I recently picked up a pair of HPE branded ConnectX-6 VPI NICs. Unfortunately, the cards are locked to HPE firmware, so I cannot update it with the latest firmware from Mellanox. So, I would like to cross-flash the cards to the standard Mellanox PSID. But it seems that there are some security features that are preventing this - I cannot access the flash with JP2 open, and the tools will not talk to the card with JP2 installed.
JP2 removed (open):
JP2 installed (shorted):
Just yesterday I was able to use the instructions from https://forums.servethehome.com/ind...ectx-3-en-with-stock-firmware.8689/post-80356 to cross-flashed a pair of ConnectX-5 NICs from an Oracle PSID to a Mellanox PSID - I had to short JP2 to place the cards in recovery mode to make this work, but there were no issues, aside from I was unable to find the .mlx firmware on the Mellanox site, but flashing with the .bin version worked just fine. So the OFED install is fine (it's running the latest, 5.4) and the drivers and what not are all installed correctly. Does anyone know what steps need to be taken to "un-secure" the card, or is this impossible on CX-6 (perhaps implemented with fuses or similar)?
JP2 removed (open):
Code:
$ sudo flint -d 01:00.0 query full
Image type: FS4
FW Version: 20.27.6202
FW Release Date: 23.6.2020
Part Number: P06250-B21_Ax
Description: HPE InfiniBand HDR100/Ethernet 100Gb 1-port 940QSFP56 x16 Adapter
Product Version: 20.27.6202
Rom Info: type=UEFI version=14.20.25 cpu=AMD64
type=PXE version=3.5.903 cpu=AMD64
Description: UID GuidsNumber
Base GUID: 98039b0300****** 4
Base MAC: 98039b****** 4
Image VSD: N/A
Device VSD: N/A
PSID: HPE0000000035
Security Attributes: secure-fw
Default Update Method: fw_ctrl
Life cycle: GA NON SECURED
$ sudo flint -d 01:00.0 hw query
-E- Failed to open Device: File exists. MFE_NO_FLASH_DETECTED
$ sudo flint -d 01:00.0 ri orig_fw.bin
-E- Failed to read image. Read image is not supported
$ sudo flint -d 01:00.0 dc orig_fw.ini
-E- Failed dumping Fw Configuration : Unsupported operation under Secure FW
Code:
$ lspci | grep Mell
01:00.0 Memory controller: Mellanox Technologies MT28908A0 Family [ConnectX-6 Flash Recovery]
81:00.0 Memory controller: Mellanox Technologies MT28908A0 Family [ConnectX-6 Flash Recovery]
c1:00.0 Ethernet controller: Mellanox Technologies MT27700 Family [ConnectX-4]
c1:00.1 Ethernet controller: Mellanox Technologies MT27700 Family [ConnectX-4]
$ sudo flint -d 01:00.0 query full
-E- Cannot open Device: 01:00.0. No such file or directory. MFE_ICMD_NOT_SUPPORTED
$ sudo flint -d 81:00.0 query full
-E- Cannot open Device: 81:00.0. No such file or directory. MFE_ICMD_NOT_SUPPORTED