Supermicro Bios Password / Softlayer

[XeonSam]

I know this is an old post but I'm having problems with the same OEMs (Softlayer).

It's a X11 though and these instructions don't seem to work in regards to updating BIOS or BMC. I get error messages in UEFI shell, IPMI and in DOS. I know as of X11, you can't use DOS anymore to update the firmware (BIOS), however, reseting the IPMI password works very well. The default password works now; just no BIOS or BMC updates.

Does anyone have experience with these systems?

Server: SYS-6019U-TN4R4T
Board: X11DPU

 

[RolloZ170]

The default password works now; just no BIOS or BMC updates.

BIOS

Firmware Resources | Support

Firmware Resources | Support Download Supermicro resource.

www.supermicro.com

 

[XeonSam]

Yep. This is the download I used to try to update the BIOS. Doesn't flash.

 

[RolloZ170]

Yep. This is the download I used to try to update the BIOS. Doesn't flash.

error msg ?
the BMC may use different valuation keys for the BIOS verifications.
flashing the BMC and BIOS with usb programmer is required.

 

[RolloZ170]

Yep. This is the download I used to try to update the BIOS. Doesn't flash.

is the board X11DPU or X11DPU-XLL or X11DPU-Z ?

I know as of X11, you can't use DOS anymore to update the firmware (BIOS),

the SM downloads for BMC iclude still AdUpdate.exe, AwUpdate.exe
Afaik X11DPU is not a RoT system.

 

[ajmal017]

Do we have other bios versions of nutanix x11dpu-g6-ni22 - default supermicro gives error - secure flash not supported

 

[RolloZ170]

Do we have other bios versions of nutanix x11dpu-g6-ni22

afaik no. and if you want new BIOS you must definitely sell your soul for it.

 

[ajmal017]

I booted with a old bios new bios still it seems to go into continuous reboot - might be other than bios issue exist

 

[ajmal017]

I booted with a old bios new bios still it seems to go into continuous reboot - might be other than bios issue exist

Watch Dog Enable/Disable
Watch Dog (JWD1) is a system monitor that can reboot
the system when a software application hangs. Close
Pins 1-2 to reset the system if an application hangs. Close
Pins 2-3 to generate a non-maskable interrupt signal for
the application that hangs. See the table on the right for
jumper settings. Watch Dog must also be enabled in the
BIOS

 

[ajmal017]

Watch Dog Enable/Disable
Watch Dog (JWD1) is a system monitor that can reboot
the system when a software application hangs. Close
Pins 1-2 to reset the system if an application hangs. Close
Pins 2-3 to generate a non-maskable interrupt signal for
the application that hangs. See the table on the right for
jumper settings. Watch Dog must also be enabled in the
BIOS

Eventually, I found a little bit strange solution: just leave watchdog jumper (JWD1) open (with neither NMI nor hard-reset selected).

 

[chlastakov]

Just bought few SYS-6019U-TN4R4T with X11DPU. Same problem as @XeonSam have. Tried everything except CH341A programmer. I was tempted to try it too, but then I found out I have 5V version, not 3.3V I need and with my eyes I'm unable to modify it. Ordered new v7 with voltage switch, will see then.

Is there another way I can try before using programmer? Is there procedure somewhere written in this forum how to connect and reprogram in Linux? Couldn't find out. I'll be glad for any help.

 

[chlastakov]

Well, looks like even with CH341A I can't bypass write protection.

sudo ./flashrom --progress --programmer ch341a_spi -w BIOS_X11DPU-091C_20240305_4.3_STD.bin
flashrom v1.5.1 on Linux 6.11.0-25-generic (x86_64)
flashrom is free software, get the source code at https://flashrom.org

Found Macronix flash chip "MX25L25635F/MX25L25645G" (32768 kB, SPI) on ch341a_spi.
===
This flash part has status UNTESTED for operations: WP
The test status of this chip may have been updated in the latest development
version of flashrom. If you are running the latest development version,
please email a report to flashrom@flashrom.org if any of the above operations
work correctly for you with this flash chip. Please include the flashrom log
file for all operations you tested (see the man page for details), and mention
which mainboard or programmer you tested in the subject line.
You can also try to follow the instructions here:
https://www.flashrom.org/contrib_howtos/how_to_mark_chip_tested.html
Thanks for your help!
Reading old flash chip contents... 
[READ: 100%]...done.
Updating flash chip contents... 
FAILED at 0x00001000! Expected=0xff, Found=0x00, failed byte count from 0x00001000-0x00001fff: 0x7b6
ERASE FAILED!
Erase/write done from 0 to 1ffffff
Write Failed!Uh oh. Erase/write failed. Checking if anything has changed.
Reading current flash chip contents... 
[READ: 100%]...done.
Apparently at least some data has changed.
Your flash chip is in an unknown state.
Please report this to the mailing list at flashrom@flashrom.org or
on IRC (see https://www.flashrom.org/Contact for details), thanks!

Is there a way how to flash this BIOS chip?

 

[RolloZ170]

Well, looks like even with CH341A I can't bypass write protection.

sure it can. mostly it is bad connection (cheap clamps)

Is there a way how to flash this BIOS chip?

plan B is desoldering.

 

[chlastakov]

Spent whole night with it, but finally was able to flash latest Supermicro BIOS without desoldering. I don't know if there is problem with Linux or programmer SW, but only way I made it work was on WIndows and with Neo Programmer.

 

[sporkman]

Just bought few SYS-6019U-TN4R4T with X11DPU. Same problem as @XeonSam have. Tried everything except CH341A programmer. I was tempted to try it too, but then I found out I have 5V version, not 3.3V I need and with my eyes I'm unable to modify it. Ordered new v7 with voltage switch, will see then.

Is there another way I can try before using programmer? Is there procedure somewhere written in this forum how to connect and reprogram in Linux? Couldn't find out. I'll be glad for any help.

Is manual flashing the only step? We bought one of these Softlayer boxes for work from some Ebay seller "UnixSurplus" who we'll never use again. They sold this as a Supermicro box with a) no note that it's not stock Supermicro, b) that the BIOS is locked to an old/insecure version and c) they put a sticker on top of the case opening that claims their "warranty" (30 days, woo!) is void if you open it (also not disclosed in the listing).

I don't know who's crazy enough to stick a used box in their rack with the stipulation that you can't even inspect its guts, but I'm not one of them. But they're just not responding to messages via ebay, which I assume means we're stuck selling this to someone who doesn't care about the old BIOS. Of note there are multiple 8+ level CVEs on the current BIOS that Supermicro has patched. I suspect someone has a way to unlock this without a manual flash, but it must be super-proprietary.

Anyhow, I'd say avoid Unix Surplus.

 

[chlastakov]

I'm not aware there is another way than direct programming ob BIOS chip, but surely if someone knows how, I would be very thankful for that information.

 

[sporkman]

Anyhow, I'd say avoid Unix Surplus.

I'm going to mostly take that back - they eventually got back with us and found a board from a non-locked server to send us. I do appreciate that - I did not want to ship this giant thing back and then start my shopping all over again, but man, this could have all been avoided if they'd disclosed this in their listings.

What's interesting is that the BIOS locked/modified for IBM can't differ too much - I'd expect different version numbers if functionality meaningfully diverged from "stock" BIOS, but I see my IBM/Softlayer BIOS version does match a (much older) official version that's noted in the release notes. Supermicro or IBM should really just allow people to unlock this old stuff. The used market is real, and crippling machines you sell to liquidators is just skeevy behavior on IBM's part.