOS advisory and
      security vulnerabilities documented as CVE-2022-33894 and CVE-2022-26837. This
      security vulnerability is documented in the CVE report site. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the revision of the zlib library
      1.2.13 update which provides mitigation for security vulnerabilities
      documented as CVE-2022-37434.
      
      Addressed an issue that system will hang when BIOS tries to print a large IML
      message on POST screen.
      
      Addressed an issue when system discovers thousands of LUNs and was trying to
      create thousands of boot options for each LUN. System cannot add, delete or
      adjust new boot options on iLO web and RBSU after rebooting. System becomes
      unstable unless loading manufacture defaults.
      
      Addressed an issue where some Chinese and Japaneses translations were missing
      from RBSU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.72_04-20-2023
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2023.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2023.2 BIOS update which provides Intel's mitigation for BIOS advisory and
      security vulnerabilities documented as CVE-2022-33894 and CVE-2022-38087. This
      security vulnerability is documented in the CVE report site. This issue is not
      unique to HPE servers.
      
      Addressed an issue where the PCIe device serial number in OEM SMBIOS type 203
      does not populate in some cases.
      
      Addressed an issue where the power-on-password dialog popped up even though
      user did not set a password.
      
      Addressed an issue where the TPM status between RBSU and iLO web pages was not
      synchronized.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.80_07-20-2023
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2023.3 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and
      security vulnerabilities documented as CVE-2022-44611 and CVE-2022-40982. This
      security vulnerability is documented in the CVE report site. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.0.2zh update which provides mitigation for security vulnerabilities
      documented as CVE-2023-2650.
      
      Addressed an issue where iLO embedded device health info would display blank
      content under RBSU when the Language was set to Japanese or Chinese.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.90_10-19-2023
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where "Restore Manufacturing Defaults" and "Restore
      Defaults" from iLO web did not restore the Secure Boot Status.
      
      Addressed an issue where system might hang while accessing IML log from RBSU.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_02-01-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM contains updates aligned with the Intel
      Product Update (IPU) version IPU.2024.1 guidance. This revision of the System
      ROM includes the mitigation for vulnerabilities documented as CVE-2023-45853
      and CVE-2021-38575. This revision of the System ROM includes the revision of
      the OpenSSL library 1.0.2zi update which provides mitigation for security
      vulnerabilities documented as CVE-2023-3817. This revision of the System ROM
      includes the mitigation for NetworkPkg PXE IP stack vulnerabilities documented
      as CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232,
      CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, and
      CVE-2023-45237. This version of the System ROM should be paired with Server
      Platform Services (SPS) Firmware 05.01.04.913.
      
      **Firmware Dependencies:**
      
      **Problems Fixed:**
      
      This revision of the System ROM contains updates aligned with the Intel
      Product Update (IPU) version IPU.2024.1 guidance.
      
      This revision of the System ROM includes the mitigation for vulnerabilities
      documented as CVE-2023-45853 and CVE-2021-38575.
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.0.2zi update which provides mitigation for security vulnerabilities
      documented as CVE-2023-3817.
      
      This revision of the System ROM includes the mitigation for NetworkPkg PXE IP
      stack vulnerabilities documented as CVE-2023-45229, CVE-2023-45230,
      CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234,
      CVE-2023-45235, CVE-2023-45236, and CVE-2023-45237.
      
      Addressed an issue where the operating system cannot detect the iSCSI hard
      drive through IPv6 installation if the iSCSI IpAddressType is set to auto.
      
      **Known Issues:**


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.00_02-01-2024
changelog:
  -     Redfish Property value changed from vN_N_N to N.N.N in uri:
      
      /redfish/v1/registrystore/registries/{lang}/biosattributeregistry{Platform}.vN
      _N_N
      
      there, {lang} = { en, ja, zh }, {platform} = Platform Name e.g. A55, U63 ,
      vN_N_N =
      
      version number defined as Redfish specification
      
      [Example]
      
      uri: /redfish/v1/registrystore/registries/zh/biosattributeregistrya55.v1_1_20
      
      Property of RegistryVersion is changed from v1_1_20 to 1.1.20


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.10_05-16-2024
changelog:
  -     *Important Notes:**
      
      This revision of the System ROM includes the mitigation for security
      vulnerabilities CVE-2023-45229, CVE-2022-36763, CVE-2022-36764,
      CVE-2021-38578, CVE-2023-5678 and CVE-2024-0727. The security vulnerabilities
      are documented in the CVE report site. They are not unique to HPE servers.
      This version of the System ROM should be paired with Server Platform Services
      (SPS) Firmware 05.01.04.913.
      
