Intel R2224WFQZS Server System OFU Firmware 02.01.0015

This update package includes the following production-level system firmware updates:

- System BIOS - 02.01.0015
- ME Firmware - 04.01.04.601
- BMC Firmware - 2.88.6999d21a
- FRUSDR - 2.03
- Intel Optane DC Persistent Memory Firmware - 01.02.00.5446

Important notes:

- OFU utility with flashupdt tool does not support PMEM FW update, please refer to "PMEM_Update_Intructions.txt" part of this package for instructions to update PMEM.
- This SFUP package includes the FW 01.02.00.5446 for Intel Optane DC Persistent Memory (PMEM), if you received your PMEM DIMMs with a different FW, please install this one.
- This Update package must be installed using Intel One-boot Flash Update (OFU) V14.1 Build 28
- Starting from BMC v2.86, BMC does not allow upload .key files and only accepts .pem file for SSL certificate.
- If uploaded SSL Certificate or Key files fail to format checking, BMC will remove the invalid format file before starting BMC EWS and re-generate a self-signed certificate to ensure the BMC EWS can boot up successfully. Please consult TA-1176 for more details
- Starting from BMC v2.88, Purley platfomrs only support SSL certificate which is equal to or longer than 2048 bit.
- A security issue was fixed in Purley platforms. BMC credential is required to access files in internal virtual media from BMC v2.88.
- Issue:[Internal Virtual Media] Files in internal virtual media are accessible without BMC credential
- Starting from BMC v2.88, EWS Active Directory should allow domain name and user name longer than 16 characters.
- The AD Setting will be cleared after downgrade to v2.86 or lower BMC versions if the Domain Name is equal to or longer than 32 characters.
- Starting from BMC 2.22.59c3b83a, when KCS Policy Control Mode is configured as "Deny ALL" on BMC EWS, BMC and FRUSDR cannot be upgraded/downgraded as expected behavior.
- Updates can still be performed via Redfish or BMC EWS

Changes in BIOS:

