1. Securing Systems and Attached Devices in Oracle Solaris 11.4
  2. Protecting Oracle Solaris System Integrity
  3. Using Verified Boot
  4. SPARC: Firmware Upgrade for Verified Boot

SPARC: Firmware Upgrade for Verified Boot

SPARC firmware is installed at the factory. For some SPARC platforms, an expanded bootblock is incompatible with verified boot functionality. If the verified boot level is set to enforce, the system will not boot, and messages similar to the following display: 

WARNING: Total size of bootblk fcode greater than expected
FATAL: Bootblk fcode extraction failed
Missing cmn-xxx[ caused cmn-append with 'verified boot policy = 
enforce, halting boot' argument to fail

If the verified boot level is set to warning, messages similar the following display: 

WARNING: Bootblk fcode extraction failed
WARNING: Signature verification of boot-archive bootblk failed

Update the firmware on SPARC systems where verified boot is enabled as follows:

  • T5-Series, M5-Series, and M6-Series – Upgrade to firmware 9.6.5 or later.

  • T7-Series and M7-Series – Upgrade to firmware 9.7.1 or later.

  • Fujitsu M10 – Upgrade to XCP 2320 or later.

To update firmware, see the fwupdate(1M) man page.