      **Firmware Dependencies:**
      
      None
      
      **Enhancements/New Features:**
      
      Added value "C6 without C1E" in System Configuration (RBSU) option "Power
      Management/Advanced Power Options menu/Minimum Processor Idle Power Core
      C-State". When selected, the Minimum Processor Idle Power Core C-State is C6
      with C1E disabled. This setting has the following Redfish property:
      /redfish/v1/systems/1/bios/MinProcIdlePower
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.40_08-01-2024
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2024.3 guidance. This version of the System ROM
      should be paired with Server Platform Services (SPS) Firmware 05.01.04.913.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where NS204i may not be identified as an NVMe device.
      
      Addressed an issue where the Logical Drive name was cleared in RBSU after
      leaving the configuration page of an MR controller.
      
      Addressed an issue where Windows Server 2025 HLK TPM2.0 UEFI Preboot Interface
      test failed on XL450 Gen10.
      
      Addressed an issue where WHLK HSTI test failed.
      
      Addressed an issue where the "Physical Drive missing" message appears twice in
      POST when a drive was removed and rebooted with incorrect severity in IML.
      
      Addressed an issue where the boot order was cleared unexpectedly after
      configuring System Configuration (RBSU) options and navigating to Boot Options
      > UEFI Boot Settings > UEFI Boot Order, and then pressing F12 to Save and
      Exit.
      
      Addressed an issue where system may encounter an RSOD while updating the SAS
      drive FW via HPE Service Packs, including, but not limited to, VMware ESXi
      Online HDD FW Component Bundle 16.00, HPE Synergy Service Pack (SSP)
      2024.01.02 (January 2024) and the future HPE Synergy Service Pack (SSP)
      2024.07.01 (July 2024).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.40_08-01-2024
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2024.3 guidance. This version of the System ROM
      should be paired with Server Platform Services (SPS) Firmware 05.01.04.913.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where NS204i may not be identified as an NVMe device.
      
      Addressed an issue where the Logical Drive name was cleared in RBSU after
      leaving the configuration page of an MR controller.
      
      Addressed an issue where WHLK HSTI test failed.
      
      Addressed an issue where the "Physical Drive missing" message appears twice in
      POST when a drive was removed and rebooted with incorrect severity in IML.
      
      Addressed an issue where the boot order was cleared unexpectedly after
      configuring System Configuration (RBSU) options and navigating to Boot Options
      > UEFI Boot Settings > UEFI Boot Order, and then pressing F12 to Save and
      Exit.
      
      Addressed an issue where system may encounter an RSOD while updating the SAS
      drive FW via HPE Service Packs, including, but not limited to, VMware ESXi
      Online HDD FW Component Bundle 16.00, HPE Synergy Service Pack (SSP)
      2024.01.02 (January 2024) and the future HPE Synergy Service Pack (SSP)
      2024.07.01 (July 2024).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.50_01-16-2025
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2025.1 guidance.
      
      This version of the System ROM should be paired with Server Platform Services
      (SPS) Firmware 05.01.05.005.
      
      
      
      Details about reported security vulnerabilities and their mitigation can be
      found at the following link [Security Bulletin Library | HPE Support](https://
      support.hpe.com/connect/s/securitybulletinlibrary?language=en_US).
      
      
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system would use UUID for IPV6 DHCP when
      "RBSU\Network Options\Network Boot Options\IPv6 DHCP Unique Identifier\DUID-
      LLT" is selected.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 3.52_02-21-2025
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2025.1 guidance. Thisversion of the System ROM
      should be paired with Server Platform Services (SPS) Firmware 05.01.05.005.
      
      Details about reported security vulnerabilities and their mitigation can be
      found at the following link [Security Bulletin Library | HPE Support](https://
      support.hpe.com/connect/s/securitybulletinlibrary?language=en_US).
      
      **Firmware Dependencies:**
      
      **Problems Fixed:**
      
      Addressed an issue where the system iLO remote console might hang when the
      System Utilities Language is set to Japanese.
      