- [HSD-ES]: [2103648679]CpPcRestrictedPkg/SetupBmcCfg: SUT can't log in the EWS when a user with a 20 characters password created in the BIOS setup
- [HSD-ES]: [15010712364]ServerCommonPkg/LogoLib: Update ITK BIOS, reset system, and then System hang up at black screen
- [HSD-ES]: [2103648106]PurleyPcPkg/RasPkg: fix UCE SEL log error location will change to CPU1 A1 when enable 'Enhanced Error Containment Mode' and inject UCE on CPU2 DIMM
- [HSD-ES]: [1509291833]PurleyPcPkg/Restricted: Remove AMT complete without error SEL as request
- [HSD-ES]: [2103641926]PurleyPcPkg/Uba/UbaMain/Dxe/TypeWolfPass/SmbiosDataUpdateDxe: code update to get NIC card firmware version via Firmware Management Protocol as UEFI spec.
- [HSD-ES]: [2103648077]CpPcRestrictedPkg/MdeModulePkg: Fix OS boot option disappear after BIOS load default
- [HSD-ES]: [1509670376]CpPcRestrictedPkg/UefiOpromSetup: BCM NIC card Oprom is disappeared in UEFI Option ROM control after BIOS load default
- [HSD-ES]: [15010671257][CCB3618]PurleyPcPkg/Platform: [Purley][BIOS]Boot Options must not be removed in case of DIMM error
- [HSD-ES]: [N/A]Update the copyright year to 2022 for BIOS release
- [HSD-ES]: [1509878788][Purley_R]Remove “callback” for User Privilege at BIOS setup.
- Server Management->BMC LAN Configuration->User Configuration->Privilege->User/Operator/Administrator/No Access, No Access is default setting;(Remove "Callback")
- [HSD-ES]: [2103641401][Purley][S2600WFR]The sensor name about "OEM System Boot Event - Asserted"is wrong.The sensor name should be "BIOS Evt Sensor", BMC2.83 & Frusdr 2.02 sensor name is "OOB FM update".
- [HSD-ES]: [N/A]PurleyPcPkg/StitchingPkg:Integrate SPS FW to E5_04_01_04_601_0 to Trunk
- [HSD-ES]: [15010197917][Purley-R][S2600WFR][CCB 3457]BIOS administrator password will not be bypassed when forced_EFI_boot or silent_forced _EFI_boot is detected.
- [HSD-ES]: [15010325485][Purley-R][S2600WFR]After flashed 0404 BIOS and reboot, there is critical error log in EWS for SPS FW Health and STATUS_LED blinking with orange.
- [HSD-ES]: [14014516556]CpRcPkg/Library/BaseMemoryCoreLib: [IPU 2021.2] Bit flip within the EEPROM SPD cells
- [HSD-ES]: [CCB3388][N/A]PurleyPcPkg/RasDxe: CCB3388 Add AMT Completion SEL
- [HSD-ES]: [N/A]PurleyPcPkg/StitchingPkg:Sync the NvmDimmDriver and NvmDimmHii driver to v01.00.00.3531
- [HSD-ES]: [N/A]PurleyPcPkg/StitchingPkg:Sync the BIOSACM version to Production v1_7_51_LBG and SINIT version to Production v1_7_51_LBG
- [HSD-ES]: [N/A]PurleyPcPkg/StitchingPkg:Integrate Microcode 0500320a for clx B1 and 0400320a for clx B0
- [HSD-ES]: [1509006992]PurleySktPkg: [IPU 2021.2] Reorder BSP to the lowest APICID
- [HSD-ES]: [N/A]CryptoPkg/OpenSSL: [IPU 2021.2] update OpenSSL to 1.1.1j in submodule
- [HSD-ES]: [N/A]CryptoPkg/OpenSSL: [IPU 2021.2] Prepare for OpenSSL 1.1.1j upgrade
- [HSD-ES]: [1509254412][IPU2021.2Beta][Purley-R][Regression][FIXED_IPU2021.2Beta] Ghosted WBINVD breaks CRAM mode loading of ACM, causing SUT to reboot automatically when run getsec64.efi -l SENTER -i with TXT enabled
- [HSD-ES]: [22013243504]PurleySktPkg/Library/ProcMemInit/Chip: [IPU 2021.2] bad DIMM causes all AEP fail to be mapped to OS , also destroys AEP config
- [HSD-ES]: [14014175540]PurleySktPkg/Library/ProcMemInit: [IPU 2021.2]Min_ops value is always 0 on various DIMM configs with SKX CPU
- [HSD-ES]: [18016024150]PurleySktPkg/SouthClusterLbg: [IPU 2021.2][Purley Refresh PCH LBG BIOS] Fixed Eva Lock option
- [HSD-ES]: [1509092847][IPU2021.1][Purley-R][FIXED_IPU2021.2][LEGACY] "EVA Registers Lock” BIOS option requires "Unlock all PCH Registers"=Disabled (OK) but then has no effect due to BIOS hard-coded to locked.
