Upgrading Lenovo Server Firmware using UpdateXpress


To install firmware upgrades on Lenovo servers requires ether

1) Accessing the WebUI via a server IMM port

2) Or, booting Linux / Windows and using the UpdateXpress System Pack Installer (UXSPI)

The UpdateXpress System Pack Installer (UXSPI) provides support for the following operations –

a. Download firmware and driver updates for supported machine type/operating system combinations over the Internet from a Support website.

b. Inventory a system to be updated and compare the inventory to the list of available updates, then recommend and deploy a set of updates for the system.

c. Create boot media on CD-ROM, DVD, or USB key for applying firmware to supported systems.

Using UpdateXpress System Pack Installer (UXSPI)

1. Find the server type and model by using the ASU (Advanced Settings Utility) tool.

$ sudo /opt/ibm/toolscenter/asu/asu64 show | grep SYSTEM_PROD_DATA
SYSTEM_PROD_DATA.SysInfoProdName=7912AC1
Our example server type is 7912, model AC1.

2. Compare the installed firmware versions on the server with the available firmware from Lenovo (use the acquire command in “report” mode)

%sudo /opt/ibm/toolscenter/uxspi/uxspi64 acquire -m 7912 –os=all –latest –report
Reporting acquisition status of updates for Machine-Type=7912 OS=”OS Independent”
Done
ibm_fw_dsa_dsyt97c-9.02_anyos_32-64 – Remotely available
ibm_fw_dsa_dsyta1n-9.21_anyos_32-64 – Remotely available
ibm_fw_dsa_dsytb30-9.30_anyos_32-64 – Remotely available
ibm_fw_imm2_1aoo36r-1.97_anyos_noarch – Remotely available
ibm_fw_uefi_tde124f-1.21_anyos_32-64 – Locally available
..
Reporting acquisition status of updates for Machine-Type=7912 OS=”ALL”
Done
brcd_dd_cna_3.2.0.0_windows_32-64 – Remotely available
brcd_dd_fc_bfa-3.0.0.0-c_rhel6_32-64 – Remotely available
brcd_dd_fc_bfa-3.0.0.0_rhel4_32-64 – Remotely available
brcd_dd_fc_bfa-3.2.0.0_rhel5_32-64 – Remotely available

3. Download and acquire our example package “ibm_fw_imm2_1aoo36r-1.97_anyos_noarch” –

%sudo /opt/ibm/toolscenter/uxspi/uxspi64 acquire -m 7912 –os=all –latest -i ibm_fw_imm2_1aoo36r-1.97_anyos_noarch

UpdateXpress System Pack Installer
Active Machine Type: NONE, OS: RHEL 6 (64 bit)
ibm_fw_imm2_1aoo36r-1.97_anyos_noarch … Done

All downloads successfully completed

4. Upgrade firmware

$ sudo /opt/ibm/toolscenter/uxspi/uxspi64 update -u -s all –local=/proj/systems/ibm/firmware/imm/ibm_fw_imm2_1aoo36r-1.97_anyos_noarch.xml –update-args=”IMM:–user=USERID –password=PASSW0RD”

Extracting…
Initializing, Please wait…

UpdateXpress System Pack Installer
Active Machine Type: 7912, OS: RHEL 6 (64 bit)
Gathering Inventory ………. done
Querying Updates done
Comparing Updates

(1) [*] Integrated Management Module 2 (IMM2) Update
Severity : Critical
Reboot : Not Required
Update ID : ibm_fw_imm2_1aoo36r-1.97_anyos_noarch
Requisites : None
New Version : 1.97 (1AOO36R)
Installed Version : 1.25 (1AOO26K)

Legend:
[*] – Update version is selected and will be installed
[ ] – Update version is deselected and will not be installed

Copying update files to temporary directory…

(1 of 1) Running Integrated Management Module 2 (IMM2) Update………………………………………………………………………………………………………………………… done

Finished applying selected updates

(1) Integrated Management Module 2 (IMM2) Update
Name: Integrated Management Module 2 (IMM2) Update
New Version: 1.97 (1AOO36R)
Reboot: Not Required
Requisites: None
Status: Successfully Installed

5. To validate the changes using the WebUI, the following IMM settings need to be enabled –

%sudo ./asu64 set IMM.SSL_Server_Enable Enabled
%sudo ./asu64 set IMM.CIMXMLOverHTTPS_Enable Enabled

To update IMM without configuring SSL, ssh can be used:
a) sslcfg -cert server -c US -sp “{State/Province}” -cl “{City/Locality}” -on “{Organization Name}” -hn “{IMM host name}”
b) sslcfg -server enabled

Leave a comment