Fujitsu Futro S920 Thin Client as opnsense firewall

[geo999]

anyone has password or decrypted EditCmos.exe from https://ftp.kontron.com/main.html ?
EditCmos_V5.01.zip looks to be encrypted with WinZip10
Other tools look to be there but everything is encrypted

Thank you

 

[Samir]

Too bad IOMMU is not available on this chips, can't pass through PCIe network card on Proxmox.

Linux version 5.15.30-2-pve (build@proxmox) (gcc (Debian 10.2.1-6) 10.2.1 20210110

DMI: FUJITSU FUTRO S920/D3313-G1, BIOS V4.6.5.4 R1.16.0 for D3313-G1x 08/13/2018
CPU0: AMD GX-222GC SOC with Radeon(TM) R5E Graphics (family: 0x16, model: 0x30, stepping: 0x1)

[ 7.060633] AMD-Vi: AMD IOMMUv2 functionality not available on this system - This is not a bug.

vendor_id : AuthenticAMD
cpu family : 22
model : 48
model name : AMD GX-222GC SOC with Radeon(TM) R5E Graphics


It would make an interesting Proxmox low power device to work with, OpenWRT on top of Proxmox and another low power VM to leave running 24/7.

The unit I have has a GX-424CC processor, so that may have the capability.

 

[Samir]

anyone has password or decrypted EditCmos.exe from https://ftp.kontron.com/main.html ?
EditCmos_V5.01.zip looks to be encrypted with WinZip10
Other tools look to be there but everything is encrypted

Thank you

I did some quick searches and it seems that no one has posted this anywhere that I can find and even previous versions of this tool are also encyrpted. You may need to use one of the 'zip password recovery' type tools, but if the password was well thought out, I don't think even these tools will work.

 

[geo999]

The unit I have has a GX-424CC processor, so that may have the capability.

222GC and 424CC looks to be very similar, if 424CC has this feature it might be because it's enabled in BIOS by default and since we do not have tools to activate the option it's not going to be available on 222GC.

https://www.cpu-world.com/Compare_CPUs/AMD_GE222GITJ23JB,AMD_GE424CIXJ44JB/?

 

[Samir]

222GC and 424CC looks to be very similar, if 424CC has this feature it might be because it's enabled in BIOS by default and since we do not have tools to activate the option it's not going to be available on 222GC.

https://www.cpu-world.com/Compare_CPUs/AMD_GE222GITJ23JB,AMD_GE424CIXJ44JB/?

I was going to check the 2 cpus there too, but then realized that the instruction we are looking for won't be listed there as it is too specific.

It could be or even enabled/disabled in a bios release. But if the cpu itself doesn't have the instruction, then it's just not possible like on the 222GC.

 

[infojunky]

No IOMMU on the GX-424CC either.

[ 1.914672] AMD-Vi: AMD IOMMUv2 functionality not available on this system - This is not a bug.

hardware watchdog mentioned in the docs also seems turned off by default
[ 7.691847] sp5100_tco: SP5100/SB800 TCO WatchDog Timer Driver
[ 7.692076] sp5100-tco sp5100-tco: Using 0xfeb00000 for watchdog MMIO address
[ 7.692085] sp5100-tco sp5100-tco: Watchdog hardware is disabled

 

[Samir]

No IOMMU on the GX-424CC either.

[ 1.914672] AMD-Vi: AMD IOMMUv2 functionality not available on this system - This is not a bug.

Thank you for confirming this.

 

[infojunky]

Following up those terrible benchmarks I did months ago because I didn't have enough hardware hooked up.

iperf3 across 2 subnets on different ports of Dell i350-t4
Client is an i5-8350U Thinkpad T480 in Windows with onboard Intel NIC
Server is a second GX-424CC S920 running Linux with onboard Realtek NIC
There is a router doing switching in the path for both of these tests but it doesn't really affect the results

[ ID] Interval Transfer Bitrate
[ 5] 0.00-1.00 sec 99.9 MBytes 838 Mbits/sec
[ 5] 1.00-2.00 sec 112 MBytes 938 Mbits/sec
[ 5] 2.00-3.00 sec 111 MBytes 928 Mbits/sec
[ 5] 3.00-4.00 sec 111 MBytes 934 Mbits/sec
[ 5] 4.00-5.00 sec 112 MBytes 939 Mbits/sec
[ 5] 5.00-6.00 sec 112 MBytes 939 Mbits/sec
[ 5] 6.00-7.00 sec 112 MBytes 937 Mbits/sec
[ 5] 7.00-8.00 sec 112 MBytes 941 Mbits/sec
[ 5] 8.00-9.00 sec 112 MBytes 941 Mbits/sec
[ 5] 9.00-10.00 sec 112 MBytes 937 Mbits/sec
[ 5] 10.00-10.04 sec 4.28 MBytes 942 Mbits/sec

Browser speedtest on T480 across a house length of CAT6A
DOWNLOAD Mbps
936.72
UPLOAD Mbps
925.62
Ping ms
Idle Latency 6
Download Latency 5
Upload Latency 6

I pay for 940/920, this is about right.

OPNsense 22.1.10-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1q 5 Jul 2022
Receive side scaling enabled in tunables, adaptive PowerD profile
Hardware CRC, TSO and VLAN Hardware Filtering are enabled

If you have a GX-424CC you'll route gigabit as long as you don't use IDS/IPS. The adaptive PowerD profile causes a delay in ramping up speed but otherwise functions about the same as HiAdaptive and might have minor power savings.

