Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.
supermicro support is your friend. be the first.
@RolloZ170 @ketiljo
Anyone received the fix for X11? If yes, please share.
I tried contacting them yesterday, but haven't received it till now.
Anyone received the fix for X11? If yes, please share.
I tried contacting them yesterday, but haven't received it till now.
they have two more customers, so give them time.
edit: can take up to two weeks for response, depends on your location.
Last edited:
@RolloZ170
I received the X10 fix in approx 4 hrs, but the X11 has taken more than 24 hrs and still haven't received the fix
I received the X10 fix in approx 4 hrs, but the X11 has taken more than 24 hrs and still haven't received the fix
Supermicro support is great.
I also got an update for X9. Seems working on X9SRI-F and X9DRT-HF, X9DRD-iF.
The engineer shared the same IPMIView_2.24.1_build.260611_bundleJRE like for X10.
"We have a release candidate FW 3.66 (attached to this message) and IPIMIView 2.24.1 both have a new certificate."
I got an attachement on the ticket.
Filename: SMT_X9_366.bin version: 03.66 Date: 06-12-2026
Java SOL Viewer version : 0.5.17
Java iKVM Viewer version : 1.69.41
Supported MBs: X9
1.
Category: Fix
Description:
IKVM fail to launch
Root cause:
STUNNEL certificate expired
Solution:
renew stunnel keys and certs
Impacted motherboard:
X9
Affected functions:
KVM
Validation:
1. Login to WEB and Launch console
It is too big for attaching to the forum, but here it is (it will expire in 1 week)
LimeWire: Share Files - Secure File Upload Platform
Upload and send files of any size quickly and securely. No account required to share your files, photos and videos.limewire.com
Can you upload this file agane?
Sure.
LimeWire: Share Files - Secure File Upload Platform
Upload and send files of any size quickly and securely. No account required to share your files, photos and videos.
limewire.com
Some X9 boards don't use stunnel SSL but my X9SRi-F does. This little pach helped to replace firmware SSL for stunnel GitHub - edsai/x9-bmc-cert-rebuild: Rebuild Supermicro X9 BMC firmware with fresh iKVM TLS certificates: fixes the 2026-05-17 cert expiry on EOL boards with no vendor update.
Is X9 firmware posted here provided by Supermicro?
If so, why do new X9 and X10 certificates differ?
If X9 firmware is from Supermicro, did anyone manage to connect via IPMIView after update?
For some reason, IPMIView 2.24.1 keeps old certificates and uses them when trying to connect to X9.
X9 lacks new client.key, which could be copied to folder c:\Program Files\SUPERMICRO\IPMIView\BMCSecurity, just like other server.crt and client.crt files that can be extracted from firmware using 7-Zip via path \etc\stunnel.
If so, why do new X9 and X10 certificates differ?
If X9 firmware is from Supermicro, did anyone manage to connect via IPMIView after update?
For some reason, IPMIView 2.24.1 keeps old certificates and uses them when trying to connect to X9.
X9 lacks new client.key, which could be copied to folder c:\Program Files\SUPERMICRO\IPMIView\BMCSecurity, just like other server.crt and client.crt files that can be extracted from firmware using 7-Zip via path \etc\stunnel.
It seems X9 and X10 was made on differect date and maybe by different suppport personel.
In previous comments there are links to updated IPMIView version, that has new cert. Is that not working? Those links point to supermicro file sendig service. Unfortunatelly X9 fw was attached to the ticket and not linked to their file sendig site, so I had to upload it to different place.
I don't use IPMIView btw. I prefer using OpenWebStart + java jre 1.8 for remote controlling my machines.
Edit: Ah I also tried IPMIView beta out and failed to connect. As I see it was created for X10, maybe the mentioned cert difference causes the issue.
In previous comments there are links to updated IPMIView version, that has new cert. Is that not working? Those links point to supermicro file sendig service. Unfortunatelly X9 fw was attached to the ticket and not linked to their file sendig site, so I had to upload it to different place.
I don't use IPMIView btw. I prefer using OpenWebStart + java jre 1.8 for remote controlling my machines.
Edit: Ah I also tried IPMIView beta out and failed to connect. As I see it was created for X10, maybe the mentioned cert difference causes the issue.