- [HSD-ES]: [22012968660]PurleySktPkg/Library/ProcMemInit/Chip/Mem: [IPU 2021.2][Purley-R][IFWI 2021.16.2.28] When memory exceeds MMIOH Base, set 1LM: SUT can't boot normally; set 2LM: can't recognize installed AEP DIMM.
- [HSD-ES]: [22012950705]PurleyR: [IPU 2021.2] Grantley/Purley potential arbitrary code execution during the Pre-Efi Initialization (PEI)
- [HSD-ES]: [N/A]CryptoPkg/IntrinsicLib: [IPU 2021.2] Fix possible unresolved external symbol issue
- [HSD-ES]: [22012713087]Package/Module: [IPU 2021.2] Log EWL4 major = WARN_FPT_CORRECTABLE_ERROR and minorCode = WARN_FPT_PPR_ROW_REPAIR for PPR independent flow
- [HSD-ES]: [22011708444]CpRcPkg/Library: [IPU 2021.2] Update AdvMemTest EWL Type5 log message to reflect Bank info
- [HSD-ES]: [14013604560]CpRcPkg/Library/BaseMemoryCoreLib: [IPU 2021.2] Avoid PPR flow for an invalid DIMM entry due to DIMM topology changes
- [HSD-ES]: [1509006992]PurleySktPkg: [IPU 2021.2] Reorder BSP to the lowest APICID
- [HSD-ES]: [22012611104]PurleySktPkg/Library/ProcMemInit: [IPU 2021.2] Update MRC DRAM_MIN_OPS table for CLX
- [HSD-ES]: [14013065992]CpRcPkg/Library/AdvMemTestLib: [IPU 2021.2] System was not able to boot when AdvMemTestOptions are disabled
- [HSD-ES]: [22011803204]CpRcPkg/Library/AdvMemTestLib, CpRcPkg/Library/BaseMemoryCoreLib: [IPU 2021.2] Track faulty channels per socket
- [HSD-ES]: [18012660214]: [ME][SPS][IPU 2021.2] HmrfpoExt_GetStatus () 0x03 is not supported in bios
- [HSD-ES]: [22012325949]PurleySktPkg/Library/ProcMemInit: [IPU 2021.2] Update Advanced Memory Test Pattern for SK Hynix
- [HSD-ES]: [22011800884]PurleySktPkg/Dxe/CrystalRidge: [IPU 2021.2] CR MGMT Driver does not connect NvmDimmHii Driver
- [HSD-ES]: [22012225842]PurleySktPkg/Library/ProcMemInit/Chip/Mem: [IPU 2021.2] Memory Map code enters infinite loop if installed system memory exceeds MMIOH Base
- [HSD-ES]: [22012172123]CpRcPkg/Library/AdvMemTestLib: [IPU 2021.2] Update AMT Pattern for Micron
- [HSD-ES]: [18014267290][SPS][IPU 2021.2] Nonce bytes can be read from HECI buffer
- [HSD-ES]: [22012804657]PurleySktPkg/Library/ProcMemInit/Chip/Mem: [IPU 2021.2]PMEM introduction causing random system reboots
- [HSD-ES]: [15010166283][Purley]espi_smi failed in the log while run "chipsec_main -vv" in windows2022 with chipsec 1.7.1
- [HSD-ES]: [15010119618][CCB3401][CCB3399][Purley]CCB 3401 Add support for MCTP feature for Purley products
- [HSD-ES]: [1509955185][Purley-R][CCB 3457][BIOS & BMC]Bypass BIOS admin password when FORCE_EFI_BOOT or SILENT_FORCE_EFI_BOOT is detected
- [HSD-ES]: [1509918561][Purley-R][CCB 3497][Purley]Update microcode for S2600BP as customer request
- [HSD-ES]: [1509377878]PurleyPlatPkg/Acpi: Change RMRR memory reserve type from AcpiNvs to EfiReservedMemoryType.
- [HSD-ES]: [1509880825][Purley][BIOS]there are lot of NVDIMM ACPI related logs displayed in Serial log even system without NVDIMM connected
- [HSD-ES]: [22013467511]Create Test BIOS for S2600BP with PCIe error detection disabled
- [HSD-ES]: [1509609474]S2600WF BIOS faied to update debug(developer) signed capsule when Active region was updated for debug BIOS from recovery jumper
- [HSD-ES]: [1509776978][Purley_R]SEL record wrong rank when inject SBE in second DIMM with ADDDC mode
- [HSD-ES]: [14014177411]PurleyPlatPkg/Acpi: Windows OS doesn't boot-up on S2600WF with RS3WC080 and VT-d enabled
- [HSD-ES]: [15010197917]CpPcRestrictedPkg: 3rd patch for bypass BIOS password issue.
- [HSD-ES]: [16015429421]PurleyPcPkg/Restricted: Hide MCTP options in BIOS Setup to avoid customer confuse as MCTP is not supported from BMC side, and it is not expected that customer to change the options.

