...
On HPE Superdome Flex 280 Servers, HPE has implemented a mechanism to block firmware rollback (e.g., downgrade to a lower version is not allowed), to preclude possible roll-back attacks using vulnerabilities present in prior versions. Note: This mechanism is only implemented in specific firmware versions. For instance, server firmware version 1.20.204 will block a rollback to any lower version after version 1.20.204 is installed. If server rollback is blocked for the installed firmware version, an attempt to downgrade from that version will display the following error: Downgrade from the RMC CLI: Unpacking signed bundle.. Verifying bundle authenticity..Decrypting the firmware.. Unpacking the firmware.. ERROR: Rollback to this version is not allowed. Downgrade from SUM: Smart Update Manager Installation Log will show: Update error code Base.1.8.GeneralError, A general error has occurred. See Resolution for information on how to resolve the error. Extended error message: The firmware update could not start, because downgrading to this version is not permitted. Resolution: Do not downgrade to this version. Downgrade from OneView: The following will be displayed in OneView: Update firmware error Issue: The firmware update could not start, because downgrading to this version is not permitted, Resolution: Do not downgrade to this version
Any HPE Superdome Flex 280 servers running with specific firmware versions.
While downgrading firmware, if one of the above downgrade related errors is encountered, contact HPE support if it is necessary to downgrade. Only HPE support can force the downgrade. Note: HPE strongly recommends not downgrading the firmware to preclude possible roll-back attacks using vulnerabilities present in prior versions. Click on the following URL to locate the HPE Customer Support phone number in your country: TECHNICAL SUPPORT PHONE NUMBERS RECEIVE PROACTIVE UPDATES : Receive support alerts (such as Customer Advisories), as well as updates on drivers, software, firmware, and customer replaceable components, proactively in your e-mail through HPE Support Alerts. Sign up for Support Alerts at the following URL: HPE Email Preference Center NAVIGATION TIP: For hints on navigating HPE.com to locate the latest drivers, patches and other support software downloads, refer to the Navigation Tips document. SEARCH TIP: For hints on locating similar documents on HPE.com, refer to the Search Tips document.