      **Known Issues:**


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.02_10-02-2018
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the X2APIC Processor Option setting in the
      BIOS/Platform Configuration (RBSU) is not properly enabling the feature. This
      may result in non-optimal operating system performance.
      
      Addressed an issue where early server video output, on a locally attached
      monitor, may not show correctly when the monitor is attached to the server
      through a KVM. This issue does not impact systems that are not using a KVM or
      video output through the iLO Remote Console application.
      
      Addressed an issue where firmware flashing through the RESTful API could
      periodically fail and the task being marked with an exception in the iLO
      firmware page. This issue could impact flashing firmware such as the HPE
      Innovation Engine, Intel SPS Firmware or the optional HPE Trusted Platform
      Module (TPM).
      
      Addressed an issue where a PCIe card would not properly train to its maximum
      speed when the PCIe Bifurcation option was enabled. This issue does not impact
      PCIe cards that do not require bifurcation.
      
      Addressed an extremely rare issue where a system configured with an optional
      SATA DVD drive and an HPE SmartArray controller may become unresponsive during
      boot, usually with a Red Screen (RSOD), when in legacy boot mode. This issue
      does not impact systems in UEFI Boot Mode.
      
      Addressed an issue where an optional PCIe card's legacy option ROM may not
      properly display its legacy setup menu prompt during boot when in legacy boot
      mode. This issue does not impact systems in UEFI Boot Mode
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.20_02-02-2019
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the UEFI EDK2
      support that provides mitigations for a variety of security vulnerabilities.
      The following vulnerabilities have been addressed in this System ROM release:
      CVE-2018-3613 CVE-2017-5731, CVE-2017-5732, CVE-2017-5733, CVE-2017-5734,
      CVE-2017-5735, CVE-2018-3630, CVE-2018-12178, CVE-2018-12179, CVE-2018-12180,
      CVE-2018-12181, CVE-2018-12182 and CVE-2018-12183. These security
      vulnerabilities are not unique to HPE servers.
      
      Addressed an issue where certain processors (i3, Pentium, or Celeron) were
      incorrectly showing support for SGX in BIOS/Platform Configuration (RBSU) when
      they should not. Customers using an i3, Pentium, or Celeron processor with SGX
      enabled need to back up any SGX protected data before updating to the ML30
      Gen10 1.20_01_28_2019 or later BIOS versions. Failure to do so will result in
      any SGX protected data becoming inaccessible. This issue is not unique to HPE
      servers.
      
      Addressed an issue where certain PCIe option cards may not train properly and
      cause the system to hang during POST. This issue is not unique to HPE servers.
      
      Addressed an issue in which the system may not properly boot to the HPE 8GB
      Dual microSD Flash USB Drive when an SD card is installed on the internal SD
      slot when the system is configured for Legacy Boot Mode. This issue does not
      impact systems in UEFI Boot Mode.
      
      Addressed an issue where certain 3rd party USB drive keys may not function
      properly after a system reset when the system is configured in UEFI Boot Mode.
      
      Addressed an issue where the HPE CN1000E-T adapter may not boot properly in
      Legacy Boot Mode. This issue does not impact systems configured in UEFI Boot
      Mode.
      
      Addressed an issue where firmware updates staged through the HPE RESTful API
      may fail to properly execute on a subsequent boot and be marked with an
      exception in the iLO firmware installation queue.
      
      Addressed an issue where iLO virtual media may not boot properly after setting
      the Boot on Next Reset option in the iLO Remote Console and Media - Virtual
      Media settings.
      
      Addressed an issue where the AHS Download application from the System
      Utilities Embedded Applications or UEFI Shell may fail to work properly with
      iLO firmware 1.30 or later.
      
      Addressed an issue where the UEFI Shell sysconfig command may fail to set an
      option or become unresponsive.
      
      Addressed an issue where an optional SATA DVD drive may not unlock and allow
      media to be ejected after an operating system reboot.
      
      Addressed an issue where the system may become unresponsive during boot and
      experience a Red Screen (RSOD) when booting in Legacy Boot mode with a SATA
      M.2 drive installed. This issue does not impact systems in UEFI Boot Mode.
      
