Loading...
Loading...
When HPE Integrated Lights-Out 7 (iLO 7) on HPE ProLiant Compute Gen12 systems configured to operate in the Commercial National Security Algorithm (CNSA) security mode, firmware updates are not supported.This limitation applies to all HPE firmware update solutions, while the HPE Gen12 compute module is under CNSA security mode that consume the HPE Service Pack for ProLiant (SPP) for HPE ProLiant Gen12, including:HPE Smart Update Manager (SUM)Individual Component FWPKGHPE OneViewHPE Compute Ops Management (COM)Any HPE Gen12 compute module with HPE iLO 7 operating in CNSA security modeIndividual Component FWPKGHPE Smart Update Manager (SUM)HPE OneViewHPE Compute Ops Management (COM)The firmware components packaged in the current Gen12 SPP are distributed as FWPKG files that are RSA-signed and are not dual-signed for CNSA operation.As a result, firmware updates using the Gen12 SPP are not supported when iLO 7 is operating in CNSA mode.
Any HPE ProLiant Compute Gen12 server with HPE iLO 7 operating in CNSA security mode.This is only applicable for Gen12 under CNSA mode.
For a limited set of components, the firmware binary (.bin) can be extracted from the FWPKG package and uploaded directly to iLO.This approach is currently applicable only to components whose firmware binaries are signed using the LMS algorithm, specifically:iLOThis method:Is not supported for the remaining firmware components included in the Gen12 SPP.Is a direct component update through iLO and is outside the HPE Smart Update Manager (SUM), HPE OneView, and HPE Compute Ops Management (COM) firmware update workflows.However, for other individual components in FWPKG form factors, the individual component firmware update is not supported while the Gen12 compute module is under CNSA mode. Examples:BIOSCPLDSmart Array ControllersFrom the firmware update solutions perspective, Gen12 SPP-based firmware updates are not supported when HPE iLO 7 is operating in CNSA security mode.If firmware updates are required while operating in CNSA mode, only use supported update methods for individual components where applicable until dual-signed firmware packages become available.
Operating Systems Affected:OS Independent
Click on a version to see all relevant bugs
Hewlett Packard Enterprise Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.