Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, and Factory Options.

Enabled BIOS log to AHS on every boot by default after a ROM update. Users can disable this setting through RBSU if desired.

Added a mechanism to send the BIOS log via iLO during system resets, improving diagnostic data capture for firmware update scenarios.

Improved logging and diagnostic output for drive, NIC, SPS, and IE firmware update operations, providing better observability through AHS logs.

Added logic to prevent personally identifiable information (PII) from being written to AHS logs while retaining visibility on the serial console.

Added SMM debug output to AHS shared memory for improved SMM-phase diagnostic data collection.

Added support for 8 GB and 16 GB iLO eMMC devices. Previously, only 2 GB and 4 GB were recognized; larger devices were misidentified due to a size calculation overflow.

Extended Asset Tag support from 32 bytes to 64 bytes in RBSU and SMBIOS Type 2/3 records.

Updated IML event data to include detection of the XD685 Pensando card booting into a Golden (recovery) image, enabling iLO to log the event and alert administrators.

This revision of the System ROM includes the mitigation for CVE-2026-22796 security vulnerability.

Added RBSU option for PCIe Resizable BAR (ReBAR) support. The new option is located in RBSU -> PCIe Device Configuration -> Advanced PCIe Configuration -> PCIe Resizable BAR. When enabled, GPUs and other suitable PCIe devices will be able to address a larger memory window. Default setting is Disabled. No impact if keeping the setting as default.

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Hardware Steering (HWS): Enabled HWS as a secondary option for the device steering mode. If Software Steering (SWS) is not supported, HWS will be used by default, assuming it is available. Firmware Steering (FW) will now serve as the default only when both SWS and HWS are unsupported.

• Hardware-Managed Flow Steering (HMFS): HMFS is a new approach to managing steering rules, where STEs are written to the ICM by hardware instead of software (as in software-managed steering). This enables a higher rate of rule insertion.

• Queue Affinity Bonding: Added support for 4-port bonding to allow users to add both p0 and p1 to a bond without requiring SSH access to the host or bringing down the driver beforehand.

• Multiple Doorbells per PF: Increased the number of doorbells from 1 to 8, distributing them in a round-robin manner across channel send and receive queues. This enhancement improves scalability on multi-core systems with high packet rates by reducing MMIO contention on doorbell addresses. In high packet-rate scenarios, Sub-NUMA Clustering is also required to maintain consistent channel packet rates.

• HQoS for Virtualization Solution: Added support for hierarchical group structures to enable multi-tier resource control, where parent groups enforce overall limits and child groups dynamically share available bandwidth. This design is essential for effective QoS enforcement, burst handling, and fair bandwidth allocation, ensuring workloads receive appropriate resources.

• Number of lanes Configuration when Auto-Negotiation is Disabled: Added support for specifying the number of lanes (protocol width) when auto-negotiation is disabled. Since each combination of speed and lane count corresponds to a unique link mode, this allows the user to select a specific link mode when auto-negotiation is off. This change aligns with a recent firmware update that requires the driver to provide a single link mode, rather than a bitmap based on the user-defined speed.

• Extend ODP Statistics with Operation Count: Added the following new page-granularity counters:
  • num_page_faults: counts the number of page fault events handled
  • num_invalidations: counts the number of page invalidation events handled

• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.

  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.

• Added support for RSS with crypto offload enabling the NIC to parallelize packet processing across CPU cores while performing encryption/decryption in hardware. Additionally, introduced a new l4_type_ext parameter with values: 0 (None), 1 (TCP), 2 (UDP), 3 (ICMP).
• Added an extra validation for the payload_len field in incoming NC-SI messages. Previously, invalid packets might have been accepted; now, such packets are silently dropped.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Hardware Steering (HWS): Enabled HWS as a secondary option for the device steering mode. If Software Steering (SWS) is not supported, HWS will be used by default, assuming it is available. Firmware Steering (FW) will now serve as the default only when both SWS and HWS are unsupported.

• Hardware-Managed Flow Steering (HMFS): HMFS is a new approach to managing steering rules, where STEs are written to the ICM by hardware instead of software (as in software-managed steering). This enables a higher rate of rule insertion.

• Queue Affinity Bonding: Added support for 4-port bonding to allow users to add both p0 and p1 to a bond without requiring SSH access to the host or bringing down the driver beforehand.

• Multiple Doorbells per PF: Increased the number of doorbells from 1 to 8, distributing them in a round-robin manner across channel send and receive queues. This enhancement improves scalability on multi-core systems with high packet rates by reducing MMIO contention on doorbell addresses. In high packet-rate scenarios, Sub-NUMA Clustering is also required to maintain consistent channel packet rates.

• HQoS for Virtualization Solution: Added support for hierarchical group structures to enable multi-tier resource control, where parent groups enforce overall limits and child groups dynamically share available bandwidth. This design is essential for effective QoS enforcement, burst handling, and fair bandwidth allocation, ensuring workloads receive appropriate resources.

• Number of lanes Configuration when Auto-Negotiation is Disabled: Added support for specifying the number of lanes (protocol width) when auto-negotiation is disabled. Since each combination of speed and lane count corresponds to a unique link mode, this allows the user to select a specific link mode when auto-negotiation is off. This change aligns with a recent firmware update that requires the driver to provide a single link mode, rather than a bitmap based on the user-defined speed.

• Extend ODP Statistics with Operation Count: Added the following new page-granularity counters:
  • num_page_faults: counts the number of page fault events handled
  • num_invalidations: counts the number of page invalidation events handled

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

Extended Asset Tag support to 64 bytes on with new iLO firmware.

Extended Asset Tag support to 64 bytes on with new iLO firmware.

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, and Factory Options. Extended Asset Tag support from 32 bytes to 64 bytes in RBSU and SMBIOS Type 2/3 records.

Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, and Factory Options. Extended Asset Tag support from 32 bytes to 64 bytes in RBSU and SMBIOS Type 2/3 records.

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• Introduces a DOCA PCC device API that enables retrieval of the DSCP value associated with a PCC flow when PCC operates in QP mode (for example, when ROCE_CC_SHAPER_COALESCE_P1=2 and ROCE_CC_SHAPER_COALESCE_P2=2 are configured via mlxconfig).
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events. Refer to DSP0248 for details.
• Added a validation step during firmware updates to detect whether the BMC is asserting write protection, helping diagnose and prevent update failures.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• mlxlink show_links now reports the full PCIe identifier (domain/segment + BDF), improving device-to-link mapping and avoiding ambiguous/duplicate BDF entries on multi-domain systems.
• Implemented IB extended port telemetry counters via the NSM Type 1 Get Port Telemetry Counters command, adding counters 19 and 20: NSM_LINK_ERROR_RECOVERY_COUNTER_CNTR_ID and NSM_LINK_DOWNED_COUNTER_CNTR_ID.
• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• Introduces a DOCA PCC device API that enables retrieval of the DSCP value associated with a PCC flow when PCC operates in QP mode (for example, when ROCE_CC_SHAPER_COALESCE_P1=2 and ROCE_CC_SHAPER_COALESCE_P2=2 are configured via mlxconfig).
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events. Refer to DSP0248 for details.
• Added a validation step during firmware updates to detect whether the BMC is asserting write protection, helping diagnose and prevent update failures.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• mlxlink show_links now reports the full PCIe identifier (domain/segment + BDF), improving device-to-link mapping and avoiding ambiguous/duplicate BDF entries on multi-domain systems.
• Implemented IB extended port telemetry counters via the NSM Type 1 Get Port Telemetry Counters command, adding counters 19 and 20: NSM_LINK_ERROR_RECOVERY_COUNTER_CNTR_ID and NSM_LINK_DOWNED_COUNTER_CNTR_ID.
• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version is in compliance with Intel IPU 2026.1 BKC guidance.

Known Issues:

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

Extended Asset Tag support to 64 bytes on with new iLO firmware.

Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, and Factory Options.

Enabled BIOS log to AHS on every boot by default after a ROM update. Users can disable this setting through RBSU if desired.

Added a mechanism to send the BIOS log via iLO during system resets, improving diagnostic data capture for firmware update scenarios.

Improved logging and diagnostic output for drive, NIC, SPS, and IE firmware update operations, providing better observability through AHS logs.

Added logic to prevent personally identifiable information (PII) from being written to AHS logs while retaining visibility on the serial console.

Added SMM debug output to AHS shared memory for improved SMM-phase diagnostic data collection.

Added support for 8 GB and 16 GB iLO eMMC devices. Previously, only 2 GB and 4 GB were recognized; larger devices were misidentified due to a size calculation overflow.

Extended Asset Tag support from 32 bytes to 64 bytes in RBSU and SMBIOS Type 2/3 records.

Updated IML event data to include detection of the XD685 Pensando card booting into a Golden (recovery) image, enabling iLO to log the event and alert administrators.

This revision of the System ROM includes the mitigation for CVE-2026-22796 security vulnerability.

Added RBSU option for PCIe Resizable BAR (ReBAR) support. The new option is located in RBSU -> PCIe Device Configuration -> Advanced PCIe Configuration -> PCIe Resizable BAR. When enabled, GPUs and other suitable PCIe devices will be able to address a larger memory window. Default setting is Disabled. No impact if keeping the setting as default.

• Enhanced performance of firmware exception path handling to better support increased numbers of configured SR-IOV instances.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

New features and changes included in version 16.35.4506:

• Added address validation in MLNX OEM CMD 0x0032 (get debug info) to be 4- bytes aligned.

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.

• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.

• Added support for RSS with crypto offload enabling the NIC to parallelize packet processing across CPU cores while performing encryption/decryption in hardware. Additionally, introduced a new l4_type_ext parameter with values: 0 (None), 1 (TCP), 2 (UDP), 3 (ICMP).
• Added an extra validation for the payload_len field in incoming NC-SI messages. Previously, invalid packets might have been accepted; now, such packets are silently dropped.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

• Enhanced performance of firmware exception path handling to better support increased numbers of configured SR-IOV instances.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

New features and changes included in version 16.35.4506:

• Added address validation in MLNX OEM CMD 0x0032 (get debug info) to be 4- bytes aligned.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Hardware Steering (HWS): Enabled HWS as a secondary option for the device steering mode. If Software Steering (SWS) is not supported, HWS will be used by default, assuming it is available. Firmware Steering (FW) will now serve as the default only when both SWS and HWS are unsupported.

• Hardware-Managed Flow Steering (HMFS): HMFS is a new approach to managing steering rules, where STEs are written to the ICM by hardware instead of software (as in software-managed steering). This enables a higher rate of rule insertion.

• Queue Affinity Bonding: Added support for 4-port bonding to allow users to add both p0 and p1 to a bond without requiring SSH access to the host or bringing down the driver beforehand.

• Multiple Doorbells per PF: Increased the number of doorbells from 1 to 8, distributing them in a round-robin manner across channel send and receive queues. This enhancement improves scalability on multi-core systems with high packet rates by reducing MMIO contention on doorbell addresses. In high packet-rate scenarios, Sub-NUMA Clustering is also required to maintain consistent channel packet rates.

• HQoS for Virtualization Solution: Added support for hierarchical group structures to enable multi-tier resource control, where parent groups enforce overall limits and child groups dynamically share available bandwidth. This design is essential for effective QoS enforcement, burst handling, and fair bandwidth allocation, ensuring workloads receive appropriate resources.

• Number of lanes Configuration when Auto-Negotiation is Disabled: Added support for specifying the number of lanes (protocol width) when auto-negotiation is disabled. Since each combination of speed and lane count corresponds to a unique link mode, this allows the user to select a specific link mode when auto-negotiation is off. This change aligns with a recent firmware update that requires the driver to provide a single link mode, rather than a bitmap based on the user-defined speed.

• Extend ODP Statistics with Operation Count: Added the following new page-granularity counters:
  • num_page_faults: counts the number of page fault events handled
  • num_invalidations: counts the number of page invalidation events handled

Extended Asset Tag support to 64 bytes on with new iLO firmware.

Updated Intel Reference Code with IPU 2026.1, including updated microcode for Intel Xeon E-2400 series processors for improved system stability and performance.

Enhanced multi-language translation support for RBSU menus and options across Chinese, Japanese, and other supported languages.

Improved boot time reporting to Redfish BootProgress property for better visibility into system startup performance.

Extended Asset Tag support to 64 bytes on with new iLO firmware.

Red Hat Enterprise Linux 10.1

Updated to version 14.4.731.6

Red Hat Enterprise Linux 10.0

Updated to version 14.4.473.24

Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, and Factory Options.

Enabled BIOS log to AHS on every boot by default after a ROM update. Users can disable this setting through RBSU if desired.

Added a mechanism to send the BIOS log via iLO during system resets, improving diagnostic data capture for firmware update scenarios.

Improved logging and diagnostic output for drive, NIC, SPS, and IE firmware update operations, providing better observability through AHS logs.

Added logic to prevent personally identifiable information (PII) from being written to AHS logs while retaining visibility on the serial console.

Added SMM debug output to AHS shared memory for improved SMM-phase diagnostic data collection.

Added support for 8 GB and 16 GB iLO eMMC devices. Previously, only 2 GB and 4 GB were recognized; larger devices were misidentified due to a size calculation overflow.

Extended Asset Tag support from 32 bytes to 64 bytes in RBSU and SMBIOS Type 2/3 records.

Updated IML event data to include detection of the XD685 Pensando card booting into a Golden (recovery) image, enabling iLO to log the event and alert administrators.

This revision of the System ROM includes the mitigation for CVE-2026-22796 security vulnerability.

Added RBSU option for PCIe Resizable BAR (ReBAR) support. The new option is located in RBSU -> PCIe Device Configuration -> Advanced PCIe Configuration -> PCIe Resizable BAR. When enabled, GPUs and other suitable PCIe devices will be able to address a larger memory window. Default setting is Disabled. No impact if keeping the setting as default.

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.

• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.

  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

Extended Asset Tag support to 64 bytes on with new iLO firmware.

Red Hat Enterprise Linux 10.0

Updated to version 14.4.473.24

The raw driver files can be obtained by extracting the Smart Component and then extracting the Emulex installer.  Use this command:

    elxdrvr-fc-version.exe /q2 extract=2

The extracted files are located:

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version

Each kit folder has subsequent architecture folders with subsequent OS folders.  For example,

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version\x64\win2022

Added following Enhancement:

Reverted IRQ count to 128 from 240 in inf file to avoid resource constraints on low end server configurations

Added support for:

Azure local 24H2

The raw driver files can be obtained by extracting the Smart Component and then extracting the Emulex installer.  Use this command:

    elxdrvr-fc-version.exe /q2 extract=2

The extracted files are located:

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version

Each kit folder has subsequent architecture folders with subsequent OS folders.  For example,

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version\x64\win2022

Added following Enhancement:

Reverted IRQ count to 128 from 240 in inf file to avoid resource constraints on low end server configurations

Red Hat Enterprise Linux 10

Updated Driver version 10.02.14.00-k1

• Adds support for reporting RS-FEC histogram statistics via ethtool. These IEEE 802.3–defined histograms reveal the distribution of corrected codewords by number of symbol errors corrected per block, improving link quality diagnostics and enabling earlier detection of signal degradation.

• PTP Raw Cycle Counter Exposure – Extends the PTP subsystem and driver to expose the raw free-running cycle counter of PTP hardware clocks, enabling user space to obtain (cycle, system-time) pairs via new ioctls and correlate hardware cycle timestamps with host time without requiring PHC synchronization.

• TCP Header-Data Split Zero-Copy – Exposes header–data split to the TCP layer to enable TCP zero-copy. This allows all headers up to and including TCP to be processed in software, while payload data is DMA-transferred directly from the NIC to the GPU without CPU involvement, achieving true zero-copy.

• PCIe Congestion Event Counters – PCIe congestion events are events generated by the firmware when the device side has sustained PCIe inbound or outbound traffic above certain thresholds. This feature adds support for receiving and exposing such events as ethtool counters.

• PH and Steering Tags Support – Enables the device to provide "hints" indicating where MR TLPs should be processed in system memory.

• InfiniBand Service Record Resolution – Introduces APIs that translate an InfiniBand service name or ID into destination address details and allow querying that resolved IB addressing information.

• IPsec Offload for Active-Passive Bonding – Active-passive bonding aggregates multiple network devices into a single logical interface for higher redundancy. While bonding already supported IPsec offload, this completes full support by adding correct IPsec GSO offload and fixing several race conditions around failover.

• PSP Security Protocol – PSP Security Protocol support is now integrated into the core subsystem, with corresponding support implemented in the mlx5 driver. This enables mlx5 devices to recognize and handle PSP-secured traffic using the common core infrastructure.

• DOCA-Host Universal doca-sosreport Enablement – Adds doca-sosreport to all DOCA-Host profile packages (RoCE, OFED, Networking, and All) so the same support data collection tool is always available, regardless of which DOCA flavor is installed. It standardizes how system and DOCA-related diagnostics are gathered (e.g., host OS details, driver/module status, configuration, and relevant logs), making it faster and more consistent to capture troubleshooting bundles for analysis and support.

• Transition to Upstream DPDK Sourcing and Dependencies (DPDK 25.11+) – As DOCA transitions from MLNX_DPDK to upstream DPDK, all package dependencies switch to the upstream versions, and DPDK sources should be pulled from the official upstream repository, starting with DPDK 25.11 and tracking the latest releases from there.

• Querying Effective VF Bandwidth when in LAG Mode – Currently, the mlx5 driver reports only the parent function's link speed to VFs, with no way to retrieve the VF's effective bandwidth in LAG and MPESW setups. As a result, user space and upper-layer software cannot obtain accurate bandwidth information, which can lead to suboptimal traffic decisions. This new capability allows user space applications to query the effective port speed and receive real-time notifications when it changes. In LAG configurations, each mlx5 port reports the aggregated transmit bandwidth available to it.

• Extended DCB Traffic Class (TC) Rate Limiting - Extended DCB Traffic Class (TC) Rate Limiting, significantly increases the maximum configurable TC bandwidth on high-speed NICs. Previously, the TC max-rate field was limited to 8 bits, capping the value at 255 Gbps. With compatible firmware, the mlx5 driver now supports TC rate limits up to 65,535 Gbps (≈ 6.5 Tbps) through capability detection, while maintaining backward compatibility on legacy hardware.

• Hardware Steering (HWS): Enabled HWS as a secondary option for the device steering mode. If Software Steering (SWS) is not supported, HWS will be used by default, assuming it is available. Firmware Steering (FW) will now serve as the default only when both SWS and HWS are unsupported.

• Hardware-Managed Flow Steering (HMFS): HMFS is a new approach to managing steering rules, where STEs are written to the ICM by hardware instead of software (as in software-managed steering). This enables a higher rate of rule insertion.

• Queue Affinity Bonding: Added support for 4-port bonding to allow users to add both p0 and p1 to a bond without requiring SSH access to the host or bringing down the driver beforehand.

• Multiple Doorbells per PF: Increased the number of doorbells from 1 to 8, distributing them in a round-robin manner across channel send and receive queues. This enhancement improves scalability on multi-core systems with high packet rates by reducing MMIO contention on doorbell addresses. In high packet-rate scenarios, Sub-NUMA Clustering is also required to maintain consistent channel packet rates.

• HQoS for Virtualization Solution: Added support for hierarchical group structures to enable multi-tier resource control, where parent groups enforce overall limits and child groups dynamically share available bandwidth. This design is essential for effective QoS enforcement, burst handling, and fair bandwidth allocation, ensuring workloads receive appropriate resources.

• Number of lanes Configuration when Auto-Negotiation is Disabled: Added support for specifying the number of lanes (protocol width) when auto-negotiation is disabled. Since each combination of speed and lane count corresponds to a unique link mode, this allows the user to select a specific link mode when auto-negotiation is off. This change aligns with a recent firmware update that requires the driver to provide a single link mode, rather than a bitmap based on the user-defined speed.

• Extend ODP Statistics with Operation Count: Added the following new page-granularity counters:
  • num_page_faults: counts the number of page fault events handled
  • num_invalidations: counts the number of page invalidation events handled

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version is in compliance with Intel IPU 2026.1 BKC guidance.

Known Issues:

Ver. 1.0.4(D) contains updates to the firmware packaging and is functionally equivalent to ver. 1.0.4. It is not necessary to upgrade with Revision D if a previous component revision was used to upgrade the firmware to version 1.0.4.

Firmware Dependencies:

None

Enhancements/New Features:

Modified the ADC conversion formula based on the new layout design of Gen11 AMD platforms.  
Improved the accuracy of Fast Platform Triggering mechanism on AMD platforms.

Known Issues:

None

Ver. 1.0.4(B) contains updates to the firmware packaging and is functionally equivalent to ver. 1.0.4. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 1.0.4.

Firmware Dependencies:

None

Enhancements/New Features:

Modified the ADC conversion formula based on the new layout design of Gen11 AMD platforms.  
Improved the accuracy of Fast Platform Triggering mechanism on AMD platforms.

Known Issues:

None

Ver. 1.2.2(C) contains updates to the firmware packaging and is functionally equivalent to ver. 1.2.2. It is not necessary to upgrade with Revision C if a previous component revision was used to upgrade the firmware to version 1.2.2.

Firmware Dependencies:

None

Enhancements/New Features:

This is the initial verison of the firmware.

Known Issues:

None

Ver. 1.2.2(B) contains updates to the firmware packaging and is functionally equivalent to ver. 1.2.2. It is not necessary to upgrade with Revision B if a previous component revision was used to upgrade the firmware to version 1.2.2.

Firmware Dependencies:

None

Enhancements/New Features:

This is the initial verison of the firmware.

Known Issues:

None

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version is in compliance with Intel IPU 2025.3 guidance.

Known Issues:

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

Added Azure 24H2 support

Extended Asset Tag support to 64 bytes on with new iLO firmware.

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version is in compliance with Intel IPU 2026.1 BKC guidance.

Known Issues:

Red Hat Enterprise Linux 9.7

Updated to version 14.4.731.6

Red Hat Enterprise Linux 10.0

Updated to version 14.4.473.24

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, and Factory Options.

Enabled BIOS log to AHS on every boot by default after a ROM update. Users can disable this setting through RBSU if desired.

Added a mechanism to send the BIOS log via iLO during system resets, improving diagnostic data capture for firmware update scenarios.

Improved logging and diagnostic output for drive, NIC, SPS, and IE firmware update operations, providing better observability through AHS logs.

Added logic to prevent personally identifiable information (PII) from being written to AHS logs while retaining visibility on the serial console.

Added SMM debug output to AHS shared memory for improved SMM-phase diagnostic data collection.

Added support for 8 GB and 16 GB iLO eMMC devices. Previously, only 2 GB and 4 GB were recognized; larger devices were misidentified due to a size calculation overflow.

Extended Asset Tag support from 32 bytes to 64 bytes in RBSU and SMBIOS Type 2/3 records.

Updated IML event data to include detection of the XD685 Pensando card booting into a Golden (recovery) image, enabling iLO to log the event and alert administrators.

This revision of the System ROM includes the mitigation for CVE-2026-22796 security vulnerability.

Added RBSU option for PCIe Resizable BAR (ReBAR) support. The new option is located in RBSU -> PCIe Device Configuration -> Advanced PCIe Configuration -> PCIe Resizable BAR. When enabled, GPUs and other suitable PCIe devices will be able to address a larger memory window. Default setting is Disabled. No impact if keeping the setting as default.

The raw driver files can be obtained by extracting the Smart Component and then extracting the Emulex installer.  Use this command:

    elxdrvr-fc-version.exe /q2 extract=2

The extracted files are located:

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version

Each kit folder has subsequent architecture folders with subsequent OS folders.  For example,

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version\x64\win2022

The raw driver files can be obtained by extracting the Smart Component and then extracting the Emulex installer.  Use this command:

    elxdrvr-fc-version.exe /q2 extract=2

The extracted files are located:

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version

Each kit folder has subsequent architecture folders with subsequent OS folders.  For example,

    C:\Users\Administrator\Documents\Emulex\Drivers\FC-version\x64\win2022

• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• Introduces a DOCA PCC device API that enables retrieval of the DSCP value associated with a PCC flow when PCC operates in QP mode (for example, when ROCE_CC_SHAPER_COALESCE_P1=2 and ROCE_CC_SHAPER_COALESCE_P2=2 are configured via mlxconfig).
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events. Refer to DSP0248 for details.
• Added a validation step during firmware updates to detect whether the BMC is asserting write protection, helping diagnose and prevent update failures.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• mlxlink show_links now reports the full PCIe identifier (domain/segment + BDF), improving device-to-link mapping and avoiding ambiguous/duplicate BDF entries on multi-domain systems.
• Implemented IB extended port telemetry counters via the NSM Type 1 Get Port Telemetry Counters command, adding counters 19 and 20: NSM_LINK_ERROR_RECOVERY_COUNTER_CNTR_ID and NSM_LINK_DOWNED_COUNTER_CNTR_ID.
• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• Introduces a DOCA PCC device API that enables retrieval of the DSCP value associated with a PCC flow when PCC operates in QP mode (for example, when ROCE_CC_SHAPER_COALESCE_P1=2 and ROCE_CC_SHAPER_COALESCE_P2=2 are configured via mlxconfig).
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events. Refer to DSP0248 for details.
• Added a validation step during firmware updates to detect whether the BMC is asserting write protection, helping diagnose and prevent update failures.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• mlxlink show_links now reports the full PCIe identifier (domain/segment + BDF), improving device-to-link mapping and avoiding ambiguous/duplicate BDF entries on multi-domain systems.
• Implemented IB extended port telemetry counters via the NSM Type 1 Get Port Telemetry Counters command, adding counters 19 and 20: NSM_LINK_ERROR_RECOVERY_COUNTER_CNTR_ID and NSM_LINK_DOWNED_COUNTER_CNTR_ID.
• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.

Ver. 1.2.2(G) contains updates to the firmware packaging and is functionally equivalent to ver. 1.2.2. It is not necessary to upgrade with Revision G if a previous component revision was used to upgrade the firmware to version 1.2.2.

This Linux component is compatible with Service Pack for ProLiant 2024.11.00.00 and later.

Firmware Dependencies:

None

Enhancements/New Features:

This is the initial verison of the firmware.

Known Issues:

None

Ver. 1.2.2(C) contains updates to the firmware packaging and is functionally equivalent to ver. 1.2.2. It is not necessary to upgrade with Revision C if a previous component revision was used to upgrade the firmware to version 1.2.2.

Firmware Dependencies:

None

Enhancements/New Features:

This is the initial verison of the firmware.

Known Issues:

None

• Enhanced performance of firmware exception path handling to better support increased numbers of configured SR-IOV instances.
• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

New features and changes included in version 16.35.4506:

• Added address validation in MLNX OEM CMD 0x0032 (get debug info) to be 4- bytes aligned.