      Addressed an issue where a USB KVM, such as the HP AF611A KVM, may not
      function properly after a system reboot.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.16_05-25-2020
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigations for security vulnerabilities documented
      as CVE-2020-0543 as well as CVE-2020-0548 and CVE-2020-0549, also known as
      CacheOut.  These security vulnerabilities are documented in Intel Security
      Advisories INTEL-SA-00320 and INTEL-SA-00329.  These issues are not unique to
      HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code which provides mitigations for security vulnerabilities
      documented as CVE-2020-0528 and CVE-2020-0529.  These security vulnerabilities
      are documented in Intel Security Advisory INTEL-SA-00322.  These issues are
      not unique to HPE servers.
      
      Addressed an issue where the serial port would not function properly when the
      iLO CLI serial interface was also enabled on the platform. This could lead to
      the serial BAUD rate not being configured properly and the serial output from
      the host would be corrupted or no output would be seen.
      
      Addressed an extremely rare issue where the system could become unresponsive
      in POST when configured in Legacy Boot Mode when a USB Mouse is attached. This
      issue does not impact systems configured in UEFI Boot Mode.
      
      Addressed an issue where boot devices could disappear from the Boot Options
      menu in the BIOS/Platform Configuration (RBSU) when pressing the F10 or F12
      key to save boot order changes.
      
      Addressed an issue where the server may become unresponsive during POST with a
      Red Screen Exception (RSOD) when the server was reset (restarted) at the same
      time that an iLO firmware reset was initiated.  Note that updating iLO
      firmware results in the reset of iLO firmware.
      
      Addressed an issue where the System Utilities System Information data could
      not be successfully exported to an FTP (network) location. Previously the
      System Utilities would report the file was saved successfully but no actual
      information was saved on the network share.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.50_07-20-2021-2.1
changelog:
  -     *Important Notes:**
      
      Ver. 2.50_07-20-2021(B) contains updates to the firmware packaging and is
      functionally equivalent to ver. 2.50_07-20-2021. It is not necessary to
      upgrade with Revision B if a previous component revision was used to upgrade
      the firmware to version 2.50_07-20-2021.
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2021.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Tianocore
      Edk2 Code which provides mitigations for BIOS advisories and security
      vulnerabilities documented as CVE-2019-14584, CVE-2021-28211 and
      CVE-2021-28210. These security vulnerabilities are documented in Tianocore
      Edk2 CVE details site.  These issues are not unique to HPE servers.
      
      Addressed an issue with Pensando Distributed Services Platform DSC-25
      Enterprise 10/25Gb 2-port SFP28 Card missing in system information page.
      
      Addressed an issue where a PCIe device or an NVMe M.2 device may not show up
      correctly in iLO 5 Device Inventory or storage page.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.58_04-14-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigations for security vulnerability documented as
      CVE-2022-21166, CVE-2022-21125, CVE-2022-21123, CVE-2022-21127,
      CVE-2022-21151, and CVE-2022-0005. These security vulnerabilities are
      documented in Intel Security Advisory INTEL-SA-00617 and INTEL-SA-00614. These
      issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code which provides mitigations for BIOS advisories and security
      vulnerabilities documented as CVE-2021-0154, CVE-2021-0189, CVE-2021-33123,
      CVE-2021-33124, and CVE-2021-33159. These security vulnerabilities are
      documented in Intel Security Advisory INTEL-SA-00601 and INTEL-SA-00610. These
      issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of zlib library
      which provides mitigations for security vulnerability documented as
      CVE-2018-25032. This issue is not unique to HPE servers.
      
      Addressed an issue where the system ROM does not display Storage controller
      product names when the ROM Based Setup Utility (RBSU) language setting is non-
      English.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 2.30_02-11-2020
changelog:
  -     Updated the Workload Profile default to the High-Performance Computing (HPC)
      Profile.
      
      Added a new BIOS/Platform Configuration (RBSU) option to the Intel Persistent
      DC Performance Settings called Balanced Performance Mode. This option may
      improve performance of systems configured with Intel DC Persistent Memory with
      certain workloads.
      
      Updated to the latest thermal support for the platform.
      
      Updated the RESTful API HPE BIOS Attribute Registry resources to match the
      latest BIOS/Platform Configuration options.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.42_05-26-2021
changelog:
  -     Added a new BIOS/Platform Configuration (RBSU) option called Enhanced
      Processor Performance Profile. This option provides additional processor
      performance profiles that can be used to improve overall performance under
      certain workloads.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.42_05-26-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system may report an Unsupported Memory
      Configuration error when Intel DC Optane Persistent Memory is present with an
      Intel Xeon Silver 4314 processor. This issue does not impact systems
      configured with an Intel Xeon Gold or Platinum SKU processor.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.50_08-27-2021
changelog:
  -     Added support for Microsoft Windows Server 2022. Windows Server 2022 adds a
      new security feature called Secured-core. Secured-core is only supported on
      3rd Generation Intel Xeon Scalable Processors. Secured-core servers use a
      combination of hardware features, firmware enablement and Windows Server
      operating system capabilities to provide protection against malware and
      rootkit security exploits.
      
      Added a new BIOS/Platform Configuration (RBSU) option for Microsoft Secured-
      core Support. Enabling this setting makes the following policy changes and
      configures the corresponding options: Intel Virtualization Technology
      enabled, Intel VT-d enabled, Intel TXT Support enabled, Secure Boot enabled,
      TPM enabled in 2.0 mode. Disabling any of these features while Secured-core is
      enabled can prevent Secured-core from working properly.
      
      Added new RBSU option to Omit Boot Device Event in TPM PCR[4] following EDK2.
      Warning: changing the setting will affect TPM measurements and can impact
      software functionality which utilizes the TPM PCR registers such as Microsoft
      BitLocker. PCR[4] is the register that records the process of attempting to
      boot different hardware paths like from a a hard drive or CD, and what boot
      devices are attempted, and the Initial Program Loader (IPL) code that is
      loaded and executed from the device. If boot from one device fails,
      measurements in PCR[4] record the attempt to boot the next device or boot
      path. If recording which device attempted to boot is omitted with this option
      (i.e. enable this option), the BIOS records the event type
      EV_OMIT_BOOT_DEVICE_EVENTS in PCR[4], otherwise the event is not recorded.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.50_08-27-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where Intel VROC SATA and sSATA Controller shows as Unknown
      under firmware information page in RBSU.
      
      Addressed an issue where an error "Incorrect firmware file or no supported
      device" occurs when flashing the firmware of Intel E810 Ethernet Adapters.
      
      Addressed an issue where the server hangs when launching Embedded iPXE when
      IPv4 certification is enrolled and Network location is set as iPXE Auto-Start-
      Script.
      
      Addressed an issue where the server hangs at POST when configured with Intel
      Xeon Silver 4314 Processor and Intel OptaneTM Persistent Memory 200 Series
      installed.
      
      Addressed an issue where the server hangs when running Safe Mode boot without
      a DIMM installed on DIMM slot1.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.52_09-22-2021
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where NVMe SSDs May Be Listed As "UEFI Misc Device" in
      BIOS/Platform Configuration (RBSU) "One-Time Boot Menu" if Intel NVMe VROC is
      Enabled (Document ID: a00113593en_us).
      
      Addressed an issue where The NVMe Storage Drives Will Not De Displayed in the
      Integrated Lights-Out (iLO) Pages if Intel NVMe VROC (CPU/VMD) is Enabled
      (Document ID: a00113587en_us).
      
      Addressed an issue where Uncorrectable Memory Errors may be reported and
      logged to the Integrated Management Log (IML) with certain DIMMs installed and
      the RBSU "Extended Memory Test" option enabled. The "Extended Memory Test"
      option is disabled by default and this issue would only impact customers who
      had specifically configured this option to enabled. The reported Uncorrected
      Memory Errors were due to an issue with the impacted System ROM revisions and
      do NOT indicate an issue with the DIMMs themselves.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.58_01-13-2022
changelog:
  -     Changed the behavior of Restore Manufacturing Defaults from restoring the
      settings for UEFI, NICs and RAID cards to UEFI only.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.58_01-13-2022
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where if the administrator password and power-on password
      are set, after clearing power-on password, administrator password is also
      cleared.
      
      Addressed an issue (https://support.hpe.com/hpesc/public/docDisplay?docId=a001
      19362en_us&docLocale=en_US) where the systems with HPE NS204i-p NVMe OS Boot
      Device may shut down intermittently and may log the following System
      Overheating message in the Integrated Management Log (IML): "System
      Overheating (Temperature Sensor 47, Location I/O Board, Temperature61)
      ACTION:Check fans, processor heat sink and air baffles installation."
      