 

[geo999]

has anyone managed to run this puppy on 12v ?
The auto range switch is mentioned, but, is it there ?, does it need 12v or a little more to trigger ?
The internal and barrel port seem to be connected directly to each other.

 

[Samir]

has anyone managed to run this puppy on 12v ?
The auto range switch is mentioned, but, is it there ?, does it need 12v or a little more to trigger ?
The internal and barrel port seem to be connected directly to each other.

I've wondered this myself, but since the motherboard seems to vary from the one in the docs, I didn't want to try it and risk breaking it. Although from the docs, it seems that 12v would be even more native than 19v/20v since it wouldn't need conversion.

I also found it very weird to have a limit of 5a for the power as most power supplies will only supply what the unit draws no matter what the ampage listed--or do I have that wrong?

 

[infojunky]

While my relative and I were waiting for extra NB-65B19 chargers to show up snail mail they spliced an Apple laptop brick to a barrel jack connection. I can't remember what the voltage was, probably 14v. To my surprise the device worked fine, I was able to restore a Windows image to an S920. My relative currently uses that unit as a test bench for some of the equipment they repair and they still use that Apple brick.

The 5A number is probably a design limit. They include that because if you plug a lot of stuff into the S920 you increase its power draw.

 

[Samir]

While my relative and I were waiting for extra chargers to show up snail mail they spliced an Apple laptop brick to a barrel jack connection. I can't remember what the voltage was but the device still worked and it was below the 19-20v spec.

The 5A figure is a warning for people plugging external devices into the S920.

Interesting tidbit.

The 5a warning is a 'not to exceed 5a' when using 19a/20a. The only thing I can think of is that current exceeding that will overload the converter to 12v.

 

[dellbell]

Would someone give me a clue how to find a plastic mini PCIe retainer part for my S920 Futro? My units have the plastic piece installed only in their mSATA slots, but the connectors in both are probably identical.

Just to be more clear, I mean the part opposite of the mSATA/mPCIe connector itself which locks the other end of mSATA /mPCIe cards to the mobo. I don’t really even know what the plastic retainer is called but the manufacturer seems to be Lotes and the part number is 155207. It’s roughly 7 mm high measured from the mobo surface.

As an alternative, I tried detaching one from an unused Futro’s mSATA slot but didn’t come off easily intact so I gave up for now.

Any tips?

 

[Samir]

Would someone give me a clue how to find a plastic mini PCIe retainer part for my S920 Futro? My units have the plastic piece installed only in their mSATA slots, but the connectors in both are probably identical.

Just to be more clear, I mean the part opposite of the mSATA/mPCIe connector itself which locks the other end of mSATA /mPCIe cards to the mobo. I don’t really even know what the plastic retainer is called but the manufacturer seems to be Lotes and the part number is 155207. It’s roughly 7 mm high measured from the mobo surface.

As an alternative, I tried detaching one from an unused Futro’s mSATA slot but didn’t come off easily intact so I gave up for now.

Any tips?

If you know the lotes part number, you should be able to get it at digikey, mouser, etc.

 

[dellbell]

If you know the lotes part number, you should be able to get it at digikey, mouser, etc.

Thanks, that’s a very good idea. Been searching for Lotes website and parts sites and so far I’ve probably found the part number for the mini-PCIe socket itself: LOTES AAA-PCI-047. Data sheets says its card height is around 7 mm which matches Futro pretty well.

No luck with the opposing plastic piece yet, but I’ll keep looking. I think what I previously assumed as its part number was some kind of a manufacturing date or serial number.

 

[Samir]

Thanks, that’s a very good idea. Been searching for Lotes website and parts sites and so far I’ve probably found the part number for the mini-PCIe socket itself: LOTES AAA-PCI-047. Data sheets says its card height is around 7 mm which matches Futro pretty well.

No luck with the opposing plastic piece yet, but I’ll keep looking. I think what I previously assumed as its part number was some kind of a manufacturing date or serial number.

You may need to check lotes's site itself and it may come as part of a bundle.

 

[oxide]

Can anyone with the GX-222GC CPU share what temps they hit with the passive cooler? Or if they have any cooling solution in place? My unit tends to hit ~85c (~27ish in my room) after replacing the thermal paste, no bandwidth through it just idling in the web UI of opnsense, wondering if I should do anything to help it out a lil. Ty!

 

[dellbell]

You may need to check lotes's site itself and it may come as part of a bundle.

Yep, I eventually found something concrete from some spare parts site. Fujitsu code for the plastic retainer is V26827-B443-V250 in case someone else wants to go for the original. Availability and prices in EU are so-so and I’ll purchase something similar but cheaper like generic stand-off pieces.

 

[Samir]

Yep, I eventually found something concrete from some spare parts site. Fujitsu code for the plastic retainer is V26827-B443-V250 in case someone else wants to go for the original. Availability and prices in EU are so-so and I’ll purchase something similar but cheaper like generic stand-off pieces.

Thank you for posting this. One thing you might look for is if someone has 3d printed one before as those can be cheaper.

 

[infojunky]

Can anyone with the GX-222GC CPU share what temps they hit with the passive cooler? Or if they have any cooling solution in place? My unit tends to hit ~85c (~27ish in my room) after replacing the thermal paste, no bandwidth through it just idling in the web UI of opnsense, wondering if I should do anything to help it out a lil. Ty!

I think there's something wrong your cooler mounting . I have my box mounted vertically with a cardboard stand to unblock some of the vents. GX-424CC stats: