C H A P T E R  2

Firmware Update Procedures

This chapter describes the processes for updating the firmware that resides on:

The Integrated Lights Out Manager (ILOM) firmware and the server’s system BIOS are always updated together. This is true even if one of their versions has not changed since the last software update.

The procedures to update the ILOM and BIOS are:


Determining the Service Processor IP Address

You use the Service Processor (SP) on your Sun Fire X4500/X4540 Server server for various firmware update tasks and you must use its IP address to access it. If you do not already know the Service Processor’s IP address, you must determine it.

There are several different methods you can use to locate ILOM SPs and their IP addresses.

1. Sun xVM Ops Center (a successor to N1 System Manager). It supports:

Online documentation for the Sun xVM Ops Center can be found at:

http://docs.sun.com/app/docs/doc/820-4504

2. DHCP server. Refer to the ILOM documentation for your ILOM version for instructions on how to determine the IP address of an SP.

3. Linux and Solaris open-source nmap command. The open-source nmap command provides a -p port option to scan for port 623, which can be used to quickly detect IPMI-enabled devices (such as your server’s SP) on a network. For example:

nmap -p 623 10.6.154.1/24


Determining Your Current Firmware Versions

There are three alternate procedures in this section that you can use:


procedure icon  To Access the CLI Through the Management Ethernet Port

See your server’s ILOM documentation for more detailed information on this procedure.

1. Connect an RJ-45 Ethernet cable to the NET MGT Ethernet port on the .

Establish an SSH connection using the following command:

# ssh -l root <sp_ip>

where <sp_ip> is the IP address of the server’s Service Processor.

Enter the default password when you are prompted:

changeme

2. After you have successfully logged in, the SP displays its default command prompt:

->

3. Type the version command, which returns output similar to the following:

-> version

SP firmware version: 1.0

SP firmware build number: 10644

SP firmware date: Tue Sep 13 12:50:37 PDT 2006

SP filesystem version: 0.1.13

The ILOM (SP) firmware version and build number are listed above.


procedure icon  To Access the CLI Through the Serial Port

1. Configure your terminal device or the terminal emulation software running on a laptop or PC to the following settings:

8N1: eight data bits, no parity, one stop bit

9600 baud

Disable hardware flow control (CTS/RTS)

Disable software flow control (XON/XOFF)

2. Connect a serial cable from the RJ-45 SER MGT port on the to your terminal device or PC.

3. Press Enter on the terminal device to establish a connection between that terminal device and the server’s SP.

The SP displays a login prompt.

SUNSP0003BA84D777 login:

Here, 0003BA84D777 is the Ethernet MAC address of the SP. This will be different for each server.

4. Log in to the ILOM SP and type the default user name (root) with the default password (changeme).

After you have successfully logged in, the SP displays its default command prompt:

->

5. Type the version command, which returns output similar to the following:

-> version

SP firmware version: 1.0

SP firmware build number: 10644

SP firmware date: Tue Sep 13 12:50:37 PDT 2006

SP filesystem version: 0.1.13

The ILOM firmware version and build number are listed above.


procedure icon  To Access the Web Interface

1. Connect to the ILOM Web interface by entering the IP address of the server’s SP in your browser’s address field. Use https://. For example:

https://129.146.53.150

2. Log in to the ILOM SP and type the default user name (root) with the default password (changeme).

The first Web page presented is the System Information -> Versions page, which includes the firmware version and build number.


Figure shows ILOM home page.


Downloading New Firmware

Download the flash image .ima file using these steps:

1. Browse to http://www.sun.com/download/

2. Locate the Hardware Drivers section.

3. Click the X64 Servers and Workstations.

4. Click the link for the Sun Fire X4500/X4540 Server Server software release version that you want.

5. Click Download.

6. Enter your Username and Password.

If you do not have a Username and Password, you can register free of charge by clicking Register Now.

7. Click Accept License Agreement.

8. Click the appropriate firmware image file name:

ilom.firmware.ima

For example:

ilom.X4500-2.0.2.5-r34717.ima


Flashing the ILOM/BIOS Firmware



caution icon Caution - ILOM enters a special mode to load new firmware. No other tasks can be performed in ILOM until the firmware upgrade is complete and the ILOM is reset. To ensure a successful update, do notattempt to modify the ILOM configuration, or use other ILOM Web, CLI, SNMP, or IPMI interfaces, during the flash update process. Wait until after the update succeeds before making further ILOM configuration changes. The update requires a system server and takes about 20 minutes.


 

There are three ways you can flash the ILOM/BIOS firmware:



Note - Due to increased memory use during Web GUI operations, you might find that using the ILOM GUI, which is the easiest procedure, will not work satisfactorily. In such a case, you will need to use the ILOM CLI load command or the N1 System Manager to flash the firmware.


Flashing the Firmware with the ILOM GUI

1. Log into the ILOM GUI by pointing your browser at the IP address of the Service Processor. Use https://. For example,

https://10.6.78.144

2. Select the Maintenance tab.

3. Select the Firmware Upgrade tab.

4. Click the Enter Upgrade Mode button.

5. Browse for the flash image file.

6. Click the Upload button.


Figure shows the ILOM Firmware Upgrade screen.

Flashing the Firmware With the ILOM CLI

1. Log onto the ILOM CLI through the Management Ethernet Port (see To Access the CLI Through the Management Ethernet Port) or the serial port (see To Access the CLI Through the Serial Port).

2. From the ILOM CLI, use the following command:

load -source tftp://tftpserver/ilom.firmware.ima

where tftpserver is the trivial file-transfer protocol (TFTP) server that contains the update and ilom.firmware.ima is the firmware image file, for example:

ilom.X6220-2.0.3.2-r26980.ima

Flashing the Firmware With the Sun xVM Ops Center

Online documentation for Sun xVM Ops Center can be found at:

http://wikis.sun.com/display/xvmOC1dot1/Home

Clearing CMOS Settings (Optional)

If you cannot get output to your serial console after the flash upgrade, you might have to clear CMOS settings. This is because your default CMOS settings might have been changed by the new BIOS upgrade.

To clear CMOS settings, use the following commands (in this example, the default username, root, and the default password, changeme, are used):

ipmitool -U root -P changeme -H SP-IP chassis power off
ipmitool -U root -P changeme -H SP-IP chassis bootdev disk clear-cmos=yes

where SP-IP is the IP address of the service processor.


Resetting the Service Processor

After flashing the ILOM/BIOS firmware, you must reset the ILOM SP.

To reset the ILOM SP, you can do any of the following:


Figure shows the ILOM Reset SP screen.

reset /SP

ipmitool -U root -P password -H SP-IP bmc reset cold

where SP-IP is the IP address of the service processor.

For complete details, see the ILOM documentation for your server.


Recovering From a Failed Flash Update



caution icon Caution - The last ILOM firmware released for your server must be used to recover from a failed flash update.


Use the following procedure to recover from a failed firmware update.



Note - In a small percentage of cases (such as when no output is displayed on the SP serial port), the Service Processor must be replaced.


Prerequisites



Note - Numbers in the text below are in hexadecimal unless otherwise noted.


Recovery Steps



Note - The U-Boot recovery procedure applies only to the X4500 system.


1. Determine whether the ILOM SP first-level booter (referred to in this procedure as U-Boot) is intact. Follow documented procedures to connect to the SP serial port, apply power to the system, and observe the initial ILOM boot messages.

Refer to Sun Fire X4500/X4540 Server Installation Guide for details.

2. Enter the ILOM SP U-Boot command interpreter with xyzzy.

When the message, Booting linux in 2 seconds... is displayed, during ILOM initial boot, type xyzzy to enter the U-Boot command interpreter.