Changes in BMC:

- Upgrade kernel to 4.9.294
- CCB3457:[BIOS & BMC]Bypass BIOS admin password when FORCE_EFI_BOOT or SILENT_FORCE_EFI_BOOT is detected
- CCB3458:[BMC]Active Directory should allow domain name and user name longer than 16 characters
- CCB3459:When updating BMC and BIOS, browser should limit search to .bin and .cap files respectively
- 1507285344 - Upgrade libxml2 from v2.9.8 to v2.9.9
- 2103650029 - Purley][S2600WF] the response is wrong for IPMI command Get DIMM Information (DIMM assert slot).
- 2103649750 - [S2600ST] After mounting a virtual media via iKVM and selecting the Device again, it will pop up a message "Exist an effective Connect from others ".
- 16015595685 -[Utilities] [SDPTool-4.0.0] [Purley] - Stress failure on IVM
- 2103648087 - [S2600ST] The device mount function on iKVM console menu Virtual Media > virtual storage can't be released.
- 15010737507 -[Purley][S2600BP] BMC doesn't check the ISO/IMG header when mount virtual media via WebISO
- 2103649160 - [Purley][ S2600WF / S9200WK ] The SEL has no description about "SPS FW Health" on EWS.
- 2103648972 - [Purley][S9200WK] the response is wrong for IPMI command Get DIMM Information (DIMM assert slot).
- 2103643376 - [S2600ST] [internal virtual media]After mount a internal VM in redfish and turn off iKVM,the mounted internal VM will be automatically unmounted in OS
- 15010705608 -[S2600ST] [Redfish]After mounting the ISO through redfish and then reset BMC, the EWS and redfish will hang up.
- 2103647672 - [Purley][S2600WF] Run DC/AC cycling with SP3RT040X16SPP Retimer card, port 1~3 connected nvme drives will be lost(drive LED is off). Fail rate 178/200
- 15010697059 -[Purley][S2600BP] Session will reach to the maximum if repeat login and then logout the BMC EWS Web
- 15010705258 -[S2600ST] [Redfish]When uploading a compressed file with Spaces or & in the file name via redfish, it only displays a file link in the OEM list.
- 15010704983 -[S2600ST] [Redfish]When a zip or gz file containing a folder is uploaded via redfish,the timestamp of some files are displayed as 1935.
- 2103648673 - [S2600ST] The policy suspend timers can't be disabled when change the Policy Suspend Timers from "Yes" to "No".
- 2103648677 - [S2600ST] The ISO/IMA file can't be mounted in the Virtual Media > virtual storage > Device 2/Device 3 after mounting a folder in Device 1.
- 2103648687 - [S2600ST] When select media type to ISO/IMG/IMA in virtual media over HTML5,all ISO/IMG/IMA files can't be displayed in the "ISO.IMG.IMA File" search mode.
- 2103648682 - [S2600ST] Chinese and English EWS help information does not match.
- 2103648097 - [S2600ST] After AC off SUT,the HTML5 KVM session doesn't give any prompts of disconnection.
- 2103647974 - [S2600ST] The LAN channel1/2 are missing in the EWS->IPv4 Network Settings when power off SUT.
- 15010550057 -[Purley]Unnecessary prompt pops up when upload 2048-bits certificate
- 16015511567 -[SDPTool][Purley][Internal Virtual Media] Files in internal virtual media are accessible without BMC credential
- 2103648046 - [Purley] [S9200WK] The EWS "NIC Information" and "Storage Information" can't detect any device with BMC 2.88.
- 2103647923 - [S2600ST] The client IPv6 address is not displayed on the EWS->Current Users page when login the EWS with a dynamic BMC IPv6 address.
- 1509875853 - [Purley][ Internal Virtual Media] Upload an encrypted file via Internal Virtual Media, the response is successful but no file can be accessed under OS
- 2103644460 - [S2600ST] The warning dialog box have some English words and missing a double quotation mark in Chinese EWS when upload a new SSL certificate
- 2103647768 - [Purley][S2600WF / S9200WK ] The BMC force update is failure with BMC 2.88.
- 2103647740 - [Purley][S2600WF] the FTF FSC function test fail with BMC 2.88.
- 22014214787 -MDR SendMsgBlock redundacy fail
- 14012941881 -[S2600BP]: PSU on 3 Compute Module system chassis is reporting 0% current out and PS status indicating "Power Supply AC lost"
- 15010173897 -[Purley][S2600BP] The complex password is abnormal with high level. (username: testuser2 / Password: 4rfv$RFVB)
- 15010183182 -[Purley][ Internal Virtual Media] Update BIOS via EWS/Redfish, the mounted image will be automatically unmounted to BMC
- 22014000969 -Incorrect BMC password logged in SEL; incorrect BMC user not logged in SEL
- 14014263553 -NVMe drive information on HSBP3/Drive2 appears duplicated with HSBP3/Drive1 on BMC Web console
- 2103644569 - Redfish: Use Postman tool to mount an "empty" txt file, it shows an extra string in the content of the mounted file
- 15010201274 -[Purley][Point release][CCB3478/3457] Cannot set Bypass BIOS password flag by ipmitool via LAN1/2
- 2103643169 - [Purley][S2600WF / S9200WK ]The Java Cert validity period is not match the release note for BMC v2.86
- 1509724299 - [Purley][S2600ST] Sometimes the web login event log is not logged in log file when login out EWS and login again.
- 1509724203 - [Purley][S2600ST] The client IP address displays the abnormal address "#011 "privilege": #011 "4"".