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

SuSE Linux Enterprise 15 SP 7

Updated to version 14.4.473.26

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

Red Hat Enterprise Linux 10.0

Updated to version 14.4.473.24

SUSE Linux Enterprise Server 16

Updated to version 14.4.731.6

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.
• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.
  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• Improved the ADP-RETX algorithm to avoid re-arming without performing a retransmission.
• The DOCA PCC NP application now enables the NIC to insert the RTT response transmit timestamp in hardware, reducing software-induced jitter and improving the accuracy and consistency of RTT measurements.
• The system-wide limit for DPA processes has been reduced to 30. This total includes both user processes across all GVMIs and internal ProgCC processes. The max_dpa_processes value reported to the user is calculated as: max_dpa_processes=30−number_of_progcc_processes
• Added  MAD (Management Datagram) access to the new  Adaptive Retransmission Histogram  registers. Users can configure the  histogram  by issuing  VSP MAD GET/SET operations to ADP_RETX_HISTOGRAM_CONFIG (0xC01D), and retrieve histogram data via VSP MAD GET to ADP_RETX_HISTOGRAM_READ (0xC01E) (using the required VSP MAD header values and TLV format). This enables configuring and collecting adaptive retransmission timeout statistics through the MAD interface.
• Host rate limiting has been extended to support bandwidth values above 255 Gbps. To remove the previous cap, a new max_bw_value_msb field was added to est_global, providing additional MSB bits to represent higher bandwidth values. With this enhancement, firmware and host tooling can correctly configure and report rate limits beyond 255 Gbps on high-speed links.
• PLDM now supports the PDR Repository Change event type, enabling notification to the BMC when PDRs change. With this flow, the BMC can detect cable insertion/removal events.
• Added support for running save and load operations in parallel, enabling multiple contexts (e.g., multiple VFs) to be checkpointed and restored concurrently instead of serially. This reduces overall migration time and improves scalability in environments that need to migrate or recover many VFs at once.
• Extended packet modify-header operations to support set and copy actions on the NVGRE VSID (Virtual Subnet Identifier) . A new field, TUNNEL_HDR_DW_2 (0x84), enables dynamic VSID modification, adding header rewrite support for NVGRE tunnel traffic in addition to existing filtering capabilities.
• Added a new output field, migration_state, to QUERY_VHCA_MIGRATION_STATE. Software uses this field to make live-migration flow decisions, specifically to signal when it is not a good time to transition into the stop-copy stage.

Ver. 1.0.4(G) contains updates to the firmware packaging and is functionally equivalent to ver. 1.0.4. It is not necessary to upgrade with Revision G if a previous component revision was used to upgrade the firmware to version 1.0.4.

This Linux component is compatible with Service Pack for ProLiant 2024.11.00.00.

Firmware Dependencies:

None

Enhancements/New Features:

Modified the ADC conversion formula based on the new layout design of Gen11 AMD platforms.  
Improved the accuracy of Fast Platform Triggering mechanism on AMD platforms.

Known Issues:

None

Ver. 1.0.4(C) contains updates to the firmware packaging and is functionally equivalent to ver. 1.0.4. It is not necessary to upgrade with Revision C if a previous component revision was used to upgrade the firmware to version 1.0.4.

Firmware Dependencies:

None

Enhancements/New Features:

Modified the ADC conversion formula based on the new layout design of Gen11 AMD platforms.  
Improved the accuracy of Fast Platform Triggering mechanism on AMD platforms.

Known Issues:

None

Added Following Enhancements:

[RedFish]:HPE specific SFP Data - Predicted days for non working stage

[Redfish]: API to read SFP Data
 

Added Azure local 24H2 support

Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.

Firmware Dependencies:

Enhancements/New Features:

This version of the Server Platform Services (SPS) Firmware contains the latest package for 4th and 5th Generation Intel Xeon Scalable Processors.

Known Issues:

• To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), a transition to the 2023 CA has been done. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.

  Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023".

• This release contains important reliability improvements and security hardening enhancements. HPE recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, and Factory Options. Extended Asset Tag support from 32 bytes to 64 bytes in RBSU and SMBIOS Type 2/3 records.

Added multi-language support (Chinese and Japanese) for RBSU setup menus, Boot Configuration, NVMe-oF configuration, Secure Boot configuration, and Factory Options. Extended Asset Tag support from 32 bytes to 64 bytes in RBSU and SMBIOS Type 2/3 records.

Extended Asset Tag support to 64 bytes on with new iLO firmware.