Note - You have only 2 seconds to enter xyzzy. The characters typed will not echo. Cutting and pasting the characters improves the chance of success. You might need to try the process of applying power to the system and entering xyzzy several times.


3. Disable automatic reboot.

Set the U-Boot environment variable, bootretry, to -1 to temporarily disable automatic reboot:

set bootretry -1

4. Configure the network for TFTP access.

a. Copy the ILOM SP firmware image to a TFTP server that is accessible on the same IP subnet as the ILOM SP network port.



Note - If the ILOM SP and TFTP server are not on the same IP subnet, set the gatewayip and netmask variables:
set gatewayip a.b.c.d
set netmask e.f.g.h
where a.b.c.d is the router IP address and e.f.g.h is the netmask for the subnet.


 

b. Set the IP address for the ILOM SP and the TFTP server IP address by setting the ipaddr and serverip U-Boot variables.

set ipaddr n.n.n.n
set serverip n.n.n.n

c. (For modular chassis and blades only) Run the U-boot command mii:

mii write 4 0 2000

This command, which sets the Ethernet port to 10 Mb full duplex, is required for the SP on any blade and the CMM on any chassis.

5. Use the U-Boot tftp command to download the ILOM firmware image into RAM, beginning at location 100000. Using this address guarantees that you will not overwrite any part of the flash images.

tftp 100000 ilom.firmware.ima

where ilom.firmware.ima is the image file, for example,
ilom.X6220-2.0.3.2-r26980.ima



Note - If the TFTP server or filename is incorrect, you might need to enter Ctrl-C to halt the tftp command, then repeat this recovery procedure.


Be sure that the complete flash image is actually downloaded successfully before proceeding. You should see a message similar to:

=> tftp 100000 ilom.X6220-2.0.3.2-r26980.ima
Using FCC1 ETHERNET device
TFTP from server 10.6.154.8; our IP address is 10.6.154.99
Filename ’ilom.X6220-2.0.3.2-r26980.ima’.
Load address: 0x100000
Loading:
###########################################################
###########################################################
###########################################################
###########################################################
##########################
done
Bytes transferred = 14680064 (e00000 hex)

6. Confirm that the download succeeded:

a. Confirm that the tftp command output ends with
Bytes transferred = ByteCount

The size in bytes of the firmware image depends on the ILOM version. For ILOM 1.1.x and later, the size is 14 Mb (14680064 bytes, or e00000 in hex). For ILOM 1.0.x, the size may be 13 Mb (c80000) or smaller.

b. Use the U-boot md command (memory display) and confirm that its output displays strings from the beginning of the firmware image file. For example:

=> md 100000
00100000: 244d4f44 554c4524 01004000 00000200    $MODULE$..@.....
00100010: 00000000 000000f2 67726173 70000000    ........grasp...
00100020: 01000200 40000000 61000000 0000ffff    ....@...a.......
00100030: ffff0000 00000100 00000000 0000aa55    ...............U
00100040: 46575f56 45525349 4f4e3d31 2e302e31 FW_VERSION=2.0.3.2
00100050: 0a46575f 44415445 3d4d6172 20203320 .FW_DATE=Jan 3
00100060: 32303036 0a46575f 4255494c 4454494d    2008.FW_BUILDTIM
00100070: 453d3130 3a35363a 30370a46 575f4445    E=10:56:07.FW_DE
00100080: 53433d57 41524e49 4e47203a 20554e4f    SC=WARNING : UNO
00100090: 46464943 49414c20 4255494c 44212120    FFICIAL BUILD!!
001000a0: 0affffff ffffffff ffffffff ffffffff    ................