- 2103642881 - [S2600ST] The date and time is synchronized with the secondary NTP server when both the primary and secondary NTP server are configured
- 1509725178 - [Purley][S2600WF / S9200WK ]The SOL log view is no display after running "ls -lR" command.
- 2103643384 - [S2600ST][internal virtual media]The Oem list can only display 20 file links
- 2103643380 - [S2600ST][internal virtual media]Failed to download files from the internal VM to OS
- 2103643416 - Login to EWS with LDAP or AD users, there shows a new added "CPLD Update" option in the "Configuration" menu
- 2103643309 - [S2600ST] SUT will fail to connect to the SSH console after change default port number to other port
- 2103643393 - [S2600ST] it pops up an empty dialog box when replace a new certificate with 512 bits or 1024 bits in Chinese EWS
- 2103643315 - [S2600ST] The SSH console is still active when disable SOL SSH in EWS
- 2103642310 - [S2600ST] There is no link to channel 4 in redfish after enable HOST interface
- 2103642381 - [S2600ST] The boot order can't be changed via redfish
- 1508380544 - [SOW] BMC doesn't check the ISO image header when via HTML5 mount ISO image
- 1509357645 - [Purley][S2600BP] User can't use Redfish to replace/upload a new certificate instead of current one
- 1509357868 - [Purley][S2600BP]User can not use EWS to replace/upload a new certificate instead of current one
- 1509411390 - [Purley][S2600ST] KVM "mouse mode setting" screen in ews shows exceptions
- 1509439269 - [PURLEY] [BMC]lost dynamic IP after online update BMC 2.83
- 1509442200 - [BMC][purley]mixed up in get nvme information command
- 1509464162 - #CCB 3402: [Purley][S2600BP] The file of size larger than 33M cannot be uploaded to the newly image created via Redfish internal interface
- 1509486843 - #CCB 3402: [Purley][S2600BP] Unmount image is successful while the image is not mounted
- 2103641466 - [Purley][ S2600WF / S9200WK ]The UI for "anonymous" user is abnormal and can't be modified in EWS
- 2103641472 - [S2600ST] The Mount type is missing NFS in web ISO help page
- 2103641482 - [S2600ST] Alert events cannot all be selected when click "Check All" button in EWS->Configuration->Alerts page
- 2103641549 - [S2600ST] There is an extra character '<' in the Date&Time help page in the Chinese EWS
- 2103641607 - [S2600ST] There is a unknow item in EWS->Miscellaneous->Power Statistics
- 2103641618 - [S2600ST] there is missing size limitation definition for Virtual Media Over HTML5 help page in EWS
- 2103641755 - [Purley] [S9200WK] Open EWS -> Miscellaneous -> Power Statistics, it will pop-up a caution about NM initialization have problem. (BMC 2.83)
- 2103641774 - [S2600ST] KVM cannot open Via JRE due to JAVA certificate expired.
- 2103641816 - [S2600ST] The NTP server IP can't be set successfully when NTP server IP is xxx.xxx.xxx.1~9 in EWS
- 2103642274 - [S2600ST] Alert events cannot all be cleared when click "Clear All" button in EWS->Configuration->Alerts page page
- 2103642310 - [S2600ST] There is no link to channel 4 in redfish after enable HOST interface
- 2103642388 - [S2600ST] The EWS can't be opened when online update BMC from 2.48(upload new certificate) to 2.83
- 1509261003 - [S2600BP][L9][Showstopper]Exit Air Temp (#0x2E) CRITICAL event: Exit Air Temp reports the sensor is high, critical, and going higher state.
- 1509352602 - [Purley][S2600BP] ISO image mount via Redfish fail.
- 1509363546 - [Purley][S2600BP]User can not use Redfish to upload CA certificate success
- 1509118656 - [Purley][S2600ST] Get event log abnormal in EWS after updating BIOS
- 14012450677 -[S2600WF] system reboots by interacting with OS Watchdog
- 1507285344 - Upgrade libxml2 from v2.9.8 to v2.9.9
- 1509247112 - [PURLEY][BMC][IPS 00615607]redfish alerting has power on/off backwards
- 16013122517 -SDPTool [DEV] - SDR Upload issue
- 16012935938 -[Purley][S2600BP]When BMC is running factory image, try to update BMC, BMC backup image instead of primary image will be updated.
- 1509122866 - [Purley] [S2600WF] Can’t mount Virtual Media via Redfish.
- 2103639108 - [Purley][ S2600WF ]It reports PSU1 FAN fail in SEL after AC cycle with BMC 2.48.f831fbb5.
- 2103636406 - [Purley][ S2600WF ]The settings is no function for "BootSourceOverrideMode" in Redfish.
- 22012657916 -jQuery vulnerability affecting Wolf Pass
- 22012633532 -BMC EWS iKVM over HTML5 disconnects, when Date or Time is selected and keypad '+' [scan code 79] is press
- 2103635937 - Purley][ S2600WF ][900W DC] The PSU FW isn't match the BMC release note
- 2103636054 - [Purley][ S2600WF ][900W DC] The blackbox data shows “This feature is not supported by any power supplies in the system” in the BMC debug log file.
- 2103639150 - [Purley] S9200WK Some MemoryLocation info show "null" when check it by Redfish
- 1508892684 - [Purley][S2600BP] the warning message is incorrect while adding the same user name in EWS.
- 1508871269 - User can set the same username as the password when user sets username separately which mismatch Password Complexity rule