      Addressed an issue where the system may not automatically restart due to a
      hang condition during the boot process after a cold boot when the IPMI
      Watchdog Timer feature is enabled in the ROM-Based Setup Utility (RBSU).
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.60_06-01-2022
changelog:
  -     Added Protected Processor Inventory Number (PPIN) setting in ROM Based Setup
      Utility (RBSU) under Process Option Menu.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.60_06-01-2022
changelog:
  -     *Important Notes:**
      
      None
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel
      microcode which provides mitigations for security vulnerability documented as
      CVE-2022-21166, CVE-2022-21136, and CVE-2022-21151. These security
      vulnerabilities are documented in Intel Security Advisory INTEL-SA-00616, and
      INTEL-SA-00617. These issues are not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code which provides mitigations for BIOS advisories and security
      vulnerabilities documented as CVE-2022-0004. These security vulnerabilities
      are documented in Intel Security Advisory INTEL-SA-00613. These issues are not
      unique to HPE servers
      
      This revision of the System ROM includes the latest revision of openSSL and
      LibPng which provides mitigation for BIOS security vulnerabilities documented
      as CVE-2022-1292 and CVE-2019-7317. This security vulnerability is documented
      in the CVE report site. This issue is not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of zlib library
      which provides mitigations for security vulnerability documented as
      CVE-2018-25032. This issue is not unique to HPE servers.
      
      Addressed an issue where in the ROM Based Setup Utility (RBSU), PMem QoS
      Options cannot be set as disabled under Performance Options work profile with
      system ROM v1.58.
      
      Addressed an issue where the system fails to boot OpenShift Container Platform
      in UEFI boot and optimized boot modes.
      
      Addressed an issue where incorrect Drive Location is reported for HPE MegaRAID
      Gen10 Plus Storage Controllers under Secure Erase Report
      
      Addressed an issue where PCI network boot option shows only one port for Intel
      E810-2CQDA2 Ethernet 100Gb 2-port QSFP28 Adapter for HPE (P41611-B21) when
      bifurcation is enabled. More details can be found in the Customer Advisory
      (CA) link below: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-
      a00118261en_us
      
      Addressed an issue where the system ROM does not display Storage controller
      product names when the RBSU language setting is non-English.
      
      Addressed an issue where the IPMI Watchdog Timer (WDT) would continuously be
      re-enabled on reboots even after being disabled which causes the system to
      continuously reboot after the timeout is triggered.
      
      Addressed an issue where Advanced Memory Protection (AMP) status displays
      Degraded A3DC on iLO web page but there is no memory failure displayed in iLO.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.62_07-14-2022
changelog:
  -     *Important Notes:**
      
      When installing with HPE Smart Update Manager (SUM) 8.9.5 or earlier, the
      warning message "Component Not Signed" might be displayed for SHA-384 signed
      components. This issue will be resolved in a future version of SUM. For
      details, see https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&d
      ocId=a00125612en_us.
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2022.2 microcode update which provides Intel's mitigation for BIOS advisory
      and security vulnerability documented as CVE-2022-21233. This security
      vulnerabilities are documented in Intel Security Advisory INTEL-SA-00657. This
      issue is not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code which provides mitigations for BIOS advisories and security
      vulnerability documented as CVE-2021-33060. This security vulnerabilities are
      documented in Intel Security Advisory INTEL-SA-00686. These issues are not
      unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of openSSL which
      provides mitigation for BIOS security vulnerabilities documented as
      CVE-2022-0778 (https://nvd.nist.gov/vuln/detail/CVE-2022-0778) and
      CVE-2022-2068 (https://nvd.nist.gov/vuln/detail/CVE-2022-2068). This security
      vulnerability is documented in the CVE report site. This issue is not unique
      to HPE servers.
      
      This revision of the System ROM includes the latest revision of FreeType
      library which provides mitigations for security vulnerability documented as
      CVE-2022-27405 (https://nvd.nist.gov/vuln/detail/CVE-2022-27405). This issue
      is not unique to HPE servers.
      
      Addressed an issue where Microsoft Secured-core is not grayed-out when TPM is
      not present.
      
      Addressed an issue where the QR code in Rom Based Set Up menu linked to a
      discontinued site.
      