7. Erase the existing ILOM flash image:



caution icon Caution - Interrupting the flash recovery process from this point onwards, or entering an incorrect U-Boot command, might result in a disabled service processor, which will require replacement. DO NOT stop or remove power from the system from this point onward.


a. Use the U-boot erase command to erase existing firmware images:

=> erase fe200000 ffffffff

A series of dots will appear, indicating the progress of the erasure.

b. If you see the error message: Step Warning: protected sectors will not be erased! precede the erase command with the protect off command:

=> protect off fe200000 ffffffff

=> erase fe200000 ffffffff

c. If a failure occurs, retry the erase command repeatedly until it succeeds.



Note - If a persistent failure occurs, the service processor is not flash-upgradable, and must be replaced. Refer to Sun Fire X4500/X4540 Server Service Manual, for details on replacing the service processor.


8. Load the new ILOM firmware image:

a. Use the U-Boot cp.b command to copy the new ILOM firmware image from the download location:

cp.b 100000 StartAddress ByteCount

For a 14 Mb byte count image file:

=> cp.b 100000 ff200000 e00000Copy to Flash .............................................................................................................................................done


Note - If the firmware file size (byte count) is not 14 Mb (e00000), use
(ffffffff - bytecount + 1) as the starting address. For example with a 12.5 Mb file (c80000), you would use cp.b 100000 ff380000 c80000.


b. Use the U-Boot fmh command (firmware module header) to verify that the copy succeeded and to view the new ILOM firmware image location.



Note - Do not attempt to reset the service processor before you have verified that the cp.b copy has succeeded.


The fmh command should display firmware sections. For example:

=> fmhListing FMH ModulesFlash Size : 32768 KBErase Size : 64 KBSector Count : 512FMH Located at 0xff200000 of Size 0x00020000Name : graspVer : 1.0Type : 0x0002Flags : 0x0000Size : 0x00000061Location: 0xff380040LoadAddr: 0xffffffffCheckSum: Not Computed--------------------------------------------------FMH Located at 0xff3a0000 of Size 0x00120000Name : sysbiosVer : 1.31Type : 0x0000Flags : 0x0100Size : 0x00100000Location: 0xff3c0000Flash Upgrading Your Server to Release 1.1 13LoadAddr: 0xffffffffCheckSum: Valid--------------------------------------------------FMH Located at 0xff4c0000 of Size 0x000c0000Name : osimageVer : 1.0Type : 0x0006Flags : 0x0119Size : 0x000ac9c8Location: 0xff4c0040LoadAddr: 0x00c00000CheckSum: Valid...1


Note - If the fmh command output does not show anything, you may have entered an incorrect memory address. Repeat the tftp, erase and cp.b commands (repeat from step 5) until the image is properly copied. Note that you must erase the existing firmware image before attempting to copy a new image.


9. Reset the ILOM service processor.

Once you are certain that the service processor firmware image has been recovered, you can restart the service processor with the U- boot reset command.

=> reset

The SP should boot correctly.

10. When the SP has booted all the way to the linux login prompt, log in with the following

Username: sunservice

Password: changeme

Remember, you will have lost all configuration data after performing the flash update.

11. Restore the /coredump partition with this command:

/usr/local/bin/format_coredump

The format_coredump program might be named something like: format_coredump.galaxy.2M, but there is only one such program in /usr/local/bin. Enter ls /usr/local/bin to see a list of programs and run whichever one is there.

12. Recover the system BIOS.



Note - This manual ILOM SP recovery process does not reflash the system BIOS. Repeat the firmware upgrade process, using the ILOM Web Interface or CLI procedures as described in Flashing the ILOM/BIOS Firmware.


13. Reset your service processor and BIOS configuration settings as needed, because they might be lost during this recovery.


Downgrading to a Previous ILOM Release

Should you use this update and later find that you need to downgrade to a previous release, you may need perform the flash downgrade twice to reformat the flash layout to the old format. If so, a message will prompt you. This is not a failure. Just repeat the procedure as instructed and the process will succeed.

Figure shows the ILOM Launch Redirection screen.

Figure shows the JavaRconsole Devices menu.