Changes in FRU/SDR:

- HSD 15010443289 [Purley][BMC]wrong chassis information in frusdr
- update BIOS sensor according to BIOS EPS v1.19
- add support for WCP HSBP G97166-XXX FXX8X25S3DPBP
- Remove the redundant character '2' of sensor string.

About Firmware Updates:

Applying a newer firmware version than the one already installed on your unit can bring various enhancements, include workarounds for diverse problems encountered by the device, and improve or add newly developed features.

On the other hand, downgrading the firmware version can recover the device's functionality in the event of a software update either turning up faulty or causing the unit's overall performance to drop. However, bear in mind that applying an older firmware isn't recommended and might not always be possible.

When it comes to the update steps, due to the large variety of devices and numerous ways for installing a new firmware, it is recommended that you carefully read and understand the upgrade steps, and consider applying a different firmware only when you have familiarized yourself with the update method.

As the installation process is most of the times quite risky, this step should be taken by users that have the ability to successfully complete the update; regular users may initiate it at their own risk. Moreover, it's best that this task be performed in a steady power environment such as the one ensured by a UPS unit.

Therefore, if you consider applying this release, hit the download button, take into account all the aforementioned aspects, and update the device's firmware. Also make sure you constantly check with our website to ensure that you don't miss a single new release.