Last edited:
Update: I contacted Supermicro support, since I have a bunch of X9/X10/X11 boards, and they sent me instructions for an SFTP site, with credentials, within like an hour (props to them!).
I'm not sure I should post the details for the SFTP site without their permission, even though the username/password are generic.
I'm not sure I should post the details for the SFTP site without their permission, even though the username/password are generic.
you can share the files at least. but what should happen or have you signed NDA contracts ?
No NDA contracts.
Here's the link for the updated X9 and X10 BMC files: Download BMC_X10AST2400-C001MS_20260529_04.07_STD.zip | LimeWire
This link will expire in one week from now (and no I'm not gonna create an account on Limewire...)
azbest_hu, please describe how you connect to the X9 without IPMIView? Using launch.jnlp loaded in the System section?
I have Java Runtime Environment 1.8 installed. Why do I need OpenWebStart in this case? Java Runtime Environment 1.8 is sufficient to launch jnlp.
When I try to connect via launch.jnlp, I get a message that the libwin_x86_64__V1.0.7.jar file is missing. The link points to a path like https://ipmi_ip/libwin_x86_64__V1.0.7.jar, but the path actually points to a compressed version of the file https://ipmi_ip/libwin_x86_64__V1.0.7.jar.pack.gz. But I don't have this file at this path; I get a "404 - Not Found" error. At the same time, there are other files, for example, libwin_x86__V1.0.7.jar.pack.gz.
I have Java Runtime Environment 1.8 installed. Why do I need OpenWebStart in this case? Java Runtime Environment 1.8 is sufficient to launch jnlp.
When I try to connect via launch.jnlp, I get a message that the libwin_x86_64__V1.0.7.jar file is missing. The link points to a path like https://ipmi_ip/libwin_x86_64__V1.0.7.jar, but the path actually points to a compressed version of the file https://ipmi_ip/libwin_x86_64__V1.0.7.jar.pack.gz. But I don't have this file at this path; I get a "404 - Not Found" error. At the same time, there are other files, for example, libwin_x86__V1.0.7.jar.pack.gz.
I forgot to mention: you need 32 bit Java 1.8 jre, because those IPMI libs are 32bit.
Also you need OpenWebStart in 32 bit version.
Sorry about that.
In OpenWebStart settings - JVM manager, find local. And settings button: "do not download any version" to stop nagging about other java distributions.
And one more thing, because it has a deprecated tls alg
C:\Program Files (x86)\Java\jre1.8.0_451\lib\security\java.security
put those to the end of the file:
jdk.certpath.disabledAlgorithms=
jdk.jar.disabledAlgorithms=
jdk.tls.disabledAlgorithms=
I use OpenWebStart , because that started working with IPMI. And I just read about it on some page describing how to lanunch jnlp.
But now, I tried out it again and seems working with the jre provided javaws, like this:
C:\Program Files (x86)\Java\jre1.8.0_451\bin>javaws f:\temp\smicro\launch.jnlp
Last edited:
azbest_hu, thanks, the method with the 32-bit JRE worked.
It turns out that launch.jnlp downloads a new client.key to computer (this and other certificate files can be found in temporary user profile folder from which stunnel is launched).
So, to be able to connect to X9 via IPMIView, you need to replace the client.crt, client.key, and server.crt files in the c:\Program Files\SUPERMICRO\IPMIView\BMCSecurity\ folder. One caveat: by default, the latest versions of IPMIView will have a color rendering issue. Has anyone come up with a convenient solution for simultaneously using IPMIView with both X9 and newer systems, but still solving the color rendering issue for X9?
I've attached the certificate files just in case.
It turns out that launch.jnlp downloads a new client.key to computer (this and other certificate files can be found in temporary user profile folder from which stunnel is launched).
So, to be able to connect to X9 via IPMIView, you need to replace the client.crt, client.key, and server.crt files in the c:\Program Files\SUPERMICRO\IPMIView\BMCSecurity\ folder. One caveat: by default, the latest versions of IPMIView will have a color rendering issue. Has anyone come up with a convenient solution for simultaneously using IPMIView with both X9 and newer systems, but still solving the color rendering issue for X9?
I've attached the certificate files just in case.