      Addressed an issue where a hot plug event occurring before event handler
      operates would cause ESXi kernel to call exception waiting for hot plug status
      from device and then triggered an ASSERT with PSOD (Purple Screen Of Death).
      
      Addressed an issue with displaying FW versions for Intel's latest ATS-M GPU
      cards.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.64_08-11-2022
changelog:
  -     *Important Notes:**
      
      For customers who had already upgraded to v1.62 7/14/2022 ROM, it is highly
      recommended to upgrade to this version v1.64 if customers have Intel Optane
      Persistent Memory 200 Series installed in their system.
      
      When installing with HPE Smart Update Manager (SUM) 8.9.5 or earlier, the
      warning message "Component Not Signed" might be displayed for SHA-384 signed
      components. This issue will be resolved in a future version of SUM. For
      details, see https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&d
      ocId=a00125612en_us.
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2022.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue from previous published ROM release v1.62 7/14/2022 in
      which systems with Intel Optane Persistent Memory 200 Series may not appear
      under an OS.
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2022.2 microcode update which provides Intel's mitigation for BIOS advisory
      and security vulnerability documented as CVE-2022-21233. This security
      vulnerabilities are documented in Intel Security Advisory INTEL-SA-00657. This
      issue is not unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of the Intel
      Reference Code which provides mitigations for BIOS advisories and security
      vulnerability documented as CVE-2021-33060. This security vulnerabilities are
      documented in Intel Security Advisory INTEL-SA-00686. These issues are not
      unique to HPE servers.
      
      This revision of the System ROM includes the latest revision of openSSL which
      provides mitigation for BIOS security vulnerabilities documented as
      CVE-2022-0778 (https://nvd.nist.gov/vuln/detail/CVE-2022-0778) and
      CVE-2022-2068 (https://nvd.nist.gov/vuln/detail/CVE-2022-2068). This security
      vulnerability is documented in the CVE report site. This issue is not unique
      to HPE servers.
      
      This revision of the System ROM includes the latest revision of FreeType
      library which provides mitigations for security vulnerability documented as
      CVE-2022-27405 (https://nvd.nist.gov/vuln/detail/CVE-2022-27405). This issue
      is not unique to HPE servers.
      
      Addressed an issue where Microsoft Secured-core is not grayed-out when TPM is
      not present.
      
      Addressed an issue where the QR code in Rom Based Set Up menu linked to a
      discontinued site.
      
      Addressed an issue where a hot plug event occurring before event handler
      operates would cause ESXi kernel to call exception waiting for hot plug status
      from device and then triggered an ASSERT with PSOD (Purple Screen Of Death).
      
      Addressed an issue with displaying FW versions for Intel's latest ATS-M GPU
      cards.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.68_10-27-2022
changelog:
  -     Added support to show manufacturing date for DIMMs in SMBIOS.
      
      This revision of the System ROM includes an updated revision of Intel VROC
      UEFI driver.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.68_10-27-2022
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel PLR3
      OOB guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel PLR3
      OOB update which provides Intel's mitigation for BIOS advisory and security
      vulnerability documented as CVE-2022-33972. This security vulnerability is
      documented in the CVE report site. This issue is not unique to HPE servers.
      
      Addressed an issue where an HPE MR controller's name is displayed abnormally
      after setting the language to Japanese in ROM Based Setup Utility (RBSU)
      rebooting the system.
      
      Addressed an issue where the Boot timer record was increasing incorrectly
      after every warm reboot.
      
      Addressed a possible hang issue when using a newer PCIe device with a very
      high PCI bus requirement.
      
      Addressed an issue where "Reboot Required" radio button isn't highlighted
      after BIOS restore.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.72_02-02-2023
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2023.1 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2023.1 BIOS update which provides Intel's mitigation for BIOS advisory and
      security vulnerabilities documented as CVE-2022-21216, CVE-2022-32231,
      CVE-2022-26343, CVE-2022-33196, CVE-2022-38090 and CVE-2022-33972. This
      security vulnerability is documented in the CVE report site. This issue is not
      unique to HPE servers.
      
      This revision of the System ROM includes the revision of the zlib library
      1.2.13 update which provides mitigation for and security vulnerabilities
      documented as CVE-2022-37434.
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.1.1s update which provides mitigation for security vulnerabilities
      documented as CVE-2022-2097.
      
      Addressed an issue where the controller name was not displayed in Japanese
      when MegaRAID was switched to Japanese, .
      
      Addressed an issue where NVMe drive info was not displayed properly in iLO
      when Intel PCH VMD is enabled in RBSU.
      
      Addressed an issue where Intel VROC SATA firmware shows N/A under PCI Device
      information.
      
      Addressed an issue when system discovers thousands of LUNs and was trying to
      create thousands of boot options for each LUNs. System cannot add, delete or
      adjust new boot options on iLO web and RBSU after rebooting. System becomes
      unstable unless loading manufacture default.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.72_02-02-2023
changelog:
  -     Added "Important: Intel(R) NVMe and Intel(R) VROC are not supported when the
      Boot Mode is configured in Legacy BIOS Mode." message into the RBSU help
      description for Intel NVMe VROC option.
      
      Added new System Configuration (RBSU) configuration options that allow
      enabling and disabling EPP (Energy Performance Preference) when "Workload
      Profile" sets to "Custom" and "Power Regulator" sets to "OS Control Mode".
      
      Downgraded several debug messages from DEBUG_ERROR to DEBUG_INFO level.
      Removed unnecessary error messages in BIOS serial log.


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.76_04-20-2023
changelog:
  -     Added new System Configuration (RBSU) configuration options that allow user
      input frequency scaling of the processor's internal busses. In System
      Configuration (RBSU), the options is located under "Uncore Frequency Scaling"
      option in "Power and Performance Options". This setting has the following
      Redfish properties.
      
      /redfish/v1/systems/1/bios/settings/UncoreFrequencyMax
      
      /redfish/v1/systems/1/bios/settings/UncoreFrequencyMin
      
      Added new System Configuration (RBSU) configuration options that allow
      disabling Dynamic Loadline switches between EPB modes depending on the P-state
      behavior. Enable or disable the switch could affect the power and performance
      by condition. In System Configuration (RBSU), the options is located under
      "Power and Performance Options". This setting has the following Redfish
      properties.
      
      /redfish/v1/systems/1/bios/settings/DynamicLoadlineSwitch


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.76_04-20-2023
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2023.2 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      Addressed an issue where the system would hang after uploading the Samsung
      1733/1735 U.3 NVMe Drive firmware through FMP.
      
      Addressed an issue where PMEM NUMA nodes were not continuous (3, 5) under 8 8
      isolated NUMA nodes configuration.
      
      Addressed an issue where a drive could not be unmounted when hot-plug
      interrupt was generated during the DPC recovery process, with the event going
      over the DPC threshold.
      
      Addressed an issue where the TPM status between RBSU and iLO web pages was not
      synchronized.
      
      **Known Issues:**
      
      None


author: HP Linux Development <Linux_SWdeliverables@external.groups.hpe.com> 1.80_07-05-2023
changelog:
  -     *Important Notes:**
      
      This version of the System ROM contains updates aligned with the Intel Product
      Update (IPU) version IPU.2023.3 guidance.
      
      **Firmware Dependencies:**
      
      None
      
      **Problems Fixed:**
      
      This revision of the System ROM includes the latest revision of the Intel IPU
      2023.3 BIOS update which provides Intel's mitigation for BIOS advisory and
      security vulnerabilities documented as CVE-2022-43505, CVE-2022-40982,
      CVE-2023-23908 and CVE-2022-41804. This security vulnerability is documented
      in the CVE report site. This issue is not unique to HPE servers.
      
      Address an issue where an abnormal power-on-password dialog would pop up even
      though user did not set a password.
      
      Address the issue where the RBSU "Storage Device Information" was empty when
      VROC is enabled.
      
      This revision of the System ROM includes the revision of the OpenSSL library
      1.1.1u update which provides mitigation for security vulnerabilities
      documented as CVE-2023-0286, CVE-2022-4304 and CVE-2023-2650.
      
      Address the issue where the TPM status displayed in RBSU and iLO web page was
      not in sync.
      
      Address the issue where Secure Boot would not be enabled when loading
      manufacturing default from iLO web.
      
      Address an issue where RSOD would occur when entering "System Information"
      from RBSU under legacy mode.
      
      **Known Issues:**